Re: building gnupg-1.9.20 on macos

2006-03-09 Thread Remco Post
Charly Avital wrote: Thanks for the information. I have never succeeded to build gpg 1.9.xx on MacOS, in spite of help and tips from WK, so I gave it up. If you are kind enough to keep posting your findings and tips, I shall be very grateful. Charly Well, everything seems to work as

Re: add notation to self sig

2006-03-09 Thread Peter Palfrader
On Wed, 08 Mar 2006, David Shaw wrote: Thanks, that seems to work (as does --expert and sign). If you're tracking SVN, try the latest. I've added a notation command under --edit-key. Great, thanks. Adding notations and removing all of them works just fine. According to the manual page,

[Announce] GnuPG does not detect injection of unsigned data

2006-03-09 Thread Werner Koch
GnuPG does not detect injection of unsigned data (released 2006-03-09, CVE-2006-0049) Summary === In the aftermath of the false positive signature verfication bug (announced 2006-02-15) more thorough

Re: add notation to self sig

2006-03-09 Thread David Shaw
On Thu, Mar 09, 2006 at 10:52:53PM +0100, Peter Palfrader wrote: On Thu, 09 Mar 2006, David Shaw wrote: Let's make it simpler: I just added the ability to delete notations directly by using a minus sign prefix like [EMAIL PROTECTED]. Given these notations: [EMAIL PROTECTED]

Re: [Announce] GnuPG does not detect injection of unsigned data

2006-03-09 Thread vedaal
in the announcement of the fix for this condition on the gnupg announce list, it says the following: =[ begin quoted text ]= The only correct solution to this problem is to get rid of the feature to check concatenated signatures - this allows for strict checking of valid packet

Re: [Announce] GnuPG does not detect injection of unsigned data

2006-03-09 Thread David Shaw
On Thu, Mar 09, 2006 at 05:55:43PM -0500, [EMAIL PROTECTED] wrote: in the announcement of the fix for this condition on the gnupg announce list, it says the following: =[ begin quoted text ]= The only correct solution to this problem is to get rid of the feature to check

[Announce] Second release candidate for 1.4.3 available

2006-03-09 Thread David Shaw
We are pleased to announce the availability of the second release candidate for the forthcoming 1.4.3 version of GnuPG: ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.4.3rc2.tar.bz2 (3.0M) ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.4.3rc2.tar.bz2.sig SHA-1 checksums for the above files