Re: How do I flush a bad symmetric password from gpg-agent?

2009-08-19 Thread Werner Koch
On Tue, 18 Aug 2009 20:28, do...@dougbarton.us said: Today I mis-typed a passphrase for a symmetrically encrypted file and was surprised to discover that gpg-agent had stored the bad passphrase and would not let me access the file. I have occasionally in the past This is a new and probably

Re: Practical Advice for those using AES256 cipher?

2009-08-19 Thread Werner Koch
On Wed, 19 Aug 2009 15:28, kevhil...@gmail.com said: the article interesting (not sure if I understood a lot of the blog comments), is there any practical advice I should take away from it as it relates to GnuPG? Don't care about it. It is no threat to use AES 256 or AES 128. The remarkable

Re: Help with decrypting gpg file

2009-08-28 Thread Werner Koch
On Tue, 25 Aug 2009 23:17, jb...@infimark.com said: By the way, I did use your recommended command string and got the same result. I suspect there is some kind of option that is required so that gpg knows that the output file should be created as an archive type file. No. gpg does not know

Re: Possible bug: addkey can create certifying subkey

2009-09-01 Thread Werner Koch
On Mon, 31 Aug 2009 19:24, j...@jameshoward.us said: I am not sure if this is a bug, but given the documentation it is not the expected behavior. I created new keys this weekend, due to a lost USB drive. Replicating it here, if you specify --expert and create a RSA subkey with all the

Re: Possible bug: addkey can create certifying subkey

2009-09-01 Thread Werner Koch
On Tue, 1 Sep 2009 20:57, ha...@hawkesnest.net said: I think it may still be a problem that attempting to turn off all the flags has the actual effect of turning them all on instead... That is per OpenPGP: Key flags are not required and thus lacking any key flags, we need to assume all

Re: Signing with a key on a smart card

2009-09-02 Thread Werner Koch
On Wed, 2 Sep 2009 10:55, jerome.bl...@nerim.net said: anyone that could explain me how gpg chooses which secret key to use or how I could tell gpg which one to use ? Without an option, gpg uses the first available secret key for signing. This is usually not desired, thus you can use

[Announce] GnuPG 1.4.10 released

2009-09-02 Thread Werner Koch
Hello! We are pleased to announce the availability of a new stable GnuPG-1 release: Version 1.4.10. The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication and data storage. It is a complete and free replacement of PGP and can be used to encrypt data and to create digital

Re: 1.4.10rc1 and v2 OpenPGP cards/3072 bit keys

2009-09-02 Thread Werner Koch
On Sun, 30 Aug 2009 18:07, ds...@gefira.pl said: However, I cannot decrypt a message encrypted with a 3072b key, also generated on-card. I'm 100% sure I'm entering a correct PIN but still I can confirm that. It seems there are actually two problems: One bug in gpg and afaics a bug in the

[Announce] W32 build of GnuPG 1.4.10 is broken

2009-09-03 Thread Werner Koch
Hi, GnuPG 1.4.10 has been announced yesterday, including a binary for Microsoft windows: gnupg-w32cli-1.4.10.exe (1531k) gnupg-w32cli-1.4.10.exe.sig GnuPG compiled for Microsoft Windows and OpenPGP signature. This is a command line only version; the source files are the

Re: Changes in 1.4.10

2009-09-03 Thread Werner Koch
On Thu, 3 Sep 2009 08:36, hide...@gmail.com said: Doesn't this (C) 2008 supposed to say (C) 2009? Good catch but too late for 1.4.10. Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme regelt ein Bundeschgesetz. ___ Gnupg-users

[Announce] Updated W32 build of GnuPG 1.4.10

2009-09-03 Thread Werner Koch
Hi, the broken binary build of GnuPG 1.4.10 for Microsoft Windows has been fixed. The new installer has a new file name and includes a small source patch to document the applied fix. It can be downloaded from ftp://ftp.gnupg.org/gcrypt/binary/ gnupg-w32cli-1.4.10a.exe (1539k)

Re: [Announce] GnuPG 2.0.13 released

2009-09-05 Thread Werner Koch
On Fri, 4 Sep 2009 20:11, h...@online.no said: Both 32 and 64 bit pth is installed, and pointing configure to the libs using --with-pth-prefix=PFX doesn't help either. The devolpment package is missing; i.e. the file pth.h . Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme

Re: BZIP2

2009-09-05 Thread Werner Koch
On Fri, 4 Sep 2009 21:21, bark...@gmail.com said: What is the reason for the Windows build of 1.4.10 (both the pulled and fixed binaries) not supporting BZIP2? I was not aware that bzip was in gnupg-w32cli-1.4.9 . It is all a matter of the build environment; i.e. if the the bzib2 library was

Yet another 1.4.10 build for Windows

2009-09-05 Thread Werner Koch
Hi, I had some spare time while waiting for the server of the German tax administration to return our monthly declaration. The result is another build for Windows. Yes, again with BZIP2 support. ftp://ftp.gnupg.org/gcrypt/binary/gnupg-w32cli-1.4.10b.exe

Re: GnuPG 2.0.12 on Windows

2009-09-20 Thread Werner Koch
On Thu, 3 Sep 2009 11:23, bre...@sanders.org said: When compiling 2.0.12 on Windows with MinGW/MSYS there was a compilation error on scd/ccid-driver.c because ETIMEDOUT doesn't exist on Windows. You need all the patches as available in gpg4win. Or use 2.0.13. Salam-Shalom, Werner --

Re: OpenPGP 2.0 and Hushmail keys

2009-09-21 Thread Werner Koch
On Thu, 10 Sep 2009 18:53, mcs...@hotmail.com said: I am battling to understand this as I thought generating a key pair on the openPGP card itself was as secure as can be as your private key ONLY exists on the card itself and is not available anywhere else (ie: on your hard drive for export).

Re: Copy existing key to OpenPGP 2.0 card

2009-09-21 Thread Werner Koch
On Thu, 10 Sep 2009 23:34, mcs...@hotmail.com said: What is the correct way to copy existing keys that exist onto an OpenPGP 2.0 card? I was trying this, is it correct: gpg --edit-key toggle keytocard select 1 key 1 keytocard select 2 q y Soemthing like this. You need to

Re: Details of signature verification status-fd lines

2009-09-22 Thread Werner Koch
On Tue, 22 Sep 2009 16:26, bmea...@ieee.org said: Just a quick question on the --status-fd output from a --verify operation: if EXPSIG, EXPKEYSIG, or REVKEYSIG are given, could VALIDSIG or GOODSIG also show up? In other words, are these just for It depends. EXPKEYSIG for example may come in

Re: Details of signature verification status-fd lines

2009-09-23 Thread Werner Koch
On Tue, 22 Sep 2009 17:50, bmea...@ieee.org said: Thanks for the response. So EXPKEYSIG doesn't mean the key was expired when the signature was made, right? If that shows up along with It means that the key has expired by now. VALIDSIG, it's ok to trust the signature, correct? What about

Re: Is it possible to have the same authentication key on several smartcard ?

2009-09-23 Thread Werner Koch
On Wed, 23 Sep 2009 11:46, tux.tsn...@free.fr said: Is it possible to have the same authentication key on several smartcard ? Yes. You need to generate the key off-card and and then put it onto the card. Use gpg --edit-key and the subcommands genkey and keytocard for this. Is it possible

Re: choosing an encryption target from a User ID

2009-09-23 Thread Werner Koch
On Wed, 23 Sep 2009 15:34, d...@fifthhorseman.net said: OK; if i'm proposing one specific alternative, it would be: Please keep in mind that using a user ID is just to help the user in the most common case. Any proper mail tool won't accept such a solution but either presenr the user a list of

Re: Details of signature verification status-fd lines

2009-09-23 Thread Werner Koch
On Wed, 23 Sep 2009 16:16, bmea...@ieee.org said: By the way, are there any python or PHP bindings for GPGME? Yes, there are several of them and we should really compile a list of them or actually add them to the distribution. Shalom-Salam, Werner -- Die Gedanken sind frei. Auschnahme

Re: choosing an encryption target from a User ID

2009-09-24 Thread Werner Koch
On Wed, 23 Sep 2009 19:04, d...@fifthhorseman.net said: Has this been made this clear to collaborating MUA/plugin developers? I think the auto select a key step for MUAs or plugins is often implemented as let gpg pick the key based on the user ID. I added PGP/MIME crypto to several MUA and

Re: Two tidbits of potential interest

2009-09-25 Thread Werner Koch
On Thu, 24 Sep 2009 21:13, marcio.barb...@gmail.com said: Is this a generic asymmetric premise? I mean: is it valid both to the (computational) Mathematics behind OpenPGP's and X.509's public keys' integers? Yes. All real world asymmetric algorithms are build on a hard so solve computional

Re: How to reset a smartcard ?

2009-09-25 Thread Werner Koch
On Fri, 25 Sep 2009 10:33, tux.tsn...@free.fr said: No body has an idea to reset a smartcard as factory settings ? I think it is possible, but I don't know how to do that. If you have a version 2 card, this is possible. WARNING: Don't run the commands given below on version 1 cards - you

Re: Network Mounted Home Directory and removal of --passphrase option

2009-09-26 Thread Werner Koch
On Fri, 18 Sep 2009 16:52, awing...@hotmail.com said: I am trying to upgrade to GPG2 and am having trouble, I think all stemming from the new user agent feature. My first question: is there a way to simply Well, it is available for 6 years and GnuPG 2.0 was released 3 years ago. Gpg-agent is

Re: Two tidbits of potential interest

2009-09-26 Thread Werner Koch
On Fri, 25 Sep 2009 19:22, marcio.barb...@gmail.com said: And as a conclusion, Elgamal problems would be harder to solve. Is it correct? No; it is not sure that the discrete logarithm problem is harder to solve that the factoring problem. Shalom-Salam, Werner -- Die Gedanken sind frei.

Re: Why a full keys and sub keys backup are not proposed when keys and sub keys are done on-card ?

2009-09-27 Thread Werner Koch
On Sun, 27 Sep 2009 09:38, tux.tsn...@free.fr said: Just for information, I wanted to known why you don't propose a full backup of the three keys (Sign, encryption and authentication) when keys are generated on-card. Because only encryption key is backupted, a good idea will be perhaps to

Re: Why a full keys and sub keys backup are not proposed when keys and sub keys are done on-card ?

2009-09-28 Thread Werner Koch
On Sun, 27 Sep 2009 20:59, tux.tsn...@free.fr said: Thanks for your answer, I'm agree with you for sign key, but for the authentication key, if it's used to ssh server connection on more than 100 servers for the user root for example, if you lost this key, you It is always a tradeoff between

Re: OpenPGP-Card2.0 and Omnikey Cardman 3021?

2009-09-30 Thread Werner Koch
On Wed, 30 Sep 2009 13:51, talm...@orange.zero.jp said: Has anyone gotten the Omnikey Cardman 3021 to work with the internal drivers? That one does not work reliable with 2048 bit keys. The Windows driver seems to have a workaround for it and I tried to come up with a similar workaround.

Re: SSH using OpenPGP card under Windows

2009-10-06 Thread Werner Koch
On Mon, 5 Oct 2009 15:54, si...@josefsson.org said: There is a free smartcard-enabled Putty: http://www.joebar.ch/puttysc/ I had in mind to change putty to optionally support gpg-agent - much the same as we do under Unix. However I had not enough time to work on it. Shalom-Salam,

Re: SSH using OpenPGP card under Windows

2009-10-06 Thread Werner Koch
On Mon, 5 Oct 2009 15:54, si...@josefsson.org said: But it requires a PKCS#11 module -- I see on scute.org that it is possible to build for Windows, but are there any pre-compiled binaries available? Scute is part of gpg4win 2.0. Salam-Shalom, Werner -- Die Gedanken sind frei.

Re: Testing the exit status

2009-10-10 Thread Werner Koch
On Fri, 9 Oct 2009 13:47, david.g...@turpin-distribution.com said: Does GPG return different status codes when it exits? I'm specifically looking for different types of error, such as file not found, key not found, invalid passphrase etc. This would not be reliable. There are just too

Re: Testing the exit status

2009-10-12 Thread Werner Koch
On Mon, 12 Oct 2009 11:29, david.g...@turpin-distribution.com said: Can you tell me what the numeric arguments are for status-fd? That is the file descriptor obn which output should happen. Usualy you woul use --status-fd 2 to output to stderr; however how can use arbitrary file

Re: Testing the exit status

2009-10-13 Thread Werner Koch
:6C7EE1B8621CC013:899817715:1055898235::m:::scESC: fpr:ECAF7590EB3443B5C7CF3ACB6C7EE1B8621CC013: uid:fWerner Koch w...@g10code.com: uid:fWerner Koch w...@gnupg.org: sub:f:1536:16:06AD222CADF6A6E1:919537416:1036177416:e: fpr:CF8BCC4B18DE08FCD8A1615906AD222CADF6A6E1

Re: A lot of questions about CERT, PKA and make-dns-cert

2009-10-16 Thread Werner Koch
On Fri, 16 Oct 2009 05:27, ds...@jabberwocky.com said: Even if the documentation was better (and I agree, it is poorly documented), I don't think CERT or PKA would be a very widely used FWIW: At least for PKA that is my fault. I once wrote a paper for it in German and presented it at the GUUG

Re: Creating self-signed S/MIME certificate

2009-10-17 Thread Werner Koch
On Fri, 16 Oct 2009 23:58, f...@novell.com said: I'm working on implementing S/MIME support in my GMime library and need to create a set of keys for some unit tests. Is there any way I can create some self-signed S/MIME certificates with gpgsm? Sorry, no. You need to use some CA software for

Re: gpg-agent unknown value for WHAT

2009-10-20 Thread Werner Koch
On Tue, 20 Oct 2009 16:41, david.sav...@paremus.com said: I'm attempting to generate a 4096bit RSA key using gnupg 2.0.12 and gpg-agent 2.0.11 but I'm getting an error message prior to entering That does not work. You have to update gpg-agent. The conflict is an attempt to minimize such

Re: gnupg and smartcard - recovery issues

2009-10-28 Thread Werner Koch
On Tue, 27 Oct 2009 10:49, lis...@nebelschwaden.de said: Scenario 1: I remove the card and try to decrypt a file. Decrypting still works without a card being inserted and the password instead of the PIN. Ok, That is because you copied the key to the card and the on-disk key is still

Re: tools to test reader's keypad with GnuPG smartcard V2 ?

2009-11-03 Thread Werner Koch
On Mon, 19 Oct 2009 20:55, tux.tsn...@free.fr said: Could you tell me if you've a debug tools to test reader's keypad with a GnuPG smartcard V2 ? No I don't have any special tools. I debugged it by changing ccid-driver.c. On a higher level there is gpg-connect-agent: SCD SERIALNO OK

Re: Create extra keyring

2009-11-03 Thread Werner Koch
On Mon, 2 Nov 2009 22:30, m...@thorsten-alge.de said: problem is, i dont know how to create an use the keyring but i also couldnt find anything in the FAQ/Doc/manual or anywhere else. Can anybody help? Import all keys and then: gpg --export KEYID1 KEYID2 KEYID3 ... keyring As long as

Re: FSFE Fellower Card + LUKS on Startup

2009-11-04 Thread Werner Koch
On Wed, 4 Nov 2009 15:28, r...@sixdemonbag.org said: It is likely not his fault. The last two times this has happened it's been because the GnuPG mailing list's server has run out of disk space. Exactly. The server gets wedged and begins to act out in this particular way. Mailman figures

Re: FSFE Fellower Card + LUKS on Startup

2009-11-04 Thread Werner Koch
On Tue, 3 Nov 2009 20:17, sn...@snope.org said: wiki: https://wiki.ubuntu.com/SmartCardLUKSDiskEncryption. However, in this HowTo, they use a MultiFlex Smartcard and load the key file on the card. In the startup process, the keyfile is read out and sent to LUKS. This step is really simple

Re: gpg-error.h possible(?) syntax error: #define GPG_ERR_SYSTEM_ERROR (1 15)

2009-11-05 Thread Werner Koch
On Sun, 1 Nov 2009 11:04, hedgehogshia...@gmail.com said: It is not clear to me if this is an problem with gpg-error.h or swig. The same code with some context: typedef enum { GPG_ERR_NO_ERROR = 0, GPG_ERR_GENERAL = 1, [...] GPG_ERR_EOF = 16383, /* The

Re: Finding key ID of a keypair

2009-11-09 Thread Werner Koch
On Sun, 8 Nov 2009 17:19, d...@thinkmoult.com said: I've got myself a DSA keypair, just two files - one being the public key and the other being the private. I'm trying to find out the ID of that keypair. A mere gpg OURFILE will do Salam-Shalom, Werner -- Die Gedanken sind

Re: HELP - IMPORTANT - Signature check with libgpgme-11.dll

2009-11-09 Thread Werner Koch
On Fri, 6 Nov 2009 13:51, p...@sevencs.com said: I need some help as soon as possible! If you in that urgent need for help you may want to check with a commercial support company or a freelancer. The GnuPG service directory at http://www.gnupg.org/service.html may be helpful. Shalom-Salam,

Re: Finding key ID of a keypair

2009-11-09 Thread Werner Koch
On Mon, 9 Nov 2009 13:08, d...@thinkmoult.com said: localhost ~/.ssh # gpg myfile.key gpg: no valid OpenPGP data found. gpg: processing message failed: Unknown system error Probably not an OpenPGP key. You my try gpg --list-packets myfile.key to dump the packets, but this is unlikely to

Re: problems with gnupg2 and passphrase

2009-11-09 Thread Werner Koch
On Mon, 9 Nov 2009 12:53, jmcn...@fh-eberswalde.de said: I'm using GnuPG 2.0.12 (GPG4Win) and have problems in decrypting multiple files with the same passphrase via command prompt. My old GnuPG Version 1.x.x commad was gpg2.exe --allow-multiple-messages --passphrase geheim

Re: SmartCard...

2009-11-23 Thread Werner Koch
On Wed, 18 Nov 2009 13:13, nils.faer...@kernelconcepts.de said: Errr... you need the OpenPGP smart card to us it with GnuPG as a key-storing smart card. This does not work just with any card ;) Actually the Belgian ID card will work with gpgsm and gpg-agent's Secure Shell support. The cards

Re: Some questions regarding libgcrypt-config

2009-11-29 Thread Werner Koch
Hi! On Sun, 29 Nov 2009 11:13:01 +0100, Werner Dittmann wrote: Message digest algorithms: crc md4 md5 rmd160 sha1 sha256 sha512 tiger whirlpool The names are actually those of the source files. Thus is it save to assume if SHA512 is avaliable then SHA384 is also available? Right, SHA384

Re: Playing with auto-key-locate

2009-11-29 Thread Werner Koch
On Sun, 29 Nov 2009 12:10:35 +, Sean Rima s...@srima.ie wrote: I am playing with auto-key-locate (as per http://gushi.livejournal.com/524199.html) however this is under Vista. Does the Windows port not have pka lookup enabled during the build, I see

Re: Evolution locks up when sending large pgp signed file

2009-12-09 Thread Werner Koch
On Tue, 08 Dec 2009 21:53:24 -0600, Chris wrote: ago to Mandriva 2010, Evolution 2.28.1 and Gnome 2.28. When trying to send a signed message with a file over approximately 40k Evo will lockup and have to be killed. Not signing the message allows any size file to I am pretty sure that this is

Re: Can't import valid GPG keys in Ubuntu

2009-12-10 Thread Werner Koch
On Wed, 09 Dec 2009 23:20:03 -0500, Jim Dever wrote: Ok I'll bite. Which one does handle it properly? I did notice that Mutt, Gnus, Claws and probably others I have not used. At least all MUAs I have seen have a Reply to all or Group reply feature. doing a reply all on your message sent it

[Announce] Libgcrypt 1.4.5 released

2009-12-11 Thread Werner Koch
Hello! The GNU project is pleased to announce the availability of Libgcrypt version 1.4.5. Libgcrypt is a general purpose library of cryptographic building blocks. It is originally based on code used by GnuPG. It does not provide any implementation of OpenPGP or other protocols. Thorough

Re: --edit-key Information

2009-12-14 Thread Werner Koch
On Mon, 14 Dec 2009 09:46:44 -0500 (EST), Gary Hanley wrote: Where do I find information about the D in 1024D and the g in 4096g? What are the other potential values? In the source ;-). gnupg/g10/keyid.c: int pubkey_letter( int algo ) { switch( algo ) { case

Re: cache-timeout not working with smartcard

2009-12-16 Thread Werner Koch
On Wed, 16 Dec 2009 16:27:29 +0100, Marco Steinacher wrote: option (scdaemon) seem to work. I have set all timeouts to very low values but the PIN is still cached forever (by the card?), as long as There is no cache for a PIN. A card is usually unlocked after the PIN as been given until the

Re: cache-timeout not working with smartcard

2009-12-17 Thread Werner Koch
On Thu, 17 Dec 2009 11:27:53 +0100, marco+gn...@websource.ch wrote: As I wrote in my posting I have tried to use this option but it does not work. I added 'card-timeout 15' to my scdaemon.conf and nothing happens 15 seconds after accessing the card. The card remains unlocked as long Actually

[Announce] GnuPG 2.0.14 released

2009-12-21 Thread Werner Koch
Hello! We are pleased to announce the availability of a new stable GnuPG-2 release: Version 2.0.14. The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data, create digital signatures, help authenticating using Secure Shell and to

Re: Web of Trust itself is the problem

2010-01-07 Thread Werner Koch
On Thu, 07 Jan 2010 09:36:26 +, makrober wrote: G/PGP isn't widely used because it does not address adequately the real-life operational circumstances of the potential user, and I still believe that OpenPGP along with PGP 2.1 is the most used data protection scheme for plain data and

Re: Web of Trust itself is the problem

2010-01-07 Thread Werner Koch
On Thu, 07 Jan 2010 10:50:35 -0600, Alex Mauer wrote: They’re only unknown the first time you contact them. It is useful to know that the second time you contact f...@example.com it’s the same party you contacted the first time. Or that the phishing email you MUA authors should really add a

Re: Use DINSIG SmartCard

2010-01-09 Thread Werner Koch
On Mon, 4 Jan 2010 11:49:31 -0800 (PST), fava64 wrote: f...@desk:~$ gpg2 --card-status Application ID ...: FF7F00 gpg: this is a DINSIG compliant card gpg: not an OpenPGP card Right. You need to use gpgsm for the X.509 keys as used with these cards: gpgsm --learn-card to read the

Re: Import of old keys

2010-01-10 Thread Werner Koch
On Sat, 09 Jan 2010 22:46:04 +0100, Bernhard wrote: May I ask another question: Which gnome/kde program let me generate smime keys? You can't. What you can do is to create a certificate signing request and send that to a CA to send you back a certificate. If you want a GUI tool to create a

Re: Use DINSIG SmartCard

2010-01-10 Thread Werner Koch
On Sat, 9 Jan 2010 12:24:16 -0800 (PST), fava64 wrote: Does this mean it doesn't work or does this mean that I did not understand anything? That probably means that your card does not follow the DIN V 66291-1 (aka DINSIG) as implemented by scdaemon. Shalom-Salam, Werner -- Die Gedanken

Re: very short plaintexts symmetrically encrypted

2010-01-12 Thread Werner Koch
On Mon, 11 Jan 2010 13:06:03 -0500, lists.gnupg-us...@mephisto.fastmail.net wrote: Forgive me, but how is a MitM attack possible against a symmetric cypher using a shared, secret key? For example by swapping messages. Two messages are sent on two out-of-band events one which says Yes and the

Re: problem importing key to card

2010-01-13 Thread Werner Koch
to add some other things later, like: 2009-07-09 Werner Koch w...@g10code.com * card-util.c (card_store_subkey): Do not restrict to 1024 bit keys. Print an error message on write errors. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz

Re: Changing trust in GPGME

2010-01-13 Thread Werner Koch
On Tue, 12 Jan 2010 23:41:52 +0100, Piotr Bratkowski wrote: I have this code. And when I see output owner_trust = 4, but in gpg from system I get 0. Do I need to somehow save this changes?? This is not directly supported by GPGME. You need to write an edit interactor to control the gpg

Re: Changing trust in GPGME

2010-01-13 Thread Werner Koch
On Wed, 13 Jan 2010 10:49:03 +0100, Piotr Bratkowski wrote: What is GPA?? http://www.gnupg.org/related_software/gpa/ The GNU Privacy Assistant (GPA) is a graphical user interface for the GnuPG (GNU Privacy Guard). GPA utilizes GTK (the GIMP Tool Kit) and compiles for various

Re: gpeme_get_key returns a 'general error' after some time.

2010-01-22 Thread Werner Koch
On Thu, 21 Jan 2010 11:43, f.schw...@chili-radiology.com said: I have some strange problems using gpg (1.4.9) resp. gpgme (1.1.4) and hope someone can help me. Please update gpgme to 1.2.0; there a couple of minor bug fixes. Further GPGME has far better trace support which greatly helps to

Re: Gnupg doesn't recognize card.

2010-01-22 Thread Werner Koch
On Wed, 20 Jan 2010 17:11, taurus...@gmail.com said: Gpg does not recognize my fellowship card; ~ xxx$ gpg --card-status gpg: selecting openpgp failed: Card error gpg: OpenPGP card not available: Card error Reader 01: Gemplus GemPC Twin 00 00 Is that a new OpenPGP card (2.0)? If so you

Re: gpeme_get_key returns a 'general error' after some time.

2010-01-25 Thread Werner Koch
On Mon, 25 Jan 2010 10:10, f.schw...@chili-radiology.com said: thanks for the tip with debuglog but this is not practical in my case because 2 minutes after starting the application I already have over 1GB of logdata, and the error might occur only after a few hours runtime... Then you need

Passphrase problem in gpgsm 2.0.14

2010-01-26 Thread Werner Koch
trouble. Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. #! /bin/sh patch -p0 -f $* $0 exit $? agent/ 2010-01-26 Werner Koch w...@g10code.com * protect.c (do_encryption): Encode the s2kcount and do not use a static value of 96. --- agent/protect.c

Re: Gnupg doesn't recognize card.

2010-01-29 Thread Werner Koch
On Fri, 29 Jan 2010 01:22, jcr...@gmail.com said: $ killall -u username scdaemon #usually has to be entered 2-3x to kill it FWIW, gpgconf --reload scdaemon does the same in a well defined manner. Shalom-Salam, Werner ps. Please do not use killall but pkill which is a well

Re: GPG4Win: running gpg-agent with SSH agent support?

2010-02-01 Thread Werner Koch
On Fri, 29 Jan 2010 14:03, si...@josefsson.org said: I've installed GPG4Win and it recognizes my OpenPGP smartcards without problem (via a gpg-agent process which appears to be auto-started somehow?). However, I'd like to enable SSH agent support in gpg-agent Yes, we do this on Windows

Re: GPG4Win: running gpg-agent with SSH agent support?

2010-02-02 Thread Werner Koch
On Mon, 1 Feb 2010 21:31, d...@prime.gushi.org said: On Mon, 1 Feb 2010, Werner Koch wrote: Yes, we do this on Windows because we have a well known socket name there. It may actually happen that two agents are started which does not harm because the the unused agent detects this case

Re: GPG4Win: running gpg-agent with SSH agent support?

2010-02-03 Thread Werner Koch
On Tue, 2 Feb 2010 15:52, si...@josefsson.org said: Why can't gpg-agent implement the same protocol that ssh-agent does under Windows? I don't know how ssh-agent works unde Cygwin. It has been many years that I last looked at Cygwin. How to they emulate nix doman sockets? That is the

Re: gpeme_get_key returns a 'general error' after some time.

2010-02-17 Thread Werner Koch
On Wed, 17 Feb 2010 09:48, f.schw...@chili-radiology.com said: I'm getting a fd 256 which seams to be the maximum of fds gpgme can handle. It might be some sort of design-issue in my software causing so many open fds, but I'd still like to overcome this fd Actually not, there is quite some

Re: gpeme_get_key returns a 'general error' after some time.

2010-02-17 Thread Werner Koch
On Wed, 17 Feb 2010 19:31, w...@gnupg.org said: We need to change the datatructure. Done. However we need to write a test case for it. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users

Release candidate for 2.0.15

2010-02-18 Thread Werner Koch
Hi! I just prepared a release candidate for GnuPG 2.0.15. The goal of this release is to find out whether there are any severe build or runtime bugs. There are actually not may changes: * New command --passwd for GPG. * Fixes a regression in 2.0.14 which prevented unprotection of new or

Re: Shamir's Secret Sharing Scheme integration?

2010-02-22 Thread Werner Koch
On Sun, 21 Feb 2010 14:40, rich.ged...@verizon.net said: Is there a utility that integrates gnupg with (Shamir's Secret Sharing Scheme)? And maybe using smartcards? If not has anyone seen a HowTo that shows how to integrate them? I don't know of a complete solution but Phil Sutter

Re: How to decrypt signatures with gpgme?

2010-02-25 Thread Werner Koch
On Thu, 25 Feb 2010 12:35, f.schw...@chili-radiology.com said: when I create a signature with gpg --sign, I'm able to use gpg --decrypt to get the plaintext from the signature. You might want to use: gpg --verify --output PAINTEXT.TXT SIGNED.GPG So is there a way to get the plaintext from

Re: gpg-agent rejects correct password for ssh keys

2010-03-01 Thread Werner Koch
On Fri, 26 Feb 2010 17:20, vor...@ucw.cz said: The agent asks for a passphrase to decrypt the key. I type it again and, this is the problem, it says it is incorrect. I'm sure I typed it correctly (I tried Please see http://lists.gnupg.org/pipermail/gnupg-users/2010-January/038045.html

Re: Offline Primary Key

2010-03-02 Thread Werner Koch
On Mon, 1 Mar 2010 22:13, ds...@jabberwocky.com said: someone elses key. The current design effectively forces people to manually move the valuable primary key out of the way before clobbering it with the subkey-only copy of the key. Another important point is that if you want to use an

Re: how to suppress warning about gpg-agent?

2010-03-08 Thread Werner Koch
On Mon, 8 Mar 2010 01:43, power...@powerman.name said: I've a lot of projects (each has separate user account) which use gpg for encrypting daily backups (from cron) in this way: gpg --batch --cipher-algo AES256 -c --passphrase-file PASSFILE BACKUP.tar FWIW, You should use public key

Re: how to suppress warning about gpg-agent?

2010-03-09 Thread Werner Koch
On Mon, 8 Mar 2010 13:22, power...@powerman.name said: I don't think so. Every project encrypt it backups with different passwords (needed for security), and right now I can keep just several dozens of passwords, but with public keys I'll need to keep several dozens of .gnupg directories

Re: Release candidate for 2.0.15

2010-03-09 Thread Werner Koch
On Thu, 18 Feb 2010 18:20, carlo.bra...@libero.it said: I tried to compile gnupg-2.0.15rc1 under mingw+msys. As you know we only support cross-building from a Unix platform. Everything worked fine except the compilation of scd/ccid-driver.c Well, the internal ccid-driver does not work wth

[Announce] GnuPG 2.0.15 released

2010-03-09 Thread Werner Koch
Hello! We are pleased to announce the availability of a new stable GnuPG-2 release: Version 2.0.15. The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data, create digital signatures, help authenticating using Secure Shell and to

Release candidate for Dirmngr 1.1.0

2010-03-09 Thread Werner Koch
Hi! To move forward with the migration to libassuan 2.0, I did a release candidate for Dirmngr: ftp://ftp.gnupg.org/gcrypt/alpha/dirmngr/dirmngr-1.1.0rc1.tar.bz2 (544k) ftp://ftp.gnupg.org/gcrypt/alpha/dirmngr/dirmngr-1.1.0rc1.tar.bz2.sig Changes are: * Fixed a resource problem with

Re: Off-The-Record Email

2010-03-11 Thread Werner Koch
On Thu, 11 Mar 2010 09:29, firasmr...@gmail.com said: Is there a way to be able to have off-the-record email conversations with GPG technology? It would definitely be a terrific thing. Email is I was pondering with the idea to use the WoT or an existsing OpenPGP key for fingerprint checking.

Re: Restarting gpg-agent

2010-03-15 Thread Werner Koch
On Mon, 15 Mar 2010 11:58, r...@ringlet.net said: # start gpg-agent if no running instance is found if test -z ${GPG_AGENT_INFO} || ! kill -0 `grep GPG_AGENT_INFO ${GA_INFO_FILE} | cut -d: -f 2 -` 2/dev/null; then In this way, you risk a false positive if gpg-agent has died

Re: gpg symmetric to Java JCA decryption

2010-03-29 Thread Werner Koch
On Sun, 21 Mar 2010 22:09, webe...@gmail.com said: No, I don't need OpenPGP, just need symmetric encryption done by a standard command line Unix tool and decryption by means of the Java You still need to define which standard you want to use. The most popular encryption standards are 1.

Re: Where to find g13?

2010-04-06 Thread Werner Koch
On Wed, 17 Mar 2010 20:40, alava...@gmail.com said: Hello. Can someone please show me a link to download and install *G13*, the LUKS replacement? Alternatively, would you suggest an exit to the quagmire below... Extensive googling has not succeeded. This is in the development branch of GnuPG.

Re: secret keys are not imported

2010-04-08 Thread Werner Koch
On Thu, 8 Apr 2010 02:31, mailinglis...@hauke-laging.de said: # LC_ALL=C gpg --import hauke__0xECCB5814.sec.asc gpg: key ECCB5814: already in secret keyring gpg: Total number processed: 1 gpg: secret keys read: 1 gpg: secret keys unchanged: 1 This does not. Merging secret keys is

Re: gpg-agent and ssh-keys not working anymore

2010-04-19 Thread Werner Koch
On Fri, 16 Apr 2010 14:37, j...@seiken.de said: The passwords are enter correctly and the ssh public key was added to authorized_keys. I tried generating new ssh keys but the problem is always the You might be hampered a bug fixed in 2.0.15: * Fixes a regression in 2.0.14 which prevented

Re: gpg-agent and ssh-keys not working anymore

2010-04-19 Thread Werner Koch
On Mon, 19 Apr 2010 09:20, j...@seiken.de said: The new ubuntu lucid which will be released in a few days and has a gpg-agent version of 2.0.14. Though gpg-agent is not the default ssh-agent this problem might cause trouble more in the next few months. Ubuntu should have patched 2.0.14. I

Re: gpg-agent and ssh-keys not working anymore

2010-04-20 Thread Werner Koch
it attached. Will you be so kind and forward it to the Ubuntu folks? Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. #! /bin/sh patch -p0 -f $* $0 exit $? agent/ 2010-01-26 Werner Koch w...@g10code.com * protect.c (do_encryption): Encode the s2kcount

Re: gpg-agent and ssh-keys not working anymore

2010-04-20 Thread Werner Koch
On Tue, 20 Apr 2010 10:31, j...@seiken.de said: I filled a launchpad bug report for this problem and attached the patch. The report refers to the new ubuntu lucid release version of the gnupg. https://bugs.launchpad.net/ubuntu/+source/gnupg2/+bug/567106 I don't know if the maintainer of the

Re: Elliptic curves in gnupg status?

2010-04-26 Thread Werner Koch
On Sat, 24 Apr 2010 17:16, d...@fifthhorseman.net said: http://tools.ietf.org/html/draft-jivsov-openpgp-ecc Actually the working group informally agreed on this draft after we changed a few US centric things. It is just a matter of implementing it in GnuPG. Sergi started with that but I

Re: Crypto Stick released!

2010-05-03 Thread Werner Koch
On Sat, 1 May 2010 01:54, j...@seiken.de said: an openpgp card version 2.0 which isn't supported by opensc yet. So you can't use opensc's firefox integration unless opensc releases an updated Checkout http://www.scute.org . Salam-Shalom, Werner -- Die Gedanken sind frei. Ausnahmen

Re: Crypto Stick released!

2010-05-03 Thread Werner Koch
On Mon, 3 May 2010 12:22, j...@seiken.de said: selecting my key I always get this firefox error message sec_error_pkcs11_function_failed. Okay we need to check this. This should really work. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: Compile PTH on AIX

2010-05-05 Thread Werner Koch
On Tue, 4 May 2010 14:50, beppeco...@yahoo.it said: pth.h:93:2: error: #error FD_SETSIZE is larger than what GNU Pth can handle. I ran a simple utility check that says: FD_SETSIZE=65534 You may try to configure it this way: ./configure --with-fdsetsize=65536 Salam-Shalom,

  1   2   3   4   5   6   7   8   9   10   >