Re: Organizing a GPG key signing party in London
On 12 February 2014 11:40, Ludovic Hirlimann ludo...@mozilla.com wrote: I'm organizing a pgp key signing party in London on March the 25th at 6:30 PM BST in the mozilla space of the mozilla office in London. British Summer Time does not begin until Sunday 30th March this year(1). Do you mean Greenwich Mean Time? Regards, Ben (1) https://www.gov.uk/when-do-the-clocks-change ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Install Gnupg-2.0.19 errors
On 6 October 2012 01:18, zjf_sy zjf...@shangmail.com wrote: *../../g10/gpg2: error while loading shared libraries: libassuan.so.0: cannot open shared object file: No such file or directory .* [...] *libassuan.so: /usr/local/lib/libassuan.so /usr/local/lib/libassuan.so.0* You need to tell the OS where to find these libraries. For a quick fix, add /usr/local/lib/ to /etc/ld.so.conf, run ldconfig -v and try again. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Some people say longer keys are silly. I think they should be supported by gpg.
On 22 May 2012 09:58, tim.kac...@gmail.com wrote:
I think it should be okay to dredge up this topic ever couple years. From
what I am reading, links below, I do not feel comfortable with the key
length and algorithmic security offered by GPG's defaults.
Use this patch to increase the maximum keysize in gpg2 to 8192 when using
the --expert option - intended for v2.0.17 but should be good for later
versions too.
--- g10/keygen.c2011-01-15 16:32:30.0 +
+++ g10/keygen.c2011-01-15 16:32:42.0 +
@@ -1774,7 +1774,7 @@
static unsigned
ask_keysize (int algo, unsigned int primary_keysize)
{
- unsigned int nbits, min, def = DEFAULT_STD_KEYSIZE, max=4096;
+ unsigned int nbits, min, def = DEFAULT_STD_KEYSIZE, max=8192;
int for_subkey = !!primary_keysize;
int autocomp = 0;
*--expert*
Allow the user to do certain nonsensical or silly things like signing an
expired or revoked key, or certain potentially incompatible things like
generating unusual key types. This also disables certain warning messages
about potentially incompatible actions. As the name implies, this option is
for experts only. If you don't fully understand the implications of what it
allows you to do, leave this off. --no-expert disables this option.
It's generally accepted that a big key is a silly thing so seems perfect
for inclusion in the expert option.
Ben
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: How to use terminal to change mac-cache-ttl
On 12 October 2011 16:44, Vortran66 americabrazil1...@hotmail.com wrote: I realize now that changing the cache values involves a little more than changing a few values and that I am probably in way over my head. Open a terminal and type man gpg-agent. Make a note of any ttl values you want to set, eg: --default-cache-ttl n Set the time a cache entry is valid to n seconds. The default is 600 seconds. --default-cache-ttl-ssh n Set the time a cache entry used for SSH keys is valid to n sec- onds. The default is 1800 seconds. --max-cache-ttl n Set the maximum time a cache entry is valid to n seconds. After this time a cache entry will be expired even if it has been accessed recently. The default is 2 hours (7200 seconds). --max-cache-ttl-ssh n Set the maximum time a cache entry used for SSH keys is valid to n seconds. After this time a cache entry will be expired even if it has been accessed recently. The default is 2 hours (7200 seconds). Then type nano ~/.gnupg/gpg-agent.conf at the command prompt and enter the values you want without the preceding dashes, for example: default-cache-ttl 0 max-cache-ttl 0 Then kill any existing gpg-agent with kill gpg-agent. As you are using gpg-tools, you may wish to direct your query to their email list - http://lists.gpgtools.org/mailman/listinfo/gpgtools-users Benjamin Donnachie ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: plateform supported ?
On 28 Feb 2011, at 17:29, florent ainardi fainard...@gmail.com wrote: i have a simple question May I suggest that you consolidate all your queries into a single email? Ben Sent from my iPhone ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
MacGPG2 v2.0.17-9 released!
MacGPG2 v2.0.17-9 is available from https://github.com/downloads/GPGTools/MacGPG2/MacGPG2-2.0.17-9.zip Please use the detached signature to confirm the integrity of your download prior to install. Public key needed available from http://www.gpgtools.org/ Unzip the archive and then run the MacGPG2 installer. MD5 (MacGPG2-2.0.17-9.zip) = 36dec9b2b7f24234a2286d736397d8e9 MD5 (MacGPG2-2.0.17-9.pkg) = 1d6698bca1450496543030247934579b * 121,836 downloads of MacGPG2 from 165 countries in two years! What's New: * Following fixes: http://gpgtools.lighthouseapp.com/projects/66001/tickets/21-gpg-agent-patch-missing http://gpgtools.lighthouseapp.com/projects/66001/tickets/24-add-gpg2-gpgconf-test-to-the-postflight-script http://gpgtools.lighthouseapp.com/projects/66001/tickets/32-incorrect-permissions-on-launchagent-plist http://gpgtools.lighthouseapp.com/projects/66001/tickets/33-check-for-incorrect-options-in-gpg-agentconf http://gpgtools.lighthouseapp.com/projects/66001/tickets/40-secret-keys-unusable * Patch to facilitate IDEA support; requires alternative encryption library *NOT INCLUDED* * Supports 32- and 64-bit Intel Macs running OS X Leopard (10.5) and higher. * Core upgraded to GnuPG v2.0.17 = Configured to use standard socket and daemonise gpg agent on the fly if required. * Maximum key size increased to 8192 bits; not recommended and requires --expert command line option. * Includes GPGTools gpg-agent cache-id option patch. * Pinentry updated by GPGTools team and includes keychain support * Installs exclusively under /usr/local/MacGPG2/ removing previous v2.0.16 install. * Libksba upgraded to v1.1.0 * Libusb upgraded to v1.0.8 Credits * Werner Koch and the GnuPG Project, http://www.gnupg.org/ * Stéphane Corthésy for the launchd patches. * Charly Avital for his patient testing. * Dr Alun J Carr for his kind donation. Noteworthy changes in GnuPG version 2.0.17 (2011-01-13) * Allow more hash algorithms with the OpenPGP v2 card. * The gpg-agent now tests for a new gpg-agent.conf on a HUP. * Fixed output of gpgconf --check-options. * Fixed a bug where Scdaemon sends a signal to Gpg-agent running in non-daemon mode. * Fixed TTY management for pinentries and session variable update problem. * Minor bug fixes. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: MacGPG2 v2.0.17 released!
On 25 Jan 2011, at 08:55, Werner Koch w...@gnupg.org wrote: * Maximum key size increased to 8192 bits; recommended for expert users only I do not think this is a good idea. I personally agree with you and it was only implemented due to user demand. I'll look at a better way of implementing this request. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: MacGPG2 v2.0.17 released!
On 24 January 2011 23:03, Benjamin Donnachie benja...@py-soft.co.uk wrote: What's New bit Intel Macs running OS X Leopard (10.5) and higher. Cut and paste failed me. It should have read: What's New = * Supports 32- and 64-bit Intel Macs running OS X Leopard (10.5) and higher. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
MacGPG2 v2.0.17 released!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 MacGPG2, a build of GnuPG2 for MacOSX with a native pinentry program, has been updated to GnuPG v2.0.17. Download available from https://github.com/downloads/GPGTools/MacGPG2/MacGPG2-2.0.17.6.zip and detached signature at https://github.com/downloads/GPGTools/MacGPG2/MacGPG2-2.0.17.6.zip.asc * Tiger and PPC chips no longer supported. * v2.0.16 will be deleted from your system. * You may need to change the file path for gpg2 to /usr/local/MacGPG2/bin/gpg2 * Removal now as simple as sudo rm -fr /usr/local/MacGPG2 Support available from the GPGTools mailing list - http://www.gpgtools.org/about.html Release notes follow: Please use the detached signature to confirm the integrity of your download prior to install. Public key needed available from http://www.gpgtools.org/ Unzip the archive and then run the MacGPG2 installer. * MD5 (MacGPG2-2.0.17.zip) = f682dda810d665ed68e321dd9d230350 * 121,836 downloads of MacGPG2 from 165 countries in two years! What's New bit Intel Macs running OS X Leopard (10.5) and higher. * Core upgraded to GnuPG v2.0.17 = Configured to use standard socket and daemonise gpg agent on the fly if required * Maximum key size increased to 8192 bits; recommended for expert users only * Includes GPGTools gpg-agent cache-id option patch * Pinentry updated by GPGTools team and includes keychain support * Installs exclusively under /usr/local/MacGPG2/ removing previous v2.0.16 install * Creates default gpg configuration file if none exists * Libksba upgraded to v1.1.0 * Libusb upgraded to v1.0.8 Credits = * Werner Koch and the GnuPG Project, http://www.gnupg.org/ * Stéphane Corthésy for the launchd patches. * Charly Avital for his patient testing. * Dr Alun J Carr for his kind donation. Noteworthy changes in GnuPG version 2.0.17 (2011-01-13) - - * Allow more hash algorithms with the OpenPGP v2 card. * The gpg-agent now te gpg-agent.conf on a HUP. * Fixed output of gpgconf --check-options. * Fixed a bug where Scdaemon sends a signal to Gpg-agent running in non-daemon mode. * Fixed TTY management for pinentries and session variable update problem. * Minor bug fixes. -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.17 (Darwin) Comment: GPGTools - http://www.gpgtools.org/ iQIcBAEBAgAGBQJNPgUpAAoJEOgNmph0Y1E2XbgP/A/TaO3ARsVWU66ydjf+Tdrk ZMqy5Unt3pMffYF1W7cUbA3IiED7Wh7xkBScHWyQuEU9LmvU6lq5N7RY8uFA4aES 36jBazHgzIdsMWunouGoPqlXjmA99vt/sfrTGSH/EIcH3T7Qvw2dIL+AnnuXPZSi BRpBJDCStxa8QLw5H1h4W8+jsCxXYKigeV7PVl7fGfRXTPZUcYesDN9Nah+BpY68 mwTTh5zxzk97QjA4vWZ4GOUEfpf2fc0LMrMMTttri8kOwOz68qs+MmofNkzr6rPA FRlfChObK/t2zVoTaUDGLm+xkoggfKo+3s8RwYXG5YE90eHcmFr7Wy42pBHzvCc9 nh8nCa20r1/FzY68sz95meNls3cU9QkgCuVbQ1uXkkQ4rnp3D4fNaF+nj66XwCZa a1/WL+okH0JAcEm2Ym8s59zrXOjE6kp46TBoQZEiefnUqCMO/7hBHlyOh/eEqmfM v3JZzW/4YSOCKaPEpnv9qGqRzgz//PHmwHUb7PnqdM6i+NH2BlsM79sBE3BToubU O0bcBmxGFp/X/QMhPoUQ5VCwuJlD9qSxzs8eYXMNYM0MraMfhEI+8HeBFqA2oFxN 188lICsypJVjfK/9sPJtQBXRlI2EyVZrw6QouVnkyjzEWm2TSRXh9XTefl8+u7n9 QVQ5ID2nA7hg0QJYUDSR =OsK9 -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Gpg for iPhone or iPad
On 23 Jan 2011, at 11:50, Michael Dansie runningu...@gmail.com wrote: Do you know if there is an application that can use gpg on the iOS platform either as an app or as a jail broken feature? There's oPenPG Lite available from the App Store but it doesn't work with my private key! YMMV of course! Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: What is the benefit of signing an encrypted email
On 11 January 2011 10:04, jimbob palmer jimbobpal...@gmail.com wrote: In what case would I want my encrypted emails also signed? Does it provide any additional benefit over a pure encrypted email? Encrypted means only the recipient can read it. Signed means that, if they verified the key properly, the message came from you and has not been tampered with. Encrypted and signed means both. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Passwords are unwillingly being saved throughout session
On 30 November 2010 22:56, Holger Näther holger.naet...@mac.com wrote: I hope one of you might have experienced something like this before and can give me a short hint as to where to look. It is how gpg2 (and hence MacGPG2) is designed to work. To achieve that you want, add the following to the file ~/.gnupg/gpg-agent.conf: default-cache-ttl 0 Then terminate gpg-agent - either using 'killall gpg-agent from the command line and then run start-gpg-agent from Applications. Alternatively, just restart your machine. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [OSX] application bundle for pinentry-qt4 0.80
On 6 Nov 2010, at 10:55, dev.ad...@ntlworld.com wrote: I'm trying to build a mac application bundle for pinentry The short answer is use my pre-built native MacOSX pinentry program. I never had any great success with the QT version under MacOSX and my native pinentry avoids the QT library bloat. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: compile errors
On 2 Nov 2010, at 17:16, Derick Centeno dcent...@ydl.net wrote: $ whereis libassuan libassuan: /usr/local/lib/libassuan.la /usr/local/lib/libassuan.so /usr/local/lib/libassuan.a $ man libassuan Which OS and distro are you using? You may need to add /usr/local/lib to your config; is libassuan listed if you run ldconfig -v ? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: GnuPG skips the passphrase when creating a keypair
On 20 Oct 2010, at 19:09, Raditya Arthapraja ra...@devindo.com wrote: I'm using MacGPG2 version 2.0.14RC2 with MacOS X 10.6.4 - Snow Leopard as the OS. When trying to generate a keypair, MacGPG skips the step to input the paraphrase and continues to create the key. Although counter-intuitive, many MacGPG2 issues are resolved by a reboot, as recommended as part of the install process. Unfortunately, this is as a result of 'shoe-horning' a Unix-based program into MacOSX. Should your problems persist, please try the MacGPG2 list as recommended in Charly's email. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: FYI: About my test mails
On 14 Jun 2010, at 08:18, Werner Koch w...@gnupg.org wrote: Did alava...@gmail.com ever get removed? I can see no evidence that this address is abusing this ML. It was also forwarding to the MP Customer ticket system but now seems resolved. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: FYI: About my test mails
On 11 June 2010 12:42, Werner Koch w...@gnupg.org wrote: The culprit was supp...@resell.biz - I unsubscribed this address and banned it from further subscriptions. Did alava...@gmail.com ever get removed? See http://lists.gnupg.org/pipermail/gnupg-users/2010-May/038724.html Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: upgrading from 1.4.7 to 2.0.14
On 28 May 2010 12:18, Matthew Mark Drew matthew...@aol.com wrote: I would like to know where one can get gpg 2.0.14 complied for windows? http://lmgtfy.com/?q=gpg2+windows+downloadl=1 ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: transaction already being edited in another register
On 9 May 2010, at 17:21, C. Andrews Lavarre alava...@gmail.com wrote: But it definitely is a PITA if you have a lot of common transactions to fill out... :-( How does this relate to GnuPG? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [#24488576] transaction already being edited in another register
On 10 May 2010, at 01:27, supp...@midphase.com supp...@midphase.com wrote: Please remove supp...@midphase or any other @midphase address from your mailing list, thank you. Appears alava...@gmail.com has been set to redirect. Use the list homepage to unsubscribe: http://lists.gnupg.org/mailman/listinfo/gnupg-users Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: gpg-agent problems under MacOSX - libassuan v2.0.0 related?
On 20 March 2010 16:58, Benjamin Donnachie benja...@py-soft.co.uk wrote: Continued testing has shown that this behaviour is only exhibited when using standard sockets. When not using them I have, so far, been unable to replicate this problem. Ticket created - https://bugs.g10code.com/gnupg/issue1205 Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: gpg-agent problems under MacOSX - libassuan v2.0.0 related?
On 19 March 2010 09:49, Benjamin Donnachie benja...@py-soft.co.uk wrote: I am having problems with unpatched gpg-agent under Snow Leopard with gnupg v2.0.15: gpg-agent[9482]: can't connect my own socket: Invalid value passed to IPC gpg-agent[9482]: this process is useless - shutting down Continued testing has shown that this behaviour is only exhibited when using standard sockets. When not using them I have, so far, been unable to replicate this problem. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
gpg-agent problems under MacOSX - libassuan v2.0.0 related?
I am having problems with unpatched gpg-agent under Snow Leopard with gnupg v2.0.15: ./gpg-agent --daemon --verbose --use-standard-socket --no-detach gpg-agent[9481]: listening on socket `/Users/benjamin/.gnupg/S.gpg-agent' gpg-agent[9481]: listening on socket `/Users/benjamin/.gnupg/S.gpg-agent.ssh' GPG_AGENT_INFO=/Users/benjamin/.gnupg/S.gpg-agent:9482:1; export GPG_AGENT_INFO; SSH_AUTH_SOCK=/Users/benjamin/.gnupg/S.gpg-agent.ssh; export SSH_AUTH_SOCK; SSH_AGENT_PID=9482; export SSH_AGENT_PID; gpg-agent[9482]: gpg-agent (GnuPG) 2.0.15 started Macintosh:agent benjamin$ gpg-agent[9482]: handler 0x305630 for fd 7 started gpg-agent[9482]: starting a new PIN Entry gpg-agent[9482]: handler 0x305630 for fd 7 terminated gpg-agent[9482]: handler 0x3055a0 for fd 7 started gpg-agent[9482]: starting a new PIN Entry gpg-agent[9482]: handler 0x3055a0 for fd 7 terminated gpg-agent[9482]: handler 0x3058d0 for fd 7 started gpg-agent[9482]: can't connect my own socket: Invalid value passed to IPC gpg-agent[9482]: this process is useless - shutting down gpg-agent[9482]: gpg-agent (GnuPG) 2.0.15 stopped This issue has been confirmed by other people using my MacGPG2 package albeit with a patched copy of gpg-agent. I haven't had chance to investigate this thoroughly at this stage. GnuPG is compiled with the following options: export MACOSX_DEPLOYMENT_TARGET=10.4 export CFLAGS=-mmacosx-version-min=10.4 -isysroot /Developer/SDKs/MacOSX10.4u.sdk -arch i386 -arch ppc export CC=/usr/bin/gcc-4.0 (Above necessary to generate Universal Binary that works on Tiger and above) ./configure --disable-dependency-tracking --with-pinentry-pgm=/usr/local/libexec/pinentry-mac.app/Contents/MacOS/pinentry-mac [...] configure: checking for libraries checking for gpg-error-config... /usr/local/bin/gpg-error-config checking for GPG Error - version = 1.4... yes (1.7) checking for libgcrypt-config... /usr/local/bin/libgcrypt-config checking for LIBGCRYPT - version = 1.4.0... yes (1.4.5) checking LIBGCRYPT API version... okay checking for libassuan-config... /usr/local/bin/libassuan-config checking for LIBASSUAN - version = 2.0.0... yes (2.0.0) checking LIBASSUAN API version... okay checking for ksba-config... /usr/local/bin/ksba-config checking for KSBA - version = 1.0.2... yes (1.0.7) checking KSBA API version... okay checking for usb_bulk_write in -lusb... yes checking for usb_create_match... no checking for library containing dlopen... none required checking for openpty in -lutil... no checking for shred... /usr/bin/shred checking for pth-config... /usr/local/bin/pth-config checking for PTH - version = 1.3.7... yes checking whether PTH installation is sane... yes [...] GnuPG v2.0.15 has been configured as follows: Platform: Darwin (i386-apple-darwin10.2.0) OpenPGP: yes S/MIME:yes Agent: yes Smartcard: yes Protect tool: (default) Default agent: (default) Default pinentry: /usr/local/libexec/pinentry-mac.app/Contents/MacOS/pinentry-mac Default scdaemon: (default) Default dirmngr: (default) The only significant change is the move to libassuan v2.0.0, which I strongly suspect as it provides the IPC library. libassuan was compiled with the same options as v1.0.5: export MACOSX_DEPLOYMENT_TARGET=10.4 export CFLAGS=-mmacosx-version-min=10.4 -isysroot /Developer/SDKs/MacOSX10.4u.sdk -arch i386 -arch ppc export CC=/usr/bin/gcc-4.0 $ ./configure --enable-static=no --disable-dependency-tracking checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... ./install-sh -c -d checking for gawk... no checking for mawk... no checking for nawk... no checking for awk... awk checking whether make sets $(MAKE)... yes checking whether to enable maintainer-specific portions of Makefiles... no checking build system type... i386-apple-darwin10.2.0 checking host system type... i386-apple-darwin10.2.0 configure: autobuild project... libassuan configure: autobuild revision... 2.0.0 configure: autobuild hostname... Macintosh.local configure: autobuild timestamp... 20100319-094319 checking for style of include used by make... GNU checking for gcc... /usr/bin/gcc-4.0 checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether /usr/bin/gcc-4.0 accepts -g... yes checking for /usr/bin/gcc-4.0 option to accept ISO C89... none needed checking dependency style of /usr/bin/gcc-4.0... none checking how to run the C preprocessor... /usr/bin/gcc-4.0 -E checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for ANSI C header files... yes checking for sys/types.h... yes checking
Re: Restarting gpg-agent
On 15 March 2010 16:54, Werner Koch w...@gnupg.org wrote: For years gpg-agent is able to test whether it is already running, just call gpg-agent and don't pass the --daemon option: This is what I use the fall back as part of MacGPG2: (* start-gpg-agent Part of the MacGPG2 project - http://macgpg2.sourceforge.net Released under v3 of the GPL *) -- Sleep for two seconds. delay 2 -- Try to contact gpg-agent set gpgAgentRunning to do shell script /usr/local/bin/gpg-agent /dev/null; echo $?; exit 0 -- If that fails, look for env file. if gpgAgentRunning 0 then set gpgAgentRunning to do shell script [ -f $HOME/.gpg-agent-info ] (source $HOME/.gpg-agent-info export GPG_AGENT_INFO /usr/local/bin/gpg-agent /dev/null) ; echo $?; exit 0 end if -- If that also fails, start a new copy of gpg-agent if gpgAgentRunning 0 then do shell script /usr/local/bin/gpg-agent --daemon --use-standard-socket --write-env /dev/null end if Should be easy to understand and implement in another scripting language. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: OpenPGP card not available- Card error
2010/1/15 taurus taurus...@gmail.com: Change to a new macbook pro and my card reader is not recognized by gpg2. In the old notebook is fine. OS is the same in both; Mac OSX 10.5.8 Are you using MacGPG2, http://macgpg2.sourceforge.net/ ? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Multiple Instances of gpg-agent
2010/1/5 Jason French frenc...@gmail.com: I'm on OS X 10.5.8 running Thunderbird 3.0 with Enigmail 1.0. Thanks in advance. I recommend upgrading to MacGPG2 v2.0.14-RC2 - see http://macgpg2.sourceforge.net/ Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Multiple Instances of gpg-agent
2010/1/9 Ludwig Hügelschäfer mlis...@hammernoch.net: Second, have a look into your Start Objects (which are opened at login). Are there multiple entries for start-gpg-agent? Remove all but one. start-gpg-agent will not start another copy if it can communicate with an already running instance of gpg-agent. Upgrade to the lastest version of MacGPG2 and then join the project mailing list - https://lists.sourceforge.net/mailman/listinfo/macgpg2-users Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: very short plaintexts symmetrically encrypted
2010/1/8 ved...@hush.com: At any rate, it seems disturbingly easy to distinguish between symmetrically encrypted messages having only the word 'yes' or 'no' just by 'looking' at the ciphertext. i. Don't send such short messages ii. Don't use symmetric encryption. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Newbie question: Where do I put my trusted key?
2009/10/31 Charly Avital shavi...@mac.com: Please check the MacGPG2 Project at: http://sourceforge.net/projects/macgpg2/ The current installer for MacGPG2 2.0.12 is available. It will install a Mac native pinentry application. An updated version for v2.0.13 will be available in a few days (work and broken SAN permitting). Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: which version is install
2009/9/18 FOAD FOAD foad0...@gmail.com: I want to know which version of gpg is install on my openbsd, could you tell me how to do ? Try: gpg --version gpg2 --version Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: GnuPG 2.0.12 on AIX 5.3 TL 03
2009/9/3 Bob Wyatt bwyatt_...@comcast.net: What am I missing? Any advice? Please don't keep starting new threads - just post a reply to your existing message. What options did you use to compile pth? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: 1.4.10rc1 vs. OS X 10.6
2009/9/2 Robert J. Hansen r...@sixdemonbag.org: Can we get an #ifdef for Darwin to replace the ASM blocks with compiled code? I tested it as part of my Universal Binary build, and the ASM blocks make little difference with fast processors. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: GnuPG-1.4.9 Install on AIX 5.3 Maintenance (Technology) Level 3
2009/9/2 Bob Wyatt bwyatt_...@comcast.net: After doing a CFLAGS=”-g -02 –mcpu=powerpc” ./configure, the following is reported: I think you mentioned that pthreads was installed under /usr/local/ try: ./configure --with-pth-prefix=/usr/local/ For further options, take a look at ./configure --help Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Complile problem on Unixware 7.1.4 gpg-1.4.9
2009/8/6 ishe.mudzin...@barclays.com: Can anyone help I've seen a similar problem on the Mac when it tries to use the wrong assembly mpi modules. Try adding --disable-asm to your ./configure options before running make. For good measure, run make clean first, ie: make clean ./configure --disable-asm make all Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
MacGPG2 v2.0.12 released!
MacGPG2 v2.0.12 is now available to download from https://sourceforge.net/project/showfiles.php?group_id=248469package_id=303406 This release upgrades the core to GnuPG v2.0.12. Universal binary tested under MacOS Tiger and Leopard complete with Mac pinentry program. Please use the accompanying signature to verify your download before extracting. A very rare bug has been reported whereby the pinentry package is not properly installed. If this occurs on your system, download the separate pinentry package from the project homepage. Support available through the MacGPG2 mailing list - http://lists.sourceforge.net/lists/listinfo/macgpg2-users Report any problems to the macgpg2 project - http://macgpg2.sourceforge.net/ Credits: Werner Koch and the GnuPG Project, http://www.gnupg.org/ Stéphane Corthésy for the launchd patches Charly Avital for his patient testing. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Security Concern - Open Source Binaries
2009/6/7 simplejack simplej...@mailinator.com: Is sourceforge (or any of the other repositories for open source software) actually doing a compile and compare of uploaded source code to ensure that uploaded binaries are legitimate? Nope, but they're not checking the code either. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Avoid pinentry-gtk-2 when using console!
2009/5/31 Roger rog...@sdf.lonestar.org: From searching on the web, there's quite a few others griping about this same issue. rantI do wish people would stop complaining about open source software and actually roll their sleeves up and do something to help./rant One solution, create a symbolic link in your home directory to whatever pinentry you want to use at a particular time, and point your gpg-agent config to that, eg in ~/.gnupg/gpg-agent - pinentry-program /home/gpguser/.gnupg/use-this-pinentry So when X starts have your link, say ~/.gnupg/use-this-pinentry point to the X one, when you start a shell, modify the link for ~/.gpg-agent/use-this-pinentry to the curses one - easy enough to achieve with the bash login/out scripts. Alternatively, modify the code for gpg-agent to achieve what you want and submit to Werner for evaluation. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Avoid pinentry-gtk-2 when using console!
2009/5/31 Roger rog...@sdf.lonestar.org: I know this sounds ridiculous, but when you consider a console/terminal to be as good look'n as a girl, and then you're made to a X window and forced to type in it, it just feels ridiculous. Think most folks whom praise the console Gods, feel the same way. Enable passphrase caching, just enter it the once and be done with it. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Avoid pinentry-gtk-2 when using console!
2009/5/31 Roger rog...@sdf.lonestar.org: If you only use Signatures/Encryption once a month, that's a lot of passphrase entering caching! The gnupg v2 is the wrong tool for you. Take a look at gnupg v1.4.x. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: paperkey // ? feature request
This thread reminded me of the attached... Ben attachment: security.png___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: openPGP card, cant change admin pin, can't change name
2009/2/8 Malte Gell malte.g...@gmx.de: does still now work, what is wrong there, why don't I have the permission to change the admin pin? It's all covered in the list archives and in the manpages: SCDAEMON: --allow-admin --deny-admin This enables the use of Admin class commands for card applica- tions where this is supported. Currently we support it for the OpenPGP card. Deny is the default. This commands is useful to inhibit accidental access to admin class command which could ultimately lock the card through wrong PIN numbers. So, edit ~/.gnupg/scdaemon.conf and add the line allow-admin. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Paperkey question
2009/2/8 Faramir faramir...@gmail.com: Right, I sent myself a copy of paperkey, to my e-mail account at gmail and yahoo... one of them should survive... and if the program can't run on the operating systems available at the time when it is needed, I suppose there will still be virtual machines or emulators capable of making it run... if not, probably it will also be the time to make new keys. I thought the idea was to print it out and either enter it by hand or use OCR? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Paperkey question
2009/2/8 Ian Hill i...@ushills.co.uk: Correct you print it out, but I cannot find how to re-compile the key manually from the paperkey and the public key. If you can do this without the paperkey programme this seems a good solution, otherwise why not keep an e-copy of your secret key as this is likely to survive just as well as the paperkey program. Because media degrades and unlikely that the media of today will be readable in the future. For example, you can't get 8 or 5.25 floppies for love nor money these days and 3.5' floppies are likely to go the same way. However, paper lasts a very long time. It's your call and depends how much your key means to you. Personally, I reckon that your key is more likely to become useless in the future. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Paperkey question
2009/2/8 Ingo Klöcker kloec...@kde.org: But it's gone if your home and your work place explode at the same time. I think my key would be the last of my worries in such circumstances. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Series of minor questions about OpenPGP 5
2009/1/28 Peter Thomas p4.tho...@googlemail.com: Now this is surely gnupg specific again ;-) Please please please stop starting new threads! It makes it much easier for me to ignore if you keep to just the one. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Series of minor questions about OpenPGP 4
2009/1/27 David Shaw ds...@jabberwocky.com: I think at this point you should take the discussion to the ietf-openpgp list. This is really the GnuPG users lists, and the questions are in-depth design questions for the protocol itself. Or at least keep it all in the same thread so it's easier for me to delete... Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Dan Brown - Digital Fortress book
2009/1/14 Andre Amorim dec...@gmail.com: I'm in the midle of this book rigth now, so let me try to finish it LOL... by the way... is there any other book, for a guy like me that find pleasant read about neuromancer, crypto, computers and fiction ... I really enjoyed Cryptonomicon and Snow Crash by Neal Stephenson. Both are very geeky, the former has a lot about encryption in it if I remember correctly, and the latter is based around virtual reality. Though I was a bit disappointed with the ending of Cryptonomicon - I expected something more spectacular. Have a look on wikipedia for more info. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Paperkey on windows
2009/1/10 Charly Avital shavi...@mac.com: A couple of days ago, I compiled the source code (with the flags indicated in your paperkey homepage), for a MacBook Intel Core 2 Duo running MacOSX 10.5.6 (code named Leopard). I passed on the compiling information to other Mac Users. I used the flags you indicated for a universal binary: ./configure CFLAGS=-arch ppc -arch i386 --disable-dependency-tracking Unless you're distributing the binary, I wouldn't bother building a Universal Binary - it'll just add unnecessary bloat that your machine will never use. Questions: - - which should be the required flags for an Intel Core 2 Duo processor, only? - - ditto for Linux Ubuntu 8.10_64-bits? In general, it should only be necessary to run the configure script - that should pick up all the required flags. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Fwd: MacGPG2 v2.0.10RC1 for Intel Macs released!
-- Forwarded message -- MacGPG2 for GnuPG v2.0.10rc1 is now available for download from sourceforge - https://sourceforge.net/project/showfiles.php?group_id=248469package_id=303406release_id=652661 This download will work under Tiger and Leopard but only on Intel-based Macs. PowerPC support is planned for the full release of GnuPG v2.0.10. For assistance with the software, please see the project homepage http://macgpg2.sourceforge.net and the project mailing list - http://lists.sourceforge.net/mailman/listinfo/macgpg2-users There has been a substantial departure from the previous way of implementing GnuPG2 functionality so please patient while I update the project wiki. NOTES: This a beta release of the GnuPG v2.x package for MacOSX. Please use the accompanying signature, available as MacGPG2-2.0.10rc1-BETA5.zip.asc, to verify your download before extracting. Report any problems to the macgpg2 team - http://macgpg2.sourceforge.net/ CHANGE LOG: MacGPG2 now uses Stéphane Corthésy's gpg-agent launchd patch for use with Leopard and above. For MacOS versions prior, a login item is now used. MacGPG2 no longer needs login or logout scripts in order to function correctly and these will be disabled. Under most circumstances, MacGPG2 no longer needs to interact with the ~/.MacOSX/environment.plist file and any unneeded entries will be automatically removed. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
MacGPG2 news.
The MacGPG2 project, responsible for producing a simple to use binary install package for GnuPG v2.x under MacOSX has moved to a separate project, see http://macgpg2.sourceforge.net/ MacGPG v2.0.9-BETA3 is now available to download from http://sourceforge.net/project/showfiles.php?group_id=248469 and I will be working on a fully working version ready for GnuPG v2.0.10 which is expected soon. Although I previously intended to incorporate MacGPG2 into the existing MacGPG project, it remained hosted separately on my server. Since shutting it down, it has become clear to me that MacGPG2 needed a separate home and hence the separate group. Benjamin Donnachie MacGPG2 Project ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Need help
2008/9/9 David Koppenhofer [EMAIL PROTECTED] Depends on which software you're talking about. To find out which version of gnupg is installed in your path, you can type gpg --version at a terminal/command prompt. ... and/or gpg2 --version Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: MAC Installer for GNUPG?
Robert J. Hansen wrote: http://macgpg.sourceforge.net. The version there is a little out of date, but it's still the easiest to install package. You can get the latest MacOSX builds from my website: http://www.py-soft.co.uk/~benjamin/download/mac-gpg/gpg1.4.9-1.zip http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.9-TESTB-3.zip Macgpg v1.4.9 is an official build but the macgpg maintainer has not yet added it to http://macgpg.sourceforge.net Macgpg v2.0.9-TESTB-3 is still officially a beta. However, no bugs have been reported. (I just need to get round to tidying up the installer and adding some documentation). Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: mac-gpg2 v2.0.9 beta available.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Benjamin Donnachie wrote: | There's currently a beta package for gpg v2.0.9 on the Mac available at Slight bug fix whereby ~/.MacOSX/ was not created if missing: http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.9-TESTB-2.zip Signature at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.9-TESTB-2.zip.asc | To use the OpenPGP smartcard with SSH you will need to add the line | enable-ssh-support to ~/.gnupg/gpg-agent.conf You then need to log | out and then back in again for it to work. | If you installed mac-gpg2 by hand previously, any entry in .profile | relating to source ~/.gpg-agent-info or source ~/.gnupg/.gpg-agent can | be removed. | This install will overwrite the file ~/.MacOSX/environment.plist on | every login. If you do not know what this means then generally you do | not need to worry. If you do have one, it's fair to assume that you are | capable of editing /usr/local/sbin/gpg-login.sh to add the required | statements back in. See below - additional statements can now be added to the file ~/.MacOSX/environment.plist.footer | This install will NOT replace and existing Login and Logout hooks. If | you have any existing hooks you will need to run the following from the | command line: This install now replaces any existing Login and Logout hooks. A future release may preserve existing hooks. | Further refinements planned before release in order of priority: | LoginHook - only kill dead standard sockets if gpg-agent set to use | standard sockets. Done. | Overall - improve install experience and package as dmg. Awaits formal release. | LoginHook - add facility for optional file to contain additional | environment.plist statements to avoid editing of scripts. Done - add any additional items to the file ~/.MacOSX/environment.plist.footer in the format: keyname/key stringvalue/string | LoginHook - remove requirement for environment file and use output from | gpg-agent instead. .gpg-agent-info is used by other programs, such as GPGMail, and therefore will remain. Ben -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.9 (Darwin) Comment: Built by the macgpg project - http://macgpg.sourceforge.net/ Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIcBAEBAgAGBQJIWIS2AAoJEOgNmph0Y1E2f58P/i36fIargWgpNlx2d6ilqO7J jcsHymP64S+L96SFI6rKWGFBmYN70MLNg2Xum3QPi9yDGxDoAycqDLga67Vk4Xrb znv0NG4BgOipM/l+9bHhdK1yGOeEIHdcFslpK1zkAjgB9bC3VXuBDol6lSXj7dPD CGJrDN7tOSsfE139uph3EI2V2NVUJqgViD90ETcLHZIRXVyDQAwxg0HTu4PkJ3xZ 4h5LPXumF2xbl4FfxsXfC99zHfLZN9IHcW8aeClTVGMIgVvJLEEvFsiUDL7bLTxW x5rpN53rz9n9yQ5QbF2MpBl+Nt3OqYt5S1u1dCQ704YoHJIFCNGMMFnYLh0Gk5hS TYqc5HXvwpPBR63Xy3QY20Uh/Gb7GIUDpRol2kHAM+QM7QHR9HFslN2Da27uYScD 18oso24Pe1hSCchRqwQsG485EvTuTPAz+/hobo/1dYmfZtI5NNULJTeGtSDtY06D Xr6sQCecqXwdPDW1J6DqmMmh4S1e+BriN7ndxm5TFpV4zcFrqHxuo+atBCqz+D71 wsMWPrED+ApwXIH9/pCzst7jt0n3YJD4fH3ksSMQy0iEB/AzxahjNlchPRy/1h5n 64o4rDUBxi/0G2frT3ub1FB5r1QyM04WYglmepzO+WuIQwxzBvVdDOtcRLeUjpGX yELxMuczDAEoaN5Xtg5y =QM+k -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Updated copy of pinentry-mac available.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 A new copy of the native MacOSX pinentry program for gpg[2] is now available from: http://www.py-soft.co.uk/~benjamin/download/mac-gpg/pinentry-mac.0.02-1.zip With the accompanying signature at: http://www.py-soft.co.uk/~benjamin/download/mac-gpg/pinentry-mac.0.02-1.zip.sig Extract from the archive and then copy pinentry-mac to /Applications. Then ensure that ~/.gnupp/gpg-agent.conf contains: pinentry-program /Applications/pinentry-mac.app/Contents/MacOS/pinentry-mac (Above should be on one line). This is only a minor revision to allow for the greater information passed by gpg v2.0.9. Next version will contain the very latest pinentry backend and be properly packaged. Ben -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.7 (Darwin) Comment: Built by the macgpg project Comment: http://macgpg.sourceforge.net/ Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBSCkET+gNmph0Y1E2AQLXlw//esh36ypoMCt+vqgZ76z4IPmJLe9ExtSg g+OuMf8Wf5km9j17qPWu3BTUWjvbs0pyAmCet3GxcdBmUIPSNqW28h/YbJDvnfBW 5op+qQhMgFuhH1BrEJ3xLgzl7e7YVXVyEwRroULHdzsNpbFYcHhX/kzpLzjSF6xD QP7Z2btsrBRph0VqcgYSxUIOgawyJRrGGrBau+Gunh8nG2gTYYah5e/5hL40dJTU SaVxC1DQxBAqNpql2QbDVzOGw447aEtEeIYFPmh525qvUl7M/+UEFlCq8OZ58F1T RgupjsYyF9vDJdT4EgdAodNwsU+oljtvvwET8QgZAgQPs81ujX1XVWfwi0i3bP0/ 9XsNp1Y64pXns28MrVdVrFlVZMKm8kUBNHK9QTulLAkn8mzj0Gl4QVUgVJ/o0VDz 71yCH4rDubzCj3es9Vwbc0MdgUAieewYdVKYy6+9hOyx2RZR+CuFHNKTbgrmeaeo 1u6JagIMbd180EWZ9ZJW1eR/AooGsZN1SVWdSjFsL9AokjlTpVsz17Yn9WAVFzFu lLvPLlGTBTCi42dYWmDzPCLSiQ0jr75hdVJ1yy2zNsSpJQoeFhZoZvjhPHwVLV2e 30cQ3LKB80VfVc0Ry6EcFF2K+XYRYwzq7Ne+xWjBcLV6svkpuC8/fgCSGAG0J3kq MH61MESH4Wc= =1f8O -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Graphical problem with pinentry - was: [Announce] GnuPG 2.0.9 released
Charly Avital wrote: It is only a graphical thing, the functioning of gpg-agent itself has not been affected. Could you please send me a screen capture off list? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Graphical problem with pinentry - was: [Announce] GnuPG 2.0.9 released
Werner Koch wrote: Not really. It is just that the text displayed is now longer. I don't know the Mac pinentry and whether it auto-adjusts its size as the GTK pinentries do. The native Windows pinentery for example does not resize and thus the displayed text gets truncated. That's exactly the issue and I /may/ address it in the next release. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Help with version gpg-agent on Mac-Tiger
Steve Revilak wrote: The macports gpg2 package only includes pinentry-ncurses. For me, I'd assume that means the passphrase prompt _has_ to come from a terminal. Since I use a curses-based MUA, that's fine. But I don't know how well it would work for a Carbon app like Thunderbird. I have a version of pinentry that works natively on the Mac. It is my intention to split the current mac-gpg2 distribution into separate components and add an intelligent installer. However, I am very busy at the moment so you'll have to put up with the following zip for now - http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.7-TEST1.zip Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Mac GNU Privacy Guard v1.4.8
The latest binary install package for GnuPG v1.4.8 for MacOSX is now available to download from http://prdownloads.sourceforge.net/macgpg/GnuPG1.4.8.dmg?download MD5 checksum: db046fd96e274dfe3c7021047561fb5a Intended for MacOSX v10.4.x or greater. Universal binary so will install on both Intel and PPC Macs. Please direct any queries to the MacGPG team - http://macgpg.sourceforge.net/ Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: using pgp for web-based social networking
Adrian Thurston wrote: I have defined a protocol and described it here: http://www.cs.queensu.ca/~thurston/fif/ I get 404: file not found. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Are there new Builds for OS/X ?
David Shaw wrote: Was wondering if I am current and if there is anything new for the mac? gpg (GnuPG) 1.4.7 Copyright (C) 2006 Free Software Foundation, Inc. Yes, you are current. Version 1.4.8 will be coming out soon. When 1.4.8 is officially released, rather than just release candidates, I will be updating the mac-gpg project version. I haven't really got time to fiddle around with RCs, unless someone is willing to pay for my time Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: pinentry-mac never displays any UI [seems to be solved]
Richard Bronosky wrote: By God, he's right! it was no-grab that was doing it. Fantastic stuff! I'm a bit pushed for time at the moment, but hope to release a new version with the latest copy of gpg2 and pinentry soon. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Question about Replying to List
Benjamin Donnachie wrote: Take a look at the Thunderbird reply to list extension - http://alumnit.ca/wiki/index.php?page=ReplyToListThunderbirdExtension If you don't want to use Thunderbird v3, take a look at the ReplyToList extension at http://cweiske.de/misc_extensions.htm Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Question about Replying to List
Robert D. wrote: I'm on a MacBook and using Thunderbird version 2.0.0.6 (20070728) Take a look at the Thunderbird reply to list extension - http://alumnit.ca/wiki/index.php?page=ReplyToListThunderbirdExtension Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: pinentry-mac never displays any UI
Benjamin Donnachie wrote: Are you using the version of pinentry that is currently bundled with mac-gpg2? If not, try downloading from http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.4-2.zip and let me know how it goes. Did it work? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: pinentry-mac never displays any UI
Richard Bronosky wrote: I got a lead on how to use pinentry, and now have an error message to report: echo GETPIN|/Applications/pinentry-mac.app/Contents/MacOS/pinentry-mac OK Your orders please 2007-10-01 14:21:54.669 pinentry-mac[6312] *** _NSAutoreleaseNoPool(): Object 0x31eaf0 of class NSCFString autoreleased with no pool in place - just leaking The NSAutoreleaseNoPool() message is a known harmless bug and I have a patch to fix it. Again, the icon appears in the dock and bounces once, but no UI. I hope that helps. What application are you using it with? Version of MacOS? Chipset? When I get time I will be releasing a updated version of the mac pinentry program. I suggest that you wait for that. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Smart card: pcsctest fails
Charly Avital wrote: But pcsctest ends with: Testing SCardConnect : Sharing violation. I think the scdaemon (part of gpg-agent) opens the card with exclusive access. If you want to run pcsctest, kill gpg-agent and then restart it after. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: RSA 1024 ridiculous
Remco Post wrote: Does gnupg support elliptic curve crypto? ;-) Not yet... Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: New version of mac-gpg2
Benjamin Donnachie wrote: As previous mac-gpg2 releases, this release is intended for power users only. Universal binary, MacOSX Tiger 10.4.9 and above. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: RSA 1024 ridiculous
Andrew Berg wrote: Anyone who's worried about an entity with the power needed to break their messages in time to make any use of it has probably already been using a longer key size for a while now. Or, more likely for someone that paranoid, a one time pad. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Failing to compile in MacOS X [Announce] Libgcrypt 1.3.0 (development) released
Charly Avital wrote: We are pleased to announce the availability of Libgcrypt 1.3.0. This is the first release of a series of development versions ebentually leading to a new stable 1.4 series. Configured for: Darwin (i386-apple-darwin8.9.1),MacOS X 10.4.9 No problems here with Darwin (powerpc-apple-darwin8.9.0), MacOSX 10.4.9 === All 16 tests passed === I haven't tried to build a fat/universal binary yet though. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Re-establish keys
[EMAIL PROTECTED] wrote: My public key is on the MIT PGP server.I know my passphrase. So how do I reestablish my keys on the newly reformatted hard drive, in order to decrypt my files? Without the secret key, you can't I'm afraid. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Printing Keys and using OCR.
David Shaw wrote: For paper to last 100 years is not even vaguely impressive. Paper regularly lasts many hundreds of years even under less than optimal conditions. All seems rather academic to me as I would expect the current encryption algorithms to be rendered useless by then. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Gnupg cannot handle extremely large keys on 32 bit Linux
Charly Avital wrote: I installed 2.0.3 using a binary installer prepared by Ben Donnachie, because I didn't succeed to compile the code. It's statically linked to libgcrypt-1.2.4 I'm waiting for some feedback from Ben. He watches this list, but he also has a day job, so I'll have to wait. At the moment... I'm sorely tempted to tell them to poke it where the sun doesn't shine at the moment... :-/ Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: 1.4.7 packages for OS X
Robert J. Hansen wrote: I don't see any real difference between the two, really. If it's not legal to distribute the single binary with IDEA, then it's not legal to distribute the module. And going the module way, you wind up getting a large number of support requests saying I downloaded the module, but I still can't read IDEA traffic, since people tend not to be all that familiar with editing gpg.conf. Put simply, the module route ensures that any patent / copyright issues are firmly the users problem. As I understand it, the licence is not compatible with the GPL and therefore should not be distributed with GnuPG. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: 1.4.7 packages for OS X
Robert J. Hansen wrote: I've taken the liberty of packaging up 1.4.7 for OS X. Take a look at the macgpg project at http://macgpg.sourceforge.net/ (I apologize to Benjamin if I'm stepping on his toes here; by my recollection, he's doing packages for 2.0.x, not 1.4.x, so I _should_ be safe.) I've packaged up 1.4.5 and 1.4.6 and was looking at getting 1.4.7 done asap, but you may have saved me the trouble! :) As for the 2.x branch, there hasn't been enough interest for me to devote considerable amounts of my time to getting it packaged up. Packages: http://rjhansen.cs.uiowa.edu/~rjh/GnuPG-1.4.7-PowerPC.dmg http://rjhansen.cs.uiowa.edu/~rjh/GnuPG-1.4.7-i386.dmg Join macgpg and we'll show you how to make universal binaries. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] 1.4.7 packages for OS X
Ryan R. LaMothe wrote: How difficult would be it be to package this application as a .app bundle instead of all over the filesystem like the typical Unix application (which makes installing/uninstalling/upgrading a pita)? There's nothing stopping you doing it and making the result available to all. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] 1.4.7 packages for OS X
Charly Avital wrote: Maybe I misunderstood the indications in http://macgpg.sourceforge.net. My understanding is that the macgpg team decided to stop supporting old versions of Mac OS. However, the recent version of gnupg should (touch wood!) compile from source without any (real) problems. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] 1.4.7 packages for OS X
Benjamin Donnachie wrote: Warning: these packages still have not been extensively tested. I haven't had chance to look at them yet. I've just had a quick look at your installer and I'm afraid that it wouldn't meet the standards set by the macgpg team. Take a look at the documents I've sent you which should hopefully explain all. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: 1.4.7 packages for OS X
Robert J. Hansen wrote: The original links still work; they point to non-IDEA-enabled builds. For completeness' sake, the links are all listed here: IDEA is generally best implemented as a module. That way you don't need to worry about any patent / copyright issues. GnuPG 1.4.7 universal binaries from the macgpg team are now available on the website - see http://macgpg.sourceforge.net/ Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Update 1.4.6 Mac OS configure error
boksbox wrote: I tried to install the 1.4.6 update to my 1.4.5 GnuPG. As I followed the compile instruction I encounter an error. Try my gnupg 1.4.6 binary install at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/GnuPG1.4.6.dmg Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Benjamin Donnachie wrote: I have a test version of a GnuPG v2.0.2 Mac OS Tiger install available Patch for TEST2 available at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST2-PATCH1.zip and sig at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST2-PATCH1.zip.sig This implements the more secure method of involving pinentry directly. Just download the archive, extract and then follow the instructions in readme.txt. Feedback still needed; particularly from OpenPGP smartcard users. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Compiling GnuPG 2.0.1 on MacOS X
Werner Koch wrote: Let me know if it works and I change the code. It works perfectly - many thanks! :-))) Using system helps because it creates a new argv[0]. Unfortunately, I was barking up the wrong tree after reading that MacOSX relies upon modified copies of the shell interpreters to interpret the bundle information. I must remember to be more critical of what I read on the web! :-/ In theory, this should also mean that the QT version of pinentry when properly bundled up should also work correctly. Rather than produce a whole new install to test v2.0.2, I'll knock together an archive with just the files that have changed. Thanks again for all your help, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Werner Koch wrote: There has never been such an option. You need to specify this option with scdaemon. gpg2 has no internal fallback support for smart cards. It requires gpg-agent/scdaemon. [...] Despite the following in the man page: I'll fix the doc. That'd be good - many thanks. Neither scdaemon: I just tested scdaemon and it definitely has this option. But it wasn't defaulting correctly for Mac OS X though. #define DEFAULT_PCSC_DRIVER libpcsclite.so I added a default value for OS X. That's great - many thanks! :-) Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Benjamin Donnachie wrote: I have a test version of a GnuPG v2.0.2 Mac OS Tiger install available at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST1.tgz There have been a couple of issues with the tar archive - I guess I'm too used to the command line! I'll throw together a friendlier GUI fronted install package this afternoon and will make an announcement when it's ready. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Charly Avital wrote: Everything is working fine just as reported in my previous e-mail: gpg-agent is running fine for signing and decrypting in Thunderbird and Mail Excellent news! :-) Version: GnuPG v1.4.6 (Darwin) What happens if you use gpg2 for signing etc? Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Benjamin Donnachie wrote: I'll throw together a friendlier GUI fronted install package this afternoon and will make an announcement when it's ready. It was quicker than I thought... GUI install can be downloaded from http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST1.zip Double click to extract the installer from the archive and then double click on the newly created mac-gnupg-2.0.2-TEST1 install package. Follow the prompts, entering your password when asked, and then all files for gpg2 will be installed in the right places. You will still need to complete the following steps: ii/ Download http://www.py-soft.co.uk/~benjamin/download/mac-gpg/environment.plist and save in ~/.MacOSX/ iii/ Add source ~/.gnupg/.gpg-agent to the file ~/.profile (Create ~/.profile if it doesn't already exist) iv/ Create the file ~/.gnupg/gpg-agent.conf containing the single line: pinentry-program /Applications/pinentry-mac.app/Contents/MacOS/pinentry-helper v/ Log out. Remember that ~ is a shortcut recognised by the command line that represents your home directory. So ~/.guupg/ actually means /Users/benjamin/.gnupg/ on *my* system! Apologies for any confusion caused by the .tgz archive. Again, the remaining install steps will be automated. Ben -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.2 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBRdbgnOgNmph0Y1E2AQJfJBAAhL4GUB1SFJ8uXK6y7i39Xm4fCGJn3qc5 QmvHbh6qaovLlfaf3JSZTAlEZMysp9C1YnUQA6OIN5U5CqCMqfJcI3/9yP/s8Okn YyoZ1e87vfgKOrQMR9MYciUnOSbj+jaY9lervfWVVs6O3x0g1Rghy9tGv5YiJ+o4 mVYHwaLJgRmXQTZUPB1I+FkpEhwKBcUhJHvCJon/yVXaWHsTXRsTsFzef+0ducXF W1GACx2hf0FtVDcmaz9e/BCMBMl5pPe+qtPX+DUBdagmA56Vj5KYQ3RDcXkNDfhW lsTME7w5wcVDsj3ER1TXyhNVCz0fZ1x5jjUshncILb1q+7qfSy1tdpuoawMvEqsO AdzOgLufoTIli2DOfn4qD4TYxSKsIeBZXqfWJpj6dslABlmzmOmfrFVz6aWobg5A YFpPJ5mAu5Psx1Z8jpTDznIgQ8BO61SCDQKT/K38nex5dQuXURdXGUQ4XSqzRkJ/ cpfiOBcHUZ7Q0rP05gvHfg7c8rvNZtNtTe843vH46cvLhe17/hjchxMSutkf9FJN GWMwW4PG1IPFXDS0Y++1fiPBBctJIx1HoeBu2Z97kZA9v0kYa7fZcgOkZ/YIGql9 sWu7hyOr4kkq+Li2P2BDPpWduJI0+DzfKpg71vTxbnORhAKCvJLKO+So7RFq9/Ez JYQgOPqTwGs= =8NzE -END PGP SIGNATURE- ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Charly Avital wrote: What happens if you use gpg2 for signing etc? 1. In Thunderbird, changed the executable path (typed in /usr/local/bin/gpg2), quit TB, launch TB, everything works fine. Version: GnuPG v2.0.2 (Darwin) Fantastic news! :- Libgcrypt took a while to convince to build as a Universal Binary and I was concerned that it may not work on Intels. I've been over the executables with a fine tooth comb (okay, just otool -L) and there are not dependencies outside the Apple provided libraries, so the install should work on all Tiger Macs whether Intel or PPC! :-) (At least that's the theory!) Be ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Benjamin Donnachie wrote: No patches were needed to any of the code and only libgcrypt's config.h needed a minor edit for endian issues with the fat build. Unfortunately, gpg v2.0.2 does not appear to recognise the option pcsc-driver anymore: $ gpg2 --pcsc-driver /System/Library/Frameworks/PCSC.framework/PCSC --card-status gpg: Invalid option --pcsc-driver Despite the following in the man page: --pcsc-driver file Use file to access the smartcard reader. The current default is `libpcsclite.so.1' forGLIBCbasedsystems,`/Sys- tem/Library/Frameworks/PCSC.framework/PCSC' for MAC OS X, `win- scard.dll' for Windows and `libpcsclite.so' for other systems. Neither scdaemon: /* The card dirver we use by default for PC/SC. */ #if defined(HAVE_W32_SYSTEM) || defined(__CYGWIN__) #define DEFAULT_PCSC_DRIVER winscard.dll #elif defined(__GLIBC__) #define DEFAULT_PCSC_DRIVER libpcsclite.so.1 #else #define DEFAULT_PCSC_DRIVER libpcsclite.so #endif ... or pcsc-wrapper correctly default correctly on the Mac: #define DEFAULT_PCSC_DRIVER libpcsclite.so This shouldn't matter if you are using a CCID compliant smartcard reader as TEST1 was compiled with libusb support (Though this still needs testing). However, if you are using a PCSC smartcard reader please download the newly patched TEST2 at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST2.zip Werner et al - any chance the source could please be patched for MacOS, or support for the pcsc-driver option returned? Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [Macgpg-users] GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
Benjamin Donnachie wrote: ii/ Download http://www.py-soft.co.uk/~benjamin/download/mac-gpg/environment.plist and save in ~/.MacOSX/ I forgot to mention that this file will need editing - replace all instances of ~ with the full path to your user area. Unfortunately, it won't accept the ~ short cut. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
GnuPG v2.0.2 MAC OS install - TESTING NEEDED!
I have a test version of a GnuPG v2.0.2 Mac OS Tiger install available at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST1.tgz (Sig available at http://www.py-soft.co.uk/~benjamin/download/mac-gpg/mac-gnupg-2.0.2-TEST1.tgz.sig) This is a Universal Binary and /should/ work on both PPC and Intel. Save archive to disk, and then type sudo tar xzvC / -f /path/to/mac-gnupg-2.0.2-TEST1.tgz If you have not used mac-gpg2 before, you will then need to complete the following steps: i/ Add the new program start gpg-agent in Applications to the list of programs to start on login. ii/ Download http://www.py-soft.co.uk/~benjamin/download/mac-gpg/environment.plist and save in ~/.MacOSX/ iii/ Add source ~/.gnupg/.gpg-agent to the file ~/.profile (Create ~/.profile if it doesn't already exist) iv/ Create the file ~/.gnupg/gpg-agent.conf containing the single line: pinentry-program /Applications/pinentry-mac.app/Contents/MacOS/pinentry-helper v/ Log out. Then when you log in gpg-agent should be started automatically and be available to all applications. This has been tested on a PPC but not Intel yet. There's a small chance that it may not work at all on your system, but I need feedback so that I can improve it! Once I know that it's working I will write an installer that automates the above steps. Remember, you can install this alongside regular gpg and if this version doesn't work, regular gpg will be unaffected. No patches were needed to any of the code and only libgcrypt's config.h needed a minor edit for endian issues with the fat build. Thanks as always to Charly for this patience. Thanks to Werner and his team for such a great product, and thanks to the macgpg team for getting me started! :-) REMEMBER POSITIVE AND NEGATIVE FEEDBACK NEEDED!!! Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Compiling GnuPG 2.0.1 on MacOS X
Peter Pentchev wrote: Is there any reason for not using execv(3)? 'cos I was searching through my MacOS programming book for a solution to MacOS X not reading the GUI bundle information and it suggested using system. G'luck, Christian's suggestion of trying a shell script was perfect and makes my life soo much easier! :) Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Compiling GnuPG 2.0.1 on MacOS X
Benjamin Donnachie wrote:
How embarrassing... my mistake - I was still using the old patched version!
Ah-ha! That's better! As a quick test I threw together the following
helper application:
/*
** Mac OS fails to process bundle information correctly
** for pinentry-mac.
**
** This quick hack attempts to address that.
**
*/
#include stdio.h
int main()
{
return system
(/Applications/pinentry-mac.app/Contents/MacOS/pinentry-mac);
}
Compile this using gcc -isysroot /Developer/SDKs/MacOSX10.4u.sdk -arch
i386 -arch ppc pinentry-helper.c -o pinentry-helper (Or download from
http://www.py-soft.co.uk/~benjamin/download/mac-gpg/pinentry-helper) and
copy it to /Applications/pinentry-mac.app/Contents/MacOS/pinentry-helper.
Then add the following to ~/.gnupg/gpg-agent.conf:
pinentry-program
/Applications/pinentry-mac.app/Contents/MacOS/pinentry-helper
Unpatched gpg-agent (admittedly v1.9.21) correctly invokes pinentry-mac,
reading the GUI bundle information correctly.
It needs more work to achieve a tidy solution - especially since the
location of pinentry-mac is fixed and it fails to pass any command line
arguments. Plus I might still use NSTask instead.
Ben
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Compiling GnuPG 2.0.1 on MacOS X
Benjamin Donnachie wrote: Actually, I wonder whether creating bundle information for gpg-agent would be the solution... I'll give it a go soon and will let you know the outcome. Ah no, that didn't work. But invoking gpg-agent with the option --pinentry-program /bin/sh -c /Applications/pinentry-mac.app/Contents/MacOS/pinentry-mac did. I'll modify my start gpg-agent script and release a new version soon. It's not a particularly great solution, but makes gnupg 2.0.2 usable under MacOS. I haven't had chance to look into the MacOS function NSTask yet but if it does what we want correctly, I'll then look into a MacOS specific version of the assuan library. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Compiling GnuPG 2.0.1 on MacOS X
Benjamin Donnachie wrote: Ah no, that didn't work. But invoking gpg-agent with the option --pinentry-program /bin/sh -c /Applications/pinentry-mac.app/Contents/MacOS/pinentry-mac did. How embarrassing... my mistake - I was still using the old patched version! Ooops... :-/ Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: openpgp card
Jørgen Lysdal wrote: Thanks for the hint. What i was interested in was if i could upload a file to the card and then retrieve it later. That's one of the aims of the project for the open implementation of the openpgp smart card standard, see http://www.py-soft.co.uk/wiki/index.php/Openpgp Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: pinentry-qt (svn/r153) crashes on exec @ assuan_register_command; v0.7.2 execs no error.
Werner Koch wrote: I don't like this. If you really need to be called by sh, pinentry should re-exec itself. What is the reason that you need to be called by sh? I presume sh sets some extra environment variables from a global configiration file. Otherwise the application bundle isn't read correctly and pinentry cannot grab the keyboard focus etc. Yes it's a hack, but I submitted it to you months ago for comment. What about integrating the ObjC version into the pinentry package proper? I gave up when I didn't hear back from you. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: pinentry-qt (svn/r153) crashes on exec @ assuan_register_command; v0.7.2 execs no error.
snowcrash+gnupg-users wrote: atm, i've rebuilt pinentry v072, config'd as, On the Mac, I recommend using my -mac version of pinentry, which is based upon v0.7.2. However, gpg2 will probably need patching so that it behaves properly - see http://www.py-soft.co.uk/~benjamin/download/mac-gpg/patch-query.diff Let me know how you get on - I intend to package gpg2 for the Mac when I get time. Take care, Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [snowcrash+gnupg-users] pinentry-qt (svn/r153) crashes on exec @ assuan_register_command; v0.7.2 execs no error.
snowcrash+gnupg-users wrote: which seem to indicated this is a known issue. the apparent fix/workaround is to build pinentry-qt into a 'bundle'. the referenced bundling howto is at, http://doc.trolltech.com/qq/qq09-mac-deployment.html Unless they've updated that, it was close to useless. You can download the bundle information I compiled for pinentry-qt on the Mac at http://www.py-soft.co.uk/~benjamin/download/index.php?path=mac-gpg%2Fpinentry-qt.app/ Alternatively, try my native pinentry-mac program! Trust me, it's a much better solution. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0
Alon Bar-Lev wrote: The users used IDEA algorithm in GnuPG-1.4, and are unable to use their keys in GnuPG-2.0. Do they /absolutely/ need to use GPG v2? If not, it's probably going to be easier if they go back to using v1.4.x... Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: [snowcrash+gnupg-users] pinentry-qt (svn/r153) crashes on exec @ assuan_register_command; v0.7.2 execs no error.
Benjamin Donnachie wrote: You can download the bundle information I compiled for pinentry-qt on the Mac at http://www.py-soft.co.uk/~benjamin/download/index.php?path=mac-gpg%2Fpinentry-qt.app/ It's been a while since I put this together... I just noticed that if you dig down into the bundle, there's a precompiled version of pinentry-qt for Tiger, but only for PPCs. Ben ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
