Re: Houston, we have a problem

2017-09-22 Thread Guilhem Moulin
On Fri, 22 Sep 2017 at 22:32:37 +0200, Kristian Fiskerstrand wrote: > And what happens if you do gpg --import-options import-clean --recv-key > ? is the bad MPI value sigs removed or still there in that case? Should be `gpg --keyserver-options import-clean --recv-key $keyid`; or alternatively, `gp

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 23:16:55 +0200, Guilhem Moulin wrote: > On Fri, 22 Sep 2017 at 22:32:37 +0200, Kristian Fiskerstrand wrote: > > And what happens if you do gpg --import-options import-clean > > --recv-key ? is the bad MPI value sigs removed or still there in > > that case? > > Should be `gpg

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 22:52:13 +0200, Kristian Fiskerstrand wrote: > On 09/22/2017 10:48 PM, Stefan Claas wrote: > > On Fri, 22 Sep 2017 22:32:37 +0200, Kristian Fiskerstrand wrote: > > > >>> And in place of the fake sigs it says erroneous MPI value. :-) > >> > >> And what happens if you do g

Re: Houston, we have a problem

2017-09-22 Thread Kristian Fiskerstrand
On 09/22/2017 10:48 PM, Stefan Claas wrote: > On Fri, 22 Sep 2017 22:32:37 +0200, Kristian Fiskerstrand wrote: >>> And in place of the fake sigs it says erroneous MPI value. :-) >> >> And what happens if you do gpg --import-options import-clean >> --recv-key ? is the bad MPI value sigs removed

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 22:32:37 +0200, Kristian Fiskerstrand wrote: > On 09/22/2017 10:29 PM, Stefan Claas wrote: > > On Fri, 22 Sep 2017 22:17:17 +0200, Kristian Fiskerstrand wrote: > >> On 09/22/2017 10:08 PM, Stefan Claas wrote: > >>> Thanks for the information! Can you tell me please how to

gpg-agent UI when waiting for smart card touch?

2017-09-22 Thread David Mandelberg
Hi, I'm using gpg-agent with Yubikeys configured to require a physical touch before performing operations. Is there any way to get gpg-agent to display something on screen when it's waiting for me to touch the Yubikey? (Otherwise, I sometimes don't realize it's waiting for anything, and the o

Re: Houston, we have a problem

2017-09-22 Thread Kristian Fiskerstrand
On 09/22/2017 10:29 PM, Stefan Claas wrote: > On Fri, 22 Sep 2017 22:17:17 +0200, Kristian Fiskerstrand wrote: >> On 09/22/2017 10:08 PM, Stefan Claas wrote: >>> Thanks for the information! Can you tell me please how to import >>> a pub key with a local client, so that invalid data get's removed

Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 22:17:17 +0200, Kristian Fiskerstrand wrote: > On 09/22/2017 10:08 PM, Stefan Claas wrote: > > Thanks for the information! Can you tell me please how to import > > a pub key with a local client, so that invalid data get's removed > > automatically? When doing a gpg --receive-k

Re: gpg 2.1.19 fails to generate key pair

2017-09-22 Thread Matthias Apitz
it works with: phablet@ubuntu-phablet-bq:~$ ./gpg2.sh --version gpg-agent[28499]: enabled debug flags: mpi crypto memory cache memstat hashing ipc gpg-agent: a gpg-agent is already running - not starting a new one gpg-agent: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0 ou

Re: Houston, we have a problem

2017-09-22 Thread Kristian Fiskerstrand
On 09/22/2017 10:08 PM, Stefan Claas wrote: > Thanks for the information! Can you tell me please how to import > a pub key with a local client, so that invalid data get's removed > automatically? When doing a gpg --receive-key key-id the fake data > is not removed. What does gpg --check-sigs repo

Re: automatic conversion from keyring to keybox files?

2017-09-22 Thread Daniel Kahn Gillmor
On Thu 2017-09-21 23:47:14 +0100, MFPA wrote: > Now that the upgrade path for GnuPG 2.0.x users is to 2.2.x versions, > will be there any automatic conversion from keyring to keybox files, > either offered by the installer or available as a command? On debian systems, you can run: migrate-pu

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 21:44:06 +0200, Kristian Fiskerstrand wrote: > On 09/22/2017 09:40 PM, Kristian Fiskerstrand wrote: > > So all is as it is supposed to be > > Just to add, the alternative if not considering WoT is a direct > validation structure, a user in this case should only (locally) sign

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 21:40:41 +0200, Kristian Fiskerstrand wrote: > On 09/22/2017 09:34 PM, Stefan Claas wrote: > >>> O.k. i just tested a bit and this is a bug int the Web Interface > >>> and in GnuPG's CLI Interface. > >> I don't see a bug here. > > Now i am a bit confused... Then maybe a "

Re: Houston, we have a problem

2017-09-22 Thread Kristian Fiskerstrand
On 09/22/2017 09:40 PM, Kristian Fiskerstrand wrote: > So all is as it is supposed to be Just to add, the alternative if not considering WoT is a direct validation structure, a user in this case should only (locally) sign keyblock information of communication peers after a direct fingerprint excha

Re: Houston, we have a problem

2017-09-22 Thread Kristian Fiskerstrand
On 09/22/2017 09:34 PM, Stefan Claas wrote: >>> O.k. i just tested a bit and this is a bug int the Web Interface >>> and in GnuPG's CLI Interface. >> I don't see a bug here. > Now i am a bit confused... Then maybe a "funny" design flaw? I mean > what should users unfamiliar with the whole WoT pr

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Fri, 22 Sep 2017 20:29:07 +0200, Werner Koch wrote: > On Fri, 22 Sep 2017 19:23, stefan.cl...@posteo.de said: > > > O.k. i just tested a bit and this is a bug int the Web Interface > > and in GnuPG's CLI Interface. > > I don't see a bug here. Now i am a bit confused... Then maybe a "funny"

Re: gpg 2.1.19 fails to generate key pair

2017-09-22 Thread Matthias Apitz
El día viernes, septiembre 22, 2017 a las 08:19:14p. m. +0200, Werner Koch escribió: > On Fri, 22 Sep 2017 17:24, g...@unixarea.de said: > > > I instructed via gpg-agent.conf the gpg-agent to do a debug log which > > follows. The proc gpg-agent crashes with SIG_BUS. > > That is why you see and

Re: Houston, we have a problem

2017-09-22 Thread Werner Koch
On Fri, 22 Sep 2017 19:23, stefan.cl...@posteo.de said: > O.k. i just tested a bit and this is a bug int the Web Interface and in > GnuPG's CLI Interface. I don't see a bug here. However, given that you use Posteo, you are in the good position to use the Web Key Directory feature. This require

Re: gpg 2.1.19 fails to generate key pair

2017-09-22 Thread Werner Koch
On Fri, 22 Sep 2017 17:24, g...@unixarea.de said: > I instructed via gpg-agent.conf the gpg-agent to do a debug log which > follows. The proc gpg-agent crashes with SIG_BUS. That is why you see and EOF error from gpg. We did a few more release after 2.1.19, which was released on March 1. Not all

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
On Thu, 21 Sep 2017 16:44:57 +0200, Stefan Claas wrote: > Hi all, > > http://pgp.zdv.uni-mainz.de:11371/pks/lookup?op=vindex&search=Erika+Mustermann > > Question for the experts, how can a casual or new GnuPG user, like > Alice and Bob, detect a Signature forgery on a pub key, when using > Web ba

gpg 2.1.19 fails to generate key pair

2017-09-22 Thread Matthias Apitz
Hello, I've compile gpg 2.1.19 and all the required shared libs from source. The cmd sequence: LD_LIBRARY_PATH=/home/phablet/myRoot/usr/local/lib export LD_LIBRARY_PATH PATH=/home/phablet/myRoot/usr/local/bin:$PATH export PATH GNUPGHOME=/home/phablet/.gnupg export GNUPGHOME /home/phablet/myRoo

Use of Passphrase Callback

2017-09-22 Thread SHARMA Sandhya (MORPHO)
Hello, I am Using gnupg on windows and want to use "Passphrase Callback" functionality to input password for private key. My current lines of code is: error = gpgme_set_pinentry_mode(context,GPGME_PINENTRY_MODE_LOOPBACK); gpgme_passphrase_cb_t func = &passphrase_callback; gpgme_pinentry_mode_t pi

Re: Prince Jones v US

2017-09-22 Thread Robert J. Hansen
> Can you cite the case #. All I could find is an old "local appeals court in > Washington, D.C." ruling. I found nothing under the US Supreme Court. It was a DC Court of Appeals decision, not SCOTUS. It appears unlikely to hit SCOTUS. https://www.dccourts.gov/sites/default/files/2017-09/15-CF-3

Re: Prince Jones v US

2017-09-22 Thread Kristian Fiskerstrand
On 09/22/2017 11:55 AM, Jerry wrote: > Can you cite the case #. All I could find is an old "local appeals court in > Washington, D.C." ruling. I found nothing under the US Supreme Court. See https://www.dccourts.gov/sites/default/files/2017-09/15-CF-322.pdf DISTRICT OF COLUMBIA COURT OF APPEALS N

Re: Prince Jones v US

2017-09-22 Thread Jerry
On Fri, 22 Sep 2017 01:22:13 -0400, Robert J. Hansen stated: >Good news for US citizens: _Prince Jones v US_ was decided Thursday. >The important text from the opinion is recreated here, and the >implications for encrypted email follow. > >* * * * * > >But in addition to the fact that people reaso

Re: OT: Which smartphone would you use

2017-09-22 Thread Franck Routier
Hi, Jolla did an official port of SailfishOS to Sony Xperia X hardware. It's about one year old, but you still can get one in Europe for around 300€. Then you'll have to buy (49€) a Sailfish for Xperia license, and install it. The only point is the the image is not yet available for purchase,

Re: Houston, we have a problem

2017-09-22 Thread Stefan Claas
Am 22.09.2017 um 02:37 schrieb Ángel: On 2017-09-21 at 23:37 +0200, Stefan Claas wrote: Long ago when we had a discussion here on the Mailing List on how to prevent unwanted signatures i made a proposal that signing someone's public key should work similar to revocation certificates. If you wo