Re: Manually changing smartcard state

2015-01-26 Thread Johannes Zarl

> Is it possible to change the smartcard state after PIN is entered, so it
> would be back in the same state as it was when first inserted into the
> reader (and would require the PIN to be entered again also for
> decryption)? So without removing and re-inserting the card, possibly
> using some APDU instructions.

You can tell gpg-agent to lock the card using the following command[1]:

gpg-connect-agent 'SCD RESET' /bye

[1] http://lists.gnupg.org/pipermail/gnupg-users/2011-January/040478.html

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Talking about Cryptodevices... which one?

2015-01-26 Thread MFPA
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512



On Sunday 25 January 2015 at 4:31:06 PM, in
, Matthias-Christian Ott wrote:



> As already mentioned, under a certain threat model a
> successful attack only needs two signatures: one for
> the revocation certificate and one to sign the key of
> the attacker.


Surely you only need the revocation certificate.

- --
Best regards

MFPAmailto:2014-667rhzu3dc-lists-gro...@riseup.net

During an eruption - move away from the volcano - not towards it
-BEGIN PGP SIGNATURE-
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=
=4UB2
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Manually changing smartcard state

2015-01-26 Thread Jernej Kos
Hello!

Is it possible to change the smartcard state after PIN is entered, so it
would be back in the same state as it was when first inserted into the
reader (and would require the PIN to be entered again also for
decryption)? So without removing and re-inserting the card, possibly
using some APDU instructions.


Jernej



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg-bash-lib - parsing gpg's --status-fd - feedback desired - was: Is there a shell script or bash library for parsing gpg's --status-fd output?

2015-01-26 Thread Patrick Schleizer
Patrick Schleizer:
> apparently something like gpg-bash-lib didn't exist.
> 
> Created one:
> https://github.com/Whonix/gpg-bash-lib
> 
> Could you leave some feedback please?
> 
> Main code file:
> https://github.com/Whonix/gpg-bash-lib/blob/master/usr/lib/gpg-bash-lib/modules.d/50_common
> 
> No usage instructions yet, see unit test:
> https://github.com/Whonix/gpg-bash-lib/blob/master/usr/lib/gpg-bash-lib/unit_test
> 
> Specifically, does my status-fd parsing code look sane?
> https://github.com/Whonix/gpg-bash-lib/blob/0fc7a02b35f9580502daccf46692988b55961a23/usr/lib/gpg-bash-lib/modules.d/50_common#L172
> 
> Anyone else interested to contribute?

Comprehensive documentary and examples have been written.

https://github.com/Whonix/gpg-bash-lib

Please leave feedback.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: PGP and BeID

2015-01-26 Thread Werner Koch
On Thu,  1 Jan 2015 17:25, gabriel.ross...@telenet.be said:

> As smartcard I use my Belgian EiD card with the the ACR38U as cardreader.

I never made that reader work for me under Linux.

> Additional software installed:
> 1. middleware (4.0.7 7453)
> 2. OpenPGP Smartcard Minidriver (OpenPGPmdrv-1.0.0.0)

If you run this there is a conflict with GnuPG which requires exclusve
access to the card.  You should try again after disabling above
software.  Note that you may use the card with GnupG only for S/MIME or
for ssh access - there is no OpenPGP support.

> I suspect that the OpenPGP software is the culprit and doesn't support
> my smartcard.

GnuPG _used_ to support it just fine on Unix systems and probably also
on Windows (never tested it).  In fact the BeID was the first card after
the OpenPGP card which I made work for ssh access.  Back then they
provided free samples and a full testing environment.  I have not looked
at it for many years, though.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users