On 09/23/2012 04:54 PM, Joke de Buhr wrote:

>> I see this code expects size to get negative at some point,
>> so if you change the type of size to ssize_t does it help?
> 
> i changed the type of size from size_t to ssize_t. on a quick check the error 
> change from GNUTLS_E_INTERNAL_ERROR to GNUTLS_E_MPI_SCAN_FAILED.
> fixing the problem doesn't seem to be that simple unfortunately.

It seems it was an encoding bug that was triggered by the increase in
key size. Thanks for reporting it. The patch below should solve it:
http://git.savannah.gnu.org/gitweb/?p=gnutls.git;a=commitdiff;h=4366201402fcdecde2331e4d87c05141207e1027

> well the signing (S), encryption (E) and authentication (A) flags can
be set

> individually with gnupg operating in expert mode (--expert). the master key 
> has an additional flags for certification (C).
> 
> subkeys with authentication flag are used when gpg-agent operates in 
> ssh-agent 
> mode and connects to a ssh server. i'm sure gnupg does the authentication via 
> digital signatures during the sshd handshake.
> 
> since the actual behavior is a bit unclear i think it would be helpful to 
> mention gnutls requires the signing flag in the gnutls documentation. but i 
> can 
> definitely get your point.


Do you have some suggestion on where this should be mentioned?

regards,
Nikos

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Help-gnutls mailing list
Help-gnutls@gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

Reply via email to