Page MenuHome GnuPG

gnupg22Project
ActivePublic

Milestones

Members

  • This project does not have any members.
  • View All

Recent Activity

Mon, May 18

werner updated the task description for T8240: Double free in gpgsm's decrypt function..
Mon, May 18, 10:13 AM · gnupg22, Bug Report, gnupg26

Wed, May 13

werner changed the status of T8251: dirmngr may use an uninitalized struct in the DNS code. from Open to Testing.
Wed, May 13, 3:17 PM · gnupg22, gnupg26, dns, dirmngr
werner closed T8240: Double free in gpgsm's decrypt function. as Resolved.
Wed, May 13, 3:14 PM · gnupg22, Bug Report, gnupg26

Thu, May 7

werner triaged T8251: dirmngr may use an uninitalized struct in the DNS code. as Normal priority.
Thu, May 7, 9:14 AM · gnupg22, gnupg26, dns, dirmngr

Sun, Apr 26

werner moved T8240: Double free in gpgsm's decrypt function. from Backlog to WiP on the gnupg22 board.
Sun, Apr 26, 6:44 PM · gnupg22, Bug Report, gnupg26
werner changed the status of T8240: Double free in gpgsm's decrypt function. from Open to Testing.
Sun, Apr 26, 6:40 PM · gnupg22, Bug Report, gnupg26

Apr 16 2026

timegrid moved T7866: Allow separate LDAP keyserver for uploading from Backlog to WiP on the gnupg22 board.
Apr 16 2026, 5:34 PM · gnupg22, vsd33 (vsd-3.3.6), LDAP, Feature Request, gnupg26
timegrid moved T7866: Allow separate LDAP keyserver for uploading to Backlog on the gnupg22 board.
Apr 16 2026, 5:34 PM · gnupg22, vsd33 (vsd-3.3.6), LDAP, Feature Request, gnupg26
timegrid changed the status of T7866: Allow separate LDAP keyserver for uploading from Open to Testing.
Apr 16 2026, 5:33 PM · gnupg22, vsd33 (vsd-3.3.6), LDAP, Feature Request, gnupg26
timegrid changed the status of T7133: Add feature to load designated revoker from LDAP from Testing to Open.
Apr 16 2026, 5:00 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request
timegrid changed the status of T7133: Add feature to load designated revoker from LDAP from Open to Testing.
Apr 16 2026, 4:51 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request
werner moved T8197: "gpg --refresh-keys" aborts with "gpg: keyserver refresh failed: No data" if too many keys are missing on keyserver from WIP to Done on the gnupg26 board.
Apr 16 2026, 3:14 PM · gnupg22 (gnupg-2.2.54), Keyserver, gnupg26, Bug Report
werner closed T8197: "gpg --refresh-keys" aborts with "gpg: keyserver refresh failed: No data" if too many keys are missing on keyserver as Resolved.

Reporter has tested 2.5 - the code in 2.2 is identical; no need for separate testing

Apr 16 2026, 3:13 PM · gnupg22 (gnupg-2.2.54), Keyserver, gnupg26, Bug Report
werner changed the status of T8078: GpgAgent: trustlist.txt still requires LF on the last line from Open to Testing.
Apr 16 2026, 3:07 PM · gnupg22, Bug Report, gpgagent, gnupg26
werner moved T8078: GpgAgent: trustlist.txt still requires LF on the last line from Backlog to WIP on the gnupg26 board.

I reworked the reading using our dedicated line reading functions which is used at other places. Extra benefit is that the code now also prints a status line ERROR which gives information on the first faulty line. Thus gpg-connect-agent listtrusted /bye can be sued to quickly check for errors without configuring a log file.

Apr 16 2026, 3:02 PM · gnupg22, Bug Report, gpgagent, gnupg26
ebo moved T7133: Add feature to load designated revoker from LDAP from QA to vsd-3.3.6 on the vsd33 board.
Apr 16 2026, 2:19 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request
ebo moved T7133: Add feature to load designated revoker from LDAP from Backlog to QA on the vsd33 board.
Apr 16 2026, 2:18 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request
ebo moved T7133: Add feature to load designated revoker from LDAP from WiP to QA on the gnupg22 board.
Apr 16 2026, 2:18 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request
ebo edited projects for T7133: Add feature to load designated revoker from LDAP, added: vsd33; removed vsd34.
Apr 16 2026, 2:18 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request
ebo added a comment to T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate.

Without GpgsmCompatibility set and with the trust in the Root-CA established in the global trustlist file (the local one does not work for vs-complicane without GpgsmCompatibility=de-vs-trustlist , as expected), the compliance of a signature or decryption is now shown correctly and in accordance with the certificate status shown in Kleopatra. If the Root-CA is only trusted locally, the certificate and the signature are shown as "certified" resp. "not-compliant".
In short: everything works as expected if GpgsmCompatibility is not set.

Apr 16 2026, 2:02 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
timegrid removed a project from T7333: Allow gpg to auto-upload a new own key to LDAP servers: Info Needed.
Apr 16 2026, 12:22 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
timegrid moved T7333: Allow gpg to auto-upload a new own key to LDAP servers from QA to vsd-3.3.7 on the vsd33 board.
Apr 16 2026, 12:22 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
timegrid added a comment to T7333: Allow gpg to auto-upload a new own key to LDAP servers.

auto-key-upload should not be triggered on revocation cert import, so everything seems fine.

Apr 16 2026, 12:21 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
timegrid added a comment to T8222: Show RSA-PSS certificates as de-vs compliant in X.509 key listings.

Looks good to me on vsd-3.3.7-beta90.9 @ win10.

Apr 16 2026, 11:56 AM · gnupg22 (gnupg-2.2.54), Bug Report, S/MIME, gnupg26
timegrid added a comment to T7333: Allow gpg to auto-upload a new own key to LDAP servers.

Note: Keyserver has to start with ldap: for this to work, otherwise it is silently ignored.

Apr 16 2026, 11:12 AM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26

Apr 15 2026

timegrid added a project to T7333: Allow gpg to auto-upload a new own key to LDAP servers: Info Needed.

In general looks good to me on vsd-3.3.90.9 / gpg 2.2.54-beta4.

Apr 15 2026, 6:40 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
ebo added a comment to T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate.

with GnuPG-VS-Desktop-3.3.90.9-Beta-Standard gpgsm now never shows the line [GNUPG:] VERIFICATION_COMPLIANCE_MODE 23. Therefore Kleopatra always shows "not VS compliant" now on verification and decryption. Even though the certificate is shown a VS-compliant in the list an when encryping:

Apr 15 2026, 4:08 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
werner changed the status of T8078: GpgAgent: trustlist.txt still requires LF on the last line from Testing to Open.
Apr 15 2026, 3:05 PM · gnupg22, Bug Report, gpgagent, gnupg26
werner removed a project from T8078: GpgAgent: trustlist.txt still requires LF on the last line: gnupg24.
Apr 15 2026, 2:56 PM · gnupg22, Bug Report, gpgagent, gnupg26
ebo moved T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate from Backlog to QA on the vsd33 board.
Apr 15 2026, 2:48 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
werner added a comment to T8078: GpgAgent: trustlist.txt still requires LF on the last line.

gnupg22 received this patch meanwhile: rG7bc969d388086b4f3aeee3c5389b7baf055689d7

Apr 15 2026, 2:46 PM · gnupg22, Bug Report, gpgagent, gnupg26
werner changed the status of T8078: GpgAgent: trustlist.txt still requires LF on the last line from Open to Testing.
Apr 15 2026, 2:44 PM · gnupg22, Bug Report, gpgagent, gnupg26
werner changed the status of T8222: Show RSA-PSS certificates as de-vs compliant in X.509 key listings from Open to Testing.
Apr 15 2026, 2:44 PM · gnupg22 (gnupg-2.2.54), Bug Report, S/MIME, gnupg26
werner moved T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate from WiP to QA on the gnupg22 board.
Apr 15 2026, 2:43 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
werner added a project to T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate: vsd33.
Apr 15 2026, 11:56 AM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26

Apr 14 2026

werner moved T8222: Show RSA-PSS certificates as de-vs compliant in X.509 key listings from Backlog to WIP on the gnupg26 board.
Apr 14 2026, 5:20 PM · gnupg22 (gnupg-2.2.54), Bug Report, S/MIME, gnupg26
werner triaged T8222: Show RSA-PSS certificates as de-vs compliant in X.509 key listings as Normal priority.
Apr 14 2026, 5:18 PM · gnupg22 (gnupg-2.2.54), Bug Report, S/MIME, gnupg26

Apr 8 2026

Karl added a comment to T8197: "gpg --refresh-keys" aborts with "gpg: keyserver refresh failed: No data" if too many keys are missing on keyserver.

@werner I can confirm that we've tested the patch and it seems to fix the issue in our setup.

Apr 8 2026, 4:36 PM · gnupg22 (gnupg-2.2.54), Keyserver, gnupg26, Bug Report

Apr 7 2026

werner moved T8197: "gpg --refresh-keys" aborts with "gpg: keyserver refresh failed: No data" if too many keys are missing on keyserver from Backlog to WIP on the gnupg26 board.

Applied to master to be release with 2.5.19.

Apr 7 2026, 4:46 PM · gnupg22 (gnupg-2.2.54), Keyserver, gnupg26, Bug Report
werner changed the status of T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate from Open to Testing.
Apr 7 2026, 3:15 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
pl13 moved T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate from Backlog to WiP on the gnupg22 board.
Apr 7 2026, 1:38 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26
pl13 added a project to T8188: gpgsm: No error/warning on verification or decryption in case of trusted but not VS-compliant certificate: gnupg22.
Apr 7 2026, 1:37 PM · gnupg22 (gnupg-2.2.54), vsd33 (vsd-3.3.7), vsd, gnupg26

Mar 31 2026

ebo added a comment to T7333: Allow gpg to auto-upload a new own key to LDAP servers.

2.2.53 was released wit VSD 3.3.6

Mar 31 2026, 4:56 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
ebo moved T7333: Allow gpg to auto-upload a new own key to LDAP servers from WiP to QA on the gnupg22 board.
Mar 31 2026, 4:54 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
ebo moved T7333: Allow gpg to auto-upload a new own key to LDAP servers from Backlog to QA on the vsd33 board.
Mar 31 2026, 4:54 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26
ebo edited projects for T7333: Allow gpg to auto-upload a new own key to LDAP servers, added: vsd33; removed vsd34.
Mar 31 2026, 4:53 PM · gnupg22 (gnupg-2.2.53), vsd33 (vsd-3.3.7), gnupg26

Mar 23 2026

timegrid added a comment to T8078: GpgAgent: trustlist.txt still requires LF on the last line.

But the original patch rG1b4ac98de7db: agent: Accept a trustlist with a missing LF at the end. was not working to allow missing newlines in gpg4win-5.0.0 @ win11?

Mar 23 2026, 9:04 AM · gnupg22, Bug Report, gpgagent, gnupg26

Mar 19 2026

werner added a comment to T8078: GpgAgent: trustlist.txt still requires LF on the last line.

That change is too complex for just getting a proper error message. The original patch covers the most common case.

Mar 19 2026, 2:04 PM · gnupg22, Bug Report, gpgagent, gnupg26
timegrid added projects to T8078: GpgAgent: trustlist.txt still requires LF on the last line: gnupg22, gnupg24.

This should also be fixed in 2.2 and 2.4 (if neccessary)

Mar 19 2026, 12:25 PM · gnupg22, Bug Report, gpgagent, gnupg26

Feb 13 2026

werner moved T7133: Add feature to load designated revoker from LDAP from Backlog to WIP on the vsd34 board.
Feb 13 2026, 3:35 PM · gnupg22, vsd33 (vsd-3.3.6), backport, Feature Request