Re: GPGShell caught with malware?

2009-07-31 Thread Faramir
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

gerry-lowry (alliston ontario canada 705-250-0112) escribió:
> Check a site like Symantec on how to send it to them ... AFAIK, they should 
> be able to verify
> whether it's a real virus of just a false positive.

  Take a look at http://virusscan.jotti.org/en

  I think it uses 21 different AVs to check the files...

  Best Regards
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBCAAGBQJKcos5AAoJEMV4f6PvczxAp0EH/R1wtFDuEIx7JwlnSGpz8etl
QAZVKNrJbRSSTjZNoBWBXK7enwGDZX/p3AtOFhqTiBJr7HRhcL85cUxhWg82ayNp
zWM78/abdxpFpGhMp53oMI2LzouWpGOrW3d1DKLlg+qWFlKLTk4O5v0lNmG7wFk6
nT68J6x/fntO1Qu8y1IuETcyPqh5h/t6bZ7oHBPlHP6Z83CWXzivKMok/JInlW3H
8aV0v9v2h4bjkQap+VKx0+zSCc20XSCd7gjYgjhUp9bqx2FKFWQUW1878J5TFqkk
Q/N1Nj1pAASD12c7YQF4t35x/k/ab/OJc6rCsAsar/mbxj9ILV+LA7DZYxdT4fw=
=guV/
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GPGShell caught with malware?

2009-07-31 Thread Henk M. de Bruijn
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Thu, 30 Jul 2009, at 15:09:32 [GMT -0600] (which was 23:09 where I
live) Allen Schultz wrote:

> I recently installed Comodo AntiVirus and it said that GPGShell had a
> malware called "daisy-2...@31780980". But could not find any details
> about this. Is there a GPGShell like program that does the same job as
> GPGShell?

I have never experienced anything like this. I am using Norton Internet
Security 2009.

- From which website did you download?

- --
Met vriendelijke groet,
Henk M. de Bruijn
_
The Bat! Natural Email System 4.2.9.4 on Microsoft® Windows Vista?
Home Premium Versie 6.0.6001 Service Pack 1 Build 6001
Intel(R) Core(TM)2 Quad CPU Q8200 @ 2.33GHz, 2333 MHz,4 core('s),4 logic 
processors
AntispamSniper for The Bat! Pro 3.0.1.5
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10-svn-5099hm-29-07-2009 (x86_64-pc-Msys/MingW32)

iQEcBAEBCAAGBQJKcpODAAoJEBHuy+60ZN0PuioH/0cR8QEwtuLnQIRV6ETTUzLv
v5bAIn97l0+/5og4c6s03dOJ/q1kgjScn/MatwyB1sm26n7q8fKFTILFTm4r31IE
d9/ErVTSqVo/aCHRRf89fdxCQaOcGp6bVhLBydvdXz3UknK+gdmDkBkQLcB92VIH
+RbjHnAOdaBLczzuAodU2UfW3n7+wyydWUMTUAUY1P51TOwinArQsquFssTac3mD
5iA9AFmWHB1cK0EfmOpKduTBTJ1aMb4Zt6GYz78w2kZn3u9VBWWKK3GEPZhpFF59
nxyT6wRFJY78oLwiNmcB43yPjc+3dqq/WvcTCw+49Jjx4kDObGUgNXhUOZBFwBo=
=r602
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GPGShell caught with malware?

2009-07-31 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Faramir wrote:

>   Take a look at http://virusscan.jotti.org/en
> 
>   I think it uses 21 different AVs to check the files...

Virus Total is another multiple A/V site.  Upload the suspect File and
receive checks against 31 A/V engines.

JOHN ;)
Timestamp: Friday 31 Jul 2009, 08:21  --400 (Eastern Daylight Time)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.10-svn5099: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: http://www.gswot.org
Comment: Personal Web Page:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJKcuG8AAoJEBCGy9eAtCsPdyIH/0VLyolvlaLevv84T3F9kGDO
J39GUblSozjGEtRVRT7jLBofy8hKxGiQ5fZgQfJmOffSWnOsjDitpUm8qZvvxdc6
ZfmYMB0MvZfFeRFI+ZYrB1kfFideWJ8ZGubc0LgKwzLzBaRYVUnaDAi+1djBpbi9
57poYwhh7CFgQ4OW6pbawNWSWvYlwqSVP3x1IBYw2ZEfGwB36CBI5TeqfymlbISR
mWU7lZEpWKFpIFf6vMW3R9HRlvGLpOQDP+gcMjBe/CNN/7GcfOWOo78lKPb4Gn45
T6CjhWPZC6/9VHdIvGNlwLtB6JeBkeN0B6We8v/GNpBEbJP4fzblgYJV34WFt/k=
=N8VJ
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


latest stable version of GnuPG that decrypts Adobe PDF files

2009-07-31 Thread Reich, George
Hello,

 

Can anyone suggest the latest stable version of GnuPG that successfully
does decryption for Adobe PDF files? And if so, are there installation
instructions for that version?

 

Thanks,

George Reich
Crown Americas, LLC
Electronic Business
(215) 856-5446

 

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


GnuPG 1.4.5 brokes my trustdb.gpg

2009-07-31 Thread Ritesh Patel
Hello,

I was using GnuPG 1.2.1. I have 15 keyrings setup using GnuPG 1.2.1 and I
singed those users public key my my private key. I can successfully encrypt
a message and send those user, if I use GnuPG 1.2.1.

Now I upgraded GnuPG to 1.4.5. I can encrypt message using GnuPG 1.4.5 for
those old keyrings and trustdb.gpg

But when I try to setup new keyring for a new user (by importing client's
public key in a new keyring), my all previous keyring and their trust gets
broken. When I try to encrypt message for the previous client (who's keyring
and trust are setup using 1.2.1) I get following error message:

gpg: F5255893: There is no assurance this key belongs to the named user
gpg: [stdin]: sign+encrypt failed: unusable public key


Please help. thanks
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 1.4.5 brokes my trustdb.gpg

2009-07-31 Thread Joseph Oreste Bruni
You probably just need to set ultimate trust on your own key. Once you do that, 
all the keys you've signed should be considered valid.

-Joe

 
 
On Friday, July 31, 2009, at 12:40PM, "Ritesh Patel"  
wrote:
>___
>Gnupg-users mailing list
>Gnupg-users@gnupg.org
>http://lists.gnupg.org/mailman/listinfo/gnupg-users
>
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Needed help

2009-07-31 Thread FiloSottile
I have this situation

pub 1024D/01A82A13 created: 2008-09-21 expires: mai utilizzo: SCA
sub* 2048g/E159FB03 created: 2008-09-21 expires: mai utilizzo: E

i have the secret key 01A82A13, but not E159FB03
what should i do? (replace subkey with other, remove it - the result is
that i can't encrypt)

what does SCA and E mean? how can i change them?

Thanks, FiloSottile


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Needed help

2009-07-31 Thread Daniel Kahn Gillmor
On 07/31/2009 04:15 PM, FiloSottile wrote:
> I have this situation
> 
> pub 1024D/01A82A13 created: 2008-09-21 expires: mai utilizzo: SCA
> sub* 2048g/E159FB03 created: 2008-09-21 expires: mai utilizzo: E
> 
> i have the secret key 01A82A13, but not E159FB03
> what should i do? (replace subkey with other, remove it - the result is
> that i can't encrypt)

Probably you mean to say that you are unable to decrypt, right?  If
you've lost the secret part of that subkey somehow, material encrypted
to it is gone for good.  But you can still move forward:

Your best short-term bet is to revoke your subkey and add a new one.

try:

  gpg --edit-key 01A82A13

then within that subshell, you're interested in the subcommands "revkey"
and "addkey".

Note that before you "revkey", you'll want to explictly select the
subkey first.  And when you addkey, you want to choose either "Elgamal
(encrypt only)" or "RSA (encrypt only)" to make sure you make another
encrpytion-capable subkey.  So the commands you might want to run
probably look something like:

key 1
revkey

addkey
6


Be sure to read and understand the prompts before committing to anything!

when it's all done and you like the changes, do:

save


Finally, you'll want to publish the new subkey and the revocation of the
old one:

  gpg --keyserver keys.gnupg.net --send 01A82A13


> what does SCA and E mean? how can i change them?

These are Key Usage Flags.

SCA means that your primary key is to be used only for the following
activities:

 Signing (signing text and binary documents)
 Certifying (signing other people's key/userID bindings)
 Authentication (identifying you in some context, e.g. SSH)

E measn that your subkey is to be used for Encrypted communications
and/or storage.


hth,

--dkg



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: latest stable version of GnuPG that decrypts Adobe PDF files

2009-07-31 Thread David Shaw

On Jul 31, 2009, at 9:21 AM, Reich, George wrote:


Hello,

Can anyone suggest the latest stable version of GnuPG that  
successfully does decryption for Adobe PDF files? And if so, are  
there installation instructions for that version?


I'm going to guess that you are referring to the built-in PDF  
encryption, and if so, the answer is no.  GnuPG cannot decrypt PDF  
files unless they are encrypted with OpenPGP (PGP, GnuPG, etc).


David


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users