Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Guillaume Lanquepin-Chesnais
Hi, It seems that the version of gnome shipped with F17 includes a gnome-keyring that supports smartcard (cf http://nlnet.nl/project/seahorse-sc/). You should look into seahorse/key manager if your smartcard is listed in it regards, Guillaume Le mardi 29 mai 2012 à 23:07 -0400, Robert J. Hansen

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 02:37 AM, Guillaume Lanquepin-Chesnais wrote: It seems that the version of gnome shipped with F17 includes a gnome-keyring that supports smartcard (cf http://nlnet.nl/project/seahorse-sc/). You should look into seahorse/key manager if your smartcard is listed in it If GnuPG

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 04:32 AM, Robert J. Hansen wrote: If GnuPG can't access it from the command line, Seahorse isn't going to have any better luck. With gnome-keyring-daemon running: And, after restarting gnome-keyring-daemon: [rjh@isaiah Downloads]$ gpg2 --card-status gpg: selecting openpgp

Re: changing the default for --keyid-format

2012-05-30 Thread Michel Messerschmidt
On Tue, May 29, 2012 at 10:03:57PM -0400, Robert J. Hansen wrote: There may be a use case for contextualization in certificates, but if so I haven't found it yet. :) You may wnat to lookup up all certificates that signed a certificate. Or just get all your certificates displayed. Or all

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 10:50, r...@sixdemonbag.org said: for a bit. If anyone has any advice, I'll be coming back to this problem tomorrow. Maybe letting it sit for a while will spur my brain into solving it. The sudo gpg2 might indicate that root has a running gpg-agent and thus scdaemon.

Re: [Sks-devel] [FYI] keys.gnupg.net (was: changing the default for --keyid-format)

2012-05-30 Thread Jeffrey Johnson
On May 29, 2012, at 1:26 PM, Werner Koch wrote: Hi, I can't remember whether I announced it, but since some weeks keys.gnupg.net is a CNAME to pool.sks-keyservers.net and http-keys.gnupg.net is a CNAME to ha.pool.sks-keyservers.net The reason for this change is that it is

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 11:47, quanngu...@mbm.vn said: I tried to make the log, but both the file S.log and mycombinedlog are empty. Did I wrong somewhere? Did you restart gpg-agent? pkill gpg-agent and check with ps that it has really been killed. You should see a notice in the log as

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
Thanks very much for being willing to help with this. I appreciate it. After making the debugging changes to scdaemon.conf and gpg-agent.conf, I ps ax|grepped for gpg-agent and killed all running instances. I then logged out of my GNOME 3 session, in order to bring the state to as close to

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
On 5/30/12 5:13 AM, Werner Koch wrote: log-file socket://home/USER/.gnupg/S.log Also, should this be socket://home... or socket:///home...? With the former, when I invoke gpg-agent manually I get a message of can't connect to `home/rjh/.gnupg/S.log': No such file or directory. With the

Re: getting an encrypted file to show what public key was used

2012-05-30 Thread Mark H. Wood
On Tue, May 29, 2012 at 11:28:36AM -0400, Robert J. Hansen wrote: This goes to underline the importance of proper certificate validation. If I have the sequence of events correct, then it could have been avoided entirely if there had been a Step 4.5, validate the certificate he just received.

Re: changing the default for --keyid-format

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 09:40 AM, Mark H. Wood wrote: Oh, how many times have I wondered why GPA has no search tool. Taking a look at GPA, it seems that 0.9.0 no longer compiles on a modern UNIX -- it expects libassuan-1.x, apparently, and libassuan's now in a version 2. I wasn't able to get the git

Re: changing the default for --keyid-format

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 16:16, r...@sixdemonbag.org said: On 05/30/2012 09:40 AM, Mark H. Wood wrote: Oh, how many times have I wondered why GPA has no search tool. Taking a look at GPA, it seems that 0.9.0 no longer compiles on a modern UNIX -- it expects libassuan-1.x, apparently, and

GPA download site (was: changing the default for --keyid-format)

2012-05-30 Thread Werner Koch
The new download site is ftp://ftp.gnupg.org/gcrypt/gpa/ -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPA download site

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 10:46 AM, Werner Koch wrote: The new download site is ftp://ftp.gnupg.org/gcrypt/gpa/ You may want to update: http://www.gnupg.org/related_software/gpa/ then, as it points off at a site which only offers 0.9.0 for download. :)

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 14:54, r...@sixdemonbag.org said: Also, should this be socket://home... or socket:///home...? Oops, 3 dashes are correct. Starting over from scratch again I manually removed S.gpg-agent and S.log. S.gpg-agent was recreated automatically, but S.log seemed to not be.

Re: GPA download site

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 16:54, r...@sixdemonbag.org said: http://www.gnupg.org/related_software/gpa/ then, as it points off at a site which only offers 0.9.0 for download. :) That makes sense. For most other parts of GnuPG we enter the current version number into a file swdb.wml and are

Re: PGP interoperability

2012-05-30 Thread MFPA
Hi On Friday 25 May 2012 at 10:22:45 AM, in mid:4fbf4f65.3000...@vulcan.xs4all.nl, Johan Wevers wrote: Maybe the NSA has found a workable solution for factoring but not for DL? And shared the fact privately with Symantec? -- Best regards MFPA

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread MFPA
Hi On Monday 28 May 2012 at 3:12:24 AM, in mid:4fc2df08.4020...@sixdemonbag.org, Robert J. Hansen wrote: The problem isn't the fraction of the population. The problem is command and control. That will always be a problem if the planting is uncoordinated. As a thought experiment, what

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 04:14 PM, MFPA wrote: That will always be a problem if the planting is uncoordinated. And if the planting *is* coordinated, why in the world would you ever need a 1 in 6 penetration rate? I'm sorry, but this is rapidly descending down the rabbit-hole of conspiracy theory -- where

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread Jean-David Beyer
MFPA wrote: Hi On Monday 28 May 2012 at 3:12:24 AM, in mid:4fc2df08.4020...@sixdemonbag.org, Robert J. Hansen wrote: The problem isn't the fraction of the population. The problem is command and control. That will always be a problem if the planting is uncoordinated. As a

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread Hubert Kario
On Wednesday 30 of May 2012 21:14:42 MFPA wrote: Hi On Monday 28 May 2012 at 3:12:24 AM, in mid:4fc2df08.4020...@sixdemonbag.org, Robert J. Hansen wrote: The problem isn't the fraction of the population. The problem is command and control. That will always be a problem if the

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Nguyễn Hồng Quân
Hi, After pkill gpg-agent, it seems that gg-agent still run: hongquan@Pangolin ~ $ pkill gpg-agent hongquan@Pangolin ~ $ ps ax | grep gpg-agent 1991 ?Ss 0:00 /usr/bin/ssh-agent /usr/bin/gpg-agent --daemon --sh --write-env-file=/home/hongquan/.gnupg/gpg-agent-info-Pangolin

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
After more wrestling with this, I'm still no closer to a solution than I was this morning. I was able to recreate Nguyễn's difficulties with an Ubuntu 12.04LTS/64-bit system, though, so we can confirm that one's got problems and it's not simple user error on his part. Or, rather, if it is then