Re: Stripping expired subkey during export?

2017-03-03 Thread Phil Pennock
On 2017-03-03 at 09:51 +0100, Werner Koch wrote: > Not cleaning expired subkeys is a good thing for secret key export, so > that you can keep on decyrpting old mails. Sure, but this is a non-secret export, for the versions for publication. > Exporting

Re: Problems with GPGME returning "Not Implemented" or "Configuration error"

2017-03-03 Thread Jeffrey Stedfast
Anyone have any thoughts on this? On 2/27/17, 9:20 AM, "Gnupg-users on behalf of Jeffrey Stedfast" wrote: Hi all, I'm working on re-implementing GMime to use libgpgme (1.8.0 on Fedora 25) instead of using my

Re: Verify with missing public key: unexpected returncode

2017-03-03 Thread Kristian Fiskerstrand
On 03/03/2017 06:04 PM, Gerd v. Egidy wrote: > When reading the gpg2 manpage on return codes: One quick observation, if using this in automated way and return code matters, you likely want to check out "gpgv", otherwise you should be parsing --status-fd output for more details --

Re: [Announce] GnuPG 2.1.19 released

2017-03-03 Thread Thomas Jarosch
On Wednesday, 01 March 2017 20:27:00 CET Werner Koch wrote: > Noteworthy changes in version 2.1.19 > > > .. > > * scd: Support for multiple card readers. > > * scd: Improved detection of card inserting and removal. thanks for the new release! The support

Re: Verify with missing public key: unexpected returncode

2017-03-03 Thread Gerd v. Egidy
Hi Kristian, On Friday, 03 March 2017 18:11:04 CET Kristian Fiskerstrand wrote: > On 03/03/2017 06:04 PM, Gerd v. Egidy wrote: > > When reading the gpg2 manpage on return codes: > One quick observation, if using this in automated way and return code > matters, you likely want to check out

Re: How U2F works

2017-03-03 Thread Thomas Jarosch
On Tuesday, 28 February 2017 00:28:21 CET NIIBE Yutaka wrote: > Anyhow, it would be possible for Gnuk to add U2F support (somehow > limited, because of available resource on board). regarding limited resources, the Yubikey people did a fine trick: There is no per-website data stored on the

Re: Verify with missing public key: unexpected returncode

2017-03-03 Thread Gerd v. Egidy
Hi Robert, > > I think it should return 1 in this case. But I get 2. Why? > > Because there were no bad signatures. A signature which cannot be > verified is neither good nor bad, it just is. ok. > The alternative would be for GnuPG to return a bad signature literally > *whenever* it had no

Re: Verify with missing public key: unexpected returncode

2017-03-03 Thread Robert J. Hansen
> I think it should return 1 in this case. But I get 2. Why? Because there were no bad signatures. A signature which cannot be verified is neither good nor bad, it just is. The alternative would be for GnuPG to return a bad signature literally *whenever* it had no public key with which to

Verify with missing public key: unexpected returncode

2017-03-03 Thread Gerd v. Egidy
Hi, I have a scenario where a signature on a file should be checked. The file is signed by several keys and for this scenario it is ok if at least one is correct. In some cases it can happen that the system doing the check does not have access to all public keys that are used for signing. When

Re: [Announce] GnuPG 2.1.19 released

2017-03-03 Thread Werner Koch
On Wed, 1 Mar 2017 21:03, ankos...@gmail.com said: > Would it be possible with the next release to build also the python-2 > & 3 bindings for Windows? Good suggestion - we will look into it. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: Stripping expired subkey during export?

2017-03-03 Thread Werner Koch
On Fri, 3 Mar 2017 07:21, gnupg-us...@spodhuis.org said: > Why is `export-clean` not dropping the expired subkey? Is it that > export-clean only filters unusable userids, not unusable subkeys? Right: /* Always do the cleaning on the public key part if requested. * Note that both