gpgme problem with claws mail

2011-08-22 Thread Doug Barton
The nice folks at the claws list helped me narrow down my problem, as you can see below. I'm using gnupg 2 normally, but I tried switching to gnupg 1 and that didn't help. I'm using gpgme-1.3.1. Any suggestions on how I can debug why gpgme is not recognizing that there is a signature in the

Re: Location of GnuPG 1.4.11 Windows binary

2011-08-22 Thread Werner Koch
On Mon, 22 Aug 2011 04:54, markr-gn...@signal100.com said: If anyone from GnuPG is reading this, please don't stop building (and providing links to) Windows binaries for GnuPG 1.x. I'm sure I can't be I deliberately removed the link. For those who really really need 1.4 for Windows, they

gpgsm certificate validity

2011-08-22 Thread yyy
Hello! How to verify if a certificate (in keyring) is valid? I tried to encrypt file using gpgsm and no key specifiying methods worked (http://lists.gnupg.org/pipermail/gnupg-users/2011-August/042580.html) Could that be caused by invalid certificate?

Which release should we be using?

2011-08-22 Thread Anthony Papillion
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 So I'm currently running 1.4.10 for GNU/Linux even though I know that 2.0 has been out for a while. I chose to stick with 1.4.10 and 1.4.11 because I don't like having to use pinentry since it doesn't support cut and paste. My questions are these:

Trying to convert from PGP on XP to a GUI on Win 7

2011-08-22 Thread MarshallAbrams
I've been using PGP 8.1 under Windows XP, but have to find a new GUI to use under Windows 7. I found Gpg4win and figured out how to import my keyrings bu changing the extension to gpg. I was able to decrypt a previously encrypted file using gpg2.exe. There didn't seem to be a GUI. Reading thru

Re: gpgsm certificate validity

2011-08-22 Thread yyy
On 2011.08.22. 15:03, Werner Koch wrote: On Mon, 22 Aug 2011 11:07, y...@yyy.id.lv said: How to verify if a certificate (in keyring) is valid? gpgsm -k --with-validation USERID without USERID all certifciates are validated. In case you want to skip CRL checks, add the option

Re: gpgsm certificate validity

2011-08-22 Thread Werner Koch
On Mon, 22 Aug 2011 11:07, y...@yyy.id.lv said: How to verify if a certificate (in keyring) is valid? gpgsm -k --with-validation USERID without USERID all certifciates are validated. In case you want to skip CRL checks, add the option --disable-crl-checks. Shalom-Salam, Werner --

Re: Which release should we be using?

2011-08-22 Thread Dan McGee
On Mon, Aug 22, 2011 at 7:01 AM, Werner Koch w...@gnupg.org wrote: On Mon, 22 Aug 2011 10:29, papill...@gmail.com said: because I don't like having to use pinentry since it doesn't support cut and paste. My questions are these: That is on purpose.  If you have your passphrase on file for c+p

Re: gpgsm certificate validity

2011-08-22 Thread yyy
On 2011.08.22. 15:18, yyy wrote: On 2011.08.22. 15:03, Werner Koch wrote: On Mon, 22 Aug 2011 11:07, y...@yyy.id.lv said: How to verify if a certificate (in keyring) is valid? gpgsm -k --with-validation USERID without USERID all certifciates are validated. In case you want to skip CRL

Re: Which release should we be using?

2011-08-22 Thread Werner Koch
On Mon, 22 Aug 2011 15:27, dpmc...@gmail.com said: extremely shortsighted. Any password management program like Keepass makes transfer via the clipboard easy and relatively safe (clearing it after 10 seconds), so that doesn't sound like the safety of no passphrase at all. You may not

Re: gpgsm certificate validity

2011-08-22 Thread Werner Koch
On Mon, 22 Aug 2011 15:27, y...@yyy.id.lv said: This certificate does not have BasicConstraints, maybe this is a cause of error? Quite likely. That is required for CA certifciates. Is it possible to override check for BasicConstraints? Is it a bug? Try adding the relax keyword to the

Re: Which release should we be using?

2011-08-22 Thread gnupg
On 22/08/11 15:25, Werner Koch wrote: BTW, pinentry is a separate package from GnuPG and easy to hack. On this note, if anybody is interested, I recently wrote a pinentry wrapper for password protecting a smartcard pin: https://grepular.com/Protecting_PGP_Smartcards_from_Observation_Attacks

supersede key on key-server

2011-08-22 Thread Mike Acker
some of us use more than one email address. with GPG it is simple to add a secondary ID to a key and this seems to work quite well. when a change like this is made it is desirable to update the keyserver. what happens when you re-upload a key to the keyserver? I hate to think the keyserver

Re: supersede key on key-server

2011-08-22 Thread Jonathan Ely
I was wondering something similar. I have a few keys which I have invalidated and disabled but there is no way to delete them. I am using this new key which I have not uploaded because if something happens and I must re-create the key that will too become just clutter on the server. On 22/08/2011

Re: gpgsm certificate validity

2011-08-22 Thread yyy
On 2011.08.22. 17:31, Werner Koch wrote: On Mon, 22 Aug 2011 15:27, y...@yyy.id.lv said: This certificate does not have BasicConstraints, maybe this is a cause of error? Quite likely. That is required for CA certifciates. Is it possible to override check for BasicConstraints? Is it a bug?

Re: Trying to convert from PGP on XP to a GUI on Win 7

2011-08-22 Thread Werner Koch
On Mon, 22 Aug 2011 00:10, marshallabr...@comcast.net said: encrypted file using gpg2.exe. There didn't seem to be a GUI. Reading thru the manual, I see that there is supposed to be an extension/plug-in on the Windows Explorer menu for GpgEX, but I don't see it. What should I do? If you are

Re: supersede key on key-server

2011-08-22 Thread Ben McGinnes
On 23/08/11 12:39 AM, Mike Acker wrote: some of us use more than one email address. with GPG it is simple to add a secondary ID to a key and this seems to work quite well. when a change like this is made it is desirable to update the keyserver. what happens when you re-upload a key to the

Re: Which release should we be using?

2011-08-22 Thread Anthony Papillion
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 08/22/2011 07:01 AM, Werner Koch wrote: On Mon, 22 Aug 2011 10:29, papill...@gmail.com said: because I don't like having to use pinentry since it doesn't support cut and paste. My questions are these: That is on purpose. If you have your