Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Werner Koch
On Wed, 18 Feb 2015 20:24, d...@fifthhorseman.net said: as did a few other maintainers. However there was not only not a consensus to do this more generally, there was active opposition to doing it at all. that's a bummer :( I guess that is a GPL issue. They don't want any GPLed stuff

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Pete Stephenson
On Thu, Feb 19, 2015 at 5:53 AM, Ranjini H.K ranjin...@tyfone.com wrote: Hi all, Am trying to implement disk encryption/decryption using truecrypt with security token support. I have a java card with openPGP applet loaded on to it. Inspite of configuring truecrypt to use the security token,

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Ranjini H.K
Thanks Pete Stephenson. Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. What should i do othercase To make my OpenPGP applet support PKCS#11. Ranjini HK Software Engineer - Tyfone, Inc. Bangalore www.tyfone.com Mobile: +91-9886262192 On Thu, Feb 19, 2015 at 1:46 PM,

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Matthias-Christian Ott
On 2015-02-19 19:50, Thomas Harning Jr. wrote: On Thu Feb 19 2015 at 12:23:34 PM Matthias-Christian Ott o...@mirix.org wrote: On 2015-02-19 09:23, Ranjini H.K wrote: Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. What should i do othercase To make my OpenPGP applet

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Matthias-Christian Ott
On 2015-02-19 20:00, Werner Koch wrote: On Thu, 19 Feb 2015 18:22, o...@mirix.org said: Your Java Card does probably not support PKCS #11. An applet on the card might implement it. To make it work, you need a PKCS #11 middleware and PKCS#11 is an API between two applications. It is not

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 18.02.15 13:05, Jonathan Schleifer wrote: Upstream still does have the issue which now seems to have been fixed in the fork but in a binary removed from upstream… I really can not confirm this. I am running vanilla GnuPG 2.1.2 (built from source) on Yosemite (10.10.2 to be exact) with a

Re: Compiled binaries execute but exit with Abort

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 12:01, er...@askerrol.org said: Thanks. Now to figure out why make check fails but make works without error. Are there dependencies besides pth for libgpg-error? Are you using a recent Pth version? I recall that older Pth versions had problems when used by programs which

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Thomas Harning Jr.
On Thu Feb 19 2015 at 12:23:34 PM Matthias-Christian Ott o...@mirix.org wrote: On 2015-02-19 09:23, Ranjini H.K wrote: Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. What should i do othercase To make my OpenPGP applet support PKCS#11. Your Java Card does probably

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 18:16, js-gnupg-us...@webkeks.org said: I also like @ to hide useless output, but is downloading *and executing* from a remote location really something you should hide? Especially if everything else isn't hidden? Okay, someone please write a noscript extension for the

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Jonathan Schleifer
Am 19.02.2015 um 20:08 schrieb Werner Koch w...@gnupg.org: Because I have to enter the PIN everytime (right, I do this on purpose), the RSA signatures a long, and I do not keep my signing key card inserted all the time. In fact I have to walk out of the office to pick it up. Another

Re: gpg-agent does not authenticate ssh connections

2015-02-19 Thread Rainer Keller
Gpg-agent uses the smartcard key which is identified by the $AUTHKEYID attribute: $ gpg-connect-agent 'scd getattr $AUTHKEYID' /bye S $AUTHKEYID OPENPGP.3 OK I get the same output for my card. Thus only the keys listed in ~/.gnupg/sshcontrol will be used. The keygrip from the card

Re: GnuPG 2.0.27 stable released

2015-02-19 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] Congratulations on the new release. -- Dr Richard Stallman President, Free

Re: GNUPG 2.* and AIX - questions

2015-02-19 Thread Werner Koch
On Sun, 15 Feb 2015 12:16, aixto...@gmail.com said: I took the hint and tried to package gnu/nth but make fails - immediately - with this message. You might find something about this in bugs.gnupg.org. I have not tried gnupg 2.0.x on AIX for many years thus it is quite possible that you run

Re: 2.1.2: keyserver route failure

2015-02-19 Thread Werner Koch
On Wed, 18 Feb 2015 20:13, d...@fifthhorseman.net said: Reasonable IPv6 stacks should return an ENETUNREACH (Network is unreachable) error message when trying to connect() to an address for which there is no route, which should already cause dirmngr to failover The error handler after a

Re: Compiled binaries execute but exit with Abort

2015-02-19 Thread Errol Casey
Thanks. Now to figure out why make check fails but make works without error. Are there dependencies besides pth for libgpg-error? make check-TESTS bash: line 5: 11699 Abort (core dumped) ${dir}$tst FAIL: t-version Unspecified source: Success gcrypt: Invalid length specifier in

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Richard Ulrich
Hi Ranjini, Does it have to be truecrypt? LUKS works very well with OpenPGP SmartCards or JavaApplets implementing it (e.g. YubiKey NEO). Just follow the steps in this blog post: https://blog.kumina.nl/2010/07/two-factor-luks-using-ubuntu Rgds Richard Am Donnerstag, den 19.02.2015, 13:53 +0530

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 18.02.15 07:21, Werner Koch wrote: command line tools. *I think there is no more reason to develop MacGPG*, i.e. a port, anymore. Let the port die. Can you briefly explain how Patrick's new installer [1] is related to that? Would it be an option to use that as the core for gpgtools?

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 18:22, o...@mirix.org said: Your Java Card does probably not support PKCS #11. An applet on the card might implement it. To make it work, you need a PKCS #11 middleware and PKCS#11 is an API between two applications. It is not directly related to smartcards. However, it

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 17.02.15 23:32, Lukas Pitschl wrote: The best way to reach us is either our support platform at https://gpgtools.tenderapp.com or t...@gpgtools.org. Ok, that link explains the certificate and it makes more sense. I can see you've already changed at least the first link to the support site

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 18.02.15 07:21, Werner Koch wrote: wrappers or fixes upstream. Case in point: Has the fix for gpg-agent / scdaemon hang been discussed upstream at all [4], [5]? In MacGPG there is still ../libexec/gnupg-pcsc-wrapper which has been modified in commit f4c3e1bb to fix the issues of scdaemon

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 18:15, js-gnupg-us...@webkeks.org said: I don't really see how that is cumbersome if you have an alias for tag and for commit that each specify the key you want? Because it is too easy to forget about it. And I would need to teag Magit. I started to use a new key for

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 19.02.15 21:18, Ville Määttä wrote: Surely someone from the KDE / larger community using pinentry-qt4 has been working on a QT 5 version of pinentry? Ok, found it :). Issue #1806 [1]. [1]: https://bugs.g10code.com/gnupg/issue1806 -- Ville signature.asc Description: OpenPGP digital

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Doug Barton
On 2/19/15 12:16 AM, Pete Stephenson wrote: Considering the way it was abandoned by its developers, TrueCrypt is probably not the best choice going forward. We don't know the whole story about what happened there, so I would be hesitant to attribute malice. For some of us who need to have

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Ranjini H.K
Yes i used Scute. No success with it. I better ask OpenSC mailing list with the help asking for the support for handle data objects even if the card could store them.. Ranjini HK Software Engineer - Tyfone, Inc. Bangalore www.tyfone.com Mobile: +91-9886262192 On Fri, Feb 20, 2015 at 1:50 AM,

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Antony Prince
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On February 20, 2015 1:00:52 AM EST, Doug Barton dougb@dougbarton.email wrote: On 2/19/15 12:16 AM, Pete Stephenson wrote: Considering the way it was abandoned by its developers, TrueCrypt is probably not the best choice going forward. We don't

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Jonathan Schleifer
Am 18.02.2015 um 15:57 schrieb Werner Koch w...@gnupg.org: git commit -S keyID You can just create an alias for that, I for example use git ci. I know that but I would like to have a different key for tag and commit. Requiring an option is just too cumbersome. I don't really see how that

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Jonathan Schleifer
Am 18.02.2015 um 16:05 schrieb Werner Koch w...@gnupg.org: I also do this often to avoid cluttering the screen. No need to assume a backdoor. It is for a Mac and Mac users want a clean tty ;-) I also like @ to hide useless output, but is downloading *and executing* from a remote location

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Matthias-Christian Ott
On 2015-02-19 09:23, Ranjini H.K wrote: Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. What should i do othercase To make my OpenPGP applet support PKCS#11. Your Java Card does probably not support PKCS #11. An applet on the card might implement it. To make it work, you

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Peter Lebbing
On 2015-02-19 18:16, Jonathan Schleifer wrote: I also like @ to hide useless output, but is downloading *and executing* from a remote location really something you should hide? Especially if everything else isn't hidden? I can understand you're pretty darn pissed off that they executed

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Robert J. Hansen
[1] https://en.wikipedia.org/wiki/Hanlon%27s_razor ; apparently after Robert J. Hanlon, not Hansen ;P There are at least four guys in the security world named Robert Hansen; to make matters worse, some of us have spoken at the same conferences. My middle initial is only to distinguish me from

Re: gpg-agent does not authenticate ssh connections

2015-02-19 Thread NIIBE Yutaka
On 02/09/2015 02:41 AM, Rainer Keller wrote: In .gnupg/sshcontrol I have added the correct keygrip and ssh-add -l shows the right key: 4096 XX:XX:XX cardno: (RSA) Well, you don't need to add this manually, for your smartcard. gpg-agent smartcard signing failed: Bad PIN It sounds