Random numbers

2007-02-08 Thread Robert J. Hansen
While this may be off-topic, sometimes the community needs a good laugh, and today's XKCD provides a good laugh about random numbers. :) http://www.xkcd.net ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/l

Re: A question...

2007-02-08 Thread Laurent Jumet
Hello Santiago ! Santiago José López Borrazás <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > How the two lines are removed that appears above all of the signed of > messages? > There is some human way to tell him al GnuPG to that show not those two > lines of B

Re: A question...

2007-02-08 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > There is some human way to tell him al GnuPG to that show not those > two > lines of BEGIN PGP MESSAGE? Those two lines are required by OpenPGP and must be present in any clearsigned message. -BEGIN PGP SIGNATURE- Version: GnuPG v1

A question...

2007-02-08 Thread Santiago José López Borrazás
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi: I ask a question: How the two lines are removed that appears above all of the signed of messages? There is some human way to tell him al GnuPG to that show not those two lines of BEGIN PGP MESSAGE? TIA. - -- Slds de Santiago José López Borra

Re: New command line language parameter

2007-02-08 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > The present Windows GnuPG 1.4.X installs assume people [run > as Administrator]. The installer requires Administrator rights to install to the program files directory, just like every other Win32 program that wants to install there. Once inst

Re: GnuPG on MS Vista

2007-02-08 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > But will it be supported in any near future? That's up to the GnuPG developers, and whether they have any Vista boxes available to do regression testing on. They may have already tested it against Vista; I don't know. -BEGIN PGP SIGNATUR

Re: GnuPG on MS Vista

2007-02-08 Thread Jørgen Lysdal
Robert J. Hansen skrev: > It may be worth considering > telling people that Vista is an unsupported OS for GnuPG 1.4.x. But will it be supported in any near future? signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list G

Re: GnuPG on MS Vista

2007-02-08 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 > There will be a line that says something like "DBG: Using temp file > such-and-such". Send me the tempin.txt and tempout.txt file. David-- Vista has radically changed the process of compiling code for the platform. Neither MinGW nor Cygwin GC

Re: GnuPG on MS Vista

2007-02-08 Thread David Shaw
On Thu, Feb 08, 2007 at 09:24:17PM +0100, Jørgen Lysdal wrote: > Hi, it appears to be impossible to connect to any keyservers > through gpg on my newly installed Vista box. I have disabled > UAC and im running as admin, so that should not be the cause > of any problems. > > Whenever i try to get s

Re: New command line language parameter

2007-02-08 Thread Henry Hertz Hobbit
Werner Koch said: > On Mon, 5 Feb 2007 14:57, [EMAIL PROTECTED] said: > > >>I tried the SET LANG=xx and as far as i read in the GPG documentation >>and mailing list's posts, this is only for POSIX systems, not for >>windows, at least in windows doesn't work in all the ways i tried. > > > You

GnuPG on MS Vista

2007-02-08 Thread Jørgen Lysdal
Hi, it appears to be impossible to connect to any keyservers through gpg on my newly installed Vista box. I have disabled UAC and im running as admin, so that should not be the cause of any problems. Whenever i try to get something from a keyserver i get: gpg: refreshing 1 key from hkp://pgpkeys.

Re: Keyrings for websites

2007-02-08 Thread Werner Koch
On Thu, 8 Feb 2007 20:10, [EMAIL PROTECTED] said: > wish that UIDs were more of a key/value system (one key/value pair per You may use notations for this. They are however stored with the self-signature, so some care needs to be taken. If you need something simialr to the user ID, use the Us

Re: gen-key non-interactively

2007-02-08 Thread Werner Koch
On Thu, 8 Feb 2007 16:51, [EMAIL PROTECTED] said: > Otherwise, the gnupg manual page mentions an experimental method for BTW, I forgot to remove the "experimental" tag. That is a stable feature and useful for production. Salam-Shalom, Werner _

Re: Keyrings for websites

2007-02-08 Thread Janusz A. Urbanowicz
On Thu, Feb 08, 2007 at 05:32:30PM +0100, B??r Kessels wrote: > Hello, > > Op donderdag 8 februari 2007 15:36, schreef Joseph Oreste Bruni: > > You might want to check out "Domain Keys" which is used to   > > authenticate email sessions between MTA's. > > > > Also, peer-to-peer authentication can

Re: Keyrings for websites

2007-02-08 Thread Thomas Hühn
Alex Mauer <[EMAIL PROTECTED]> writes: > This sort of overloading of the name/comment/email fields bothers me. I > wish that UIDs were more of a key/value system (one key/value pair per As far as I understand it there are no such fields. User ID is freeform, just a string. So feel free to put i

Re: Keyrings for websites

2007-02-08 Thread Alex Mauer
Peter Pentchev wrote: > using PGP keys (or rather, uid's) with only names, no e-mail addresses. > You could either use such keys with the hostname (or the full path to > the web application) placed directly in the "name" part of the user ID, > or develop some kind of machine-readable encoding to re

Re: Keyrings for websites

2007-02-08 Thread Peter Pentchev
On Thu, Feb 08, 2007 at 01:03:05PM +0100, B?r Kessels wrote: > Hello, > > With the current growth of online services that talk to eachother (the > web2.0) I thought it a good idea to think about a way to determine > "trust" between the sites. > > If my site shares its spam tokens, comments, sear

Re: gen-key non-interactively

2007-02-08 Thread Peter Pentchev
On Thu, Feb 08, 2007 at 04:59:26AM -0500, Mark Pinto wrote: > I'm wanting to pass all of the information that gpg needs to create a > key (key size, type, expiration, userid, etc) initially and not have > gpg keep pausing to ask the user. I've read the man page, read gpg > --help, googled, and I s

Re: OpenPGP card and secret keys

2007-02-08 Thread Alex Mauer
Werner Koch wrote: > Okay, so it is not a communication problem with teh card. Please run > > gpg --debug 64 --clearsign test.txt > > To see why gpg tries to use the primary key. aha! it does not. It's trying to use a different subkey instead. Surely missing secret key parts would be cause

Re: gen-key non-interactively

2007-02-08 Thread snowcrash+gnupg-users
> I strongly advise against using expect to generate keys. Your expect > script will break when we change the text that GPG displays. If you > want to generate keys unattended, then use the --batch --gen-key > interface. i clearly understand that, and will manage my script(s) accordingly. thanks

Re: making a passphrase by doubling a password and tweaking the end

2007-02-08 Thread Robert J. Hansen
> Suppose my shell password is "SapNilph4" (I just got that from APG), > is it stupid to make a passphrase for an ssh or gpg key by doubling it > and changing the end, for example "SapNilph4SapNilph3"? Or am I > really wasting potential entropy this way? Stupid? No. May not be especially wise,

Re: gen-key non-interactively

2007-02-08 Thread David Shaw
On Thu, Feb 08, 2007 at 07:44:02AM -0800, snowcrash+gnupg-users wrote: > here's an "expect"-based function i use in a bash script for just such > purpose, > > # function: "DO_GENKEY_SESSION" > # auto-execute a GPG --gen-key session > # usage: > # DO_GENKEY_SESSION

Re: gen-key non-interactively

2007-02-08 Thread David Shaw
On Thu, Feb 08, 2007 at 04:59:26AM -0500, Mark Pinto wrote: > I'm wanting to pass all of the information that gpg needs to create a > key (key size, type, expiration, userid, etc) initially and not have > gpg keep pausing to ask the user. I've read the man page, read gpg > --help, googled, and I s

making a passphrase by doubling a password and tweaking the end

2007-02-08 Thread Anonyma
(This is as much about ssh as gpg, but I figure there should be some passphrase expertise here.) Suppose my shell password is "SapNilph4" (I just got that from APG), is it stupid to make a passphrase for an ssh or gpg key by doubling it and changing the end, for example "SapNilph4SapNilph3"? Or a

Re: Keyrings for websites

2007-02-08 Thread Bèr Kessels
Hello, Op donderdag 8 februari 2007 15:36, schreef Joseph Oreste Bruni: > You might want to check out "Domain Keys" which is used to   > authenticate email sessions between MTA's. > > Also, peer-to-peer authentication can be accomplished via X.509   > certificates and SSL. Ye, I am aware of the X

Re: gen-key non-interactively

2007-02-08 Thread Werner Koch
On Thu, 8 Feb 2007 10:59, [EMAIL PROTECTED] said: > I'm wanting to pass all of the information that gpg needs to create a > key (key size, type, expiration, userid, etc) initially and not have > gpg keep pausing to ask the user. I've read the man page, read gpg > --help, googled, and I still can

Re: gen-key non-interactively

2007-02-08 Thread snowcrash+gnupg-users
here's an "expect"-based function i use in a bash script for just such purpose, # function: "DO_GENKEY_SESSION" # auto-execute a GPG --gen-key session # usage: # DO_GENKEY_SESSION (SELECTION) $NOTATION $COMMENT # gen-key dialog options (SELECTION):

gen-key non-interactively

2007-02-08 Thread Mark Pinto
I'm wanting to pass all of the information that gpg needs to create a key (key size, type, expiration, userid, etc) initially and not have gpg keep pausing to ask the user. I've read the man page, read gpg --help, googled, and I still cant figure out how to pass those things to gpg while using --g

Re: Keyrings for websites

2007-02-08 Thread Joseph Oreste Bruni
You might want to check out "Domain Keys" which is used to authenticate email sessions between MTA's. Also, peer-to-peer authentication can be accomplished via X.509 certificates and SSL. Joe On Feb 8, 2007, at 5:03 AM, Bèr Kessels wrote: Hello, With the current growth of online servi

Keyrings for websites

2007-02-08 Thread Bèr Kessels
Hello, With the current growth of online services that talk to eachother (the web2.0) I thought it a good idea to think about a way to determine "trust" between the sites. If my site shares its spam tokens, comments, search results, tags and pictures (etc) with a cloud of sites, it could be a

Re: smartcard and ssh

2007-02-08 Thread Remco Post
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Alex Mauer wrote: > Remco Post wrote: >> hmmm, more problems. I've decided that the ubuntu packages are broken. >> I'll try again in a new release or when I gain some more patience ;-) > > Have you looked for and/or reported the bugs you found? > > I

Re: smartcard and ssh

2007-02-08 Thread Remco Post
Alex Mauer wrote: > Remco Post wrote: >> hmmm, more problems. I've decided that the ubuntu packages are broken. >> I'll try again in a new release or when I gain some more patience ;-) > > Have you looked for and/or reported the bugs you found? > > It works for me pretty much "out of the box" wit