Re: Oracle behavior in Gnupg? //

2012-07-31 Thread Werner Koch
On Mon, 30 Jul 2012 16:59, harni...@gmail.com said: it? If so, then I'd suggest that a quiet execution be performed that way only the exit code can be used that it's failure. You should not rely on the exit code but parse all the information returned by GPG. GPGME makes this easy. Given that

Re: pipe passphrase to unlock key

2012-07-31 Thread Werner Koch
On Mon, 30 Jul 2012 21:15, ciprian.crac...@gmail.com said: * implement your own fake `gpg-agent` which I have no ideea what actually implies; Don't do this. * implement your own fake `pinentry` which would be much simpler as it only has to implement the assuan protocol; but you'll

Re: Oracle behavior in Gnupg? // (was 'possible bug in gpg?')

2012-07-31 Thread Ben McGinnes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 31/07/12 1:14 AM, David Shaw wrote: Yes, this is expected behavior. It follows from what I explained earlier in this thread. When you use --override-session-key, you bypass the quick check (after all, you gave the override key - what is

Re: gpg simplified?

2012-07-31 Thread Werner Koch
On Tue, 31 Jul 2012 07:11, y...@yyy.id.lv said: 3) The program can be run from removable media, i.e., it requires no installation and assumes no network access for either key exchange or in operation. There are binaries for all three major platforms (Win32, Linux and Mac OSX). I have heard,

Re: Mac OS X 10.8 and OpenPGP Cards

2012-07-31 Thread Olav Seyfarth
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi Kevin, list, I just upgraded from Mac OS X 10.7 to 10.8, and my ZeitControl cards, which were formerly working perfectly, are now inaccessible. please note that 10.8 brings significant changes (namely sandboxing) to Mac OS X which does

Re: Oracle behavior in Gnupg? //

2012-07-31 Thread Werner Koch
On Tue, 31 Jul 2012 11:56, b...@adversary.org said: On a related note, is it possible to extract the session key (--show-session-key), but without decrypting the file in the process? Just obtain the session key and stop there? I've already tried -n There is no such option. I once did

Re: Mac OS X 10.8 and OpenPGP Cards

2012-07-31 Thread Kevin Kammer
On Tue, Jul 31, 2012 at 12:00:23PM +0200 Also sprach Olav Seyfarth: -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 Hi Kevin, list, I just upgraded from Mac OS X 10.7 to 10.8, and my ZeitControl cards, which were formerly working perfectly, are now inaccessible. please note that

Re: pipe passphrase to unlock key

2012-07-31 Thread Werner Koch
On Tue, 31 Jul 2012 12:54, ciprian.crac...@gmail.com said: Not a good idea, because GnuPG 2.1 requires the gpg-agent and won't see any private key stuff. Not necessarily if you use the `--batch`, `--no-use-agent`, or `--no-tty` (or a mix of the I'm not sure right now, but the manual

Re: gpg simplified?

2012-07-31 Thread yyy
On 2012.07.31. 12:35, Werner Koch wrote: On Tue, 31 Jul 2012 07:11, y...@yyy.id.lv said: Why do you think gpg2 won't work or does any network access without user consent? gpg2 requires gpg agent..., i was referring to posibility to making it a portable application (not requiring installation,

Re: pipe passphrase to unlock key

2012-07-31 Thread Ciprian Dorin Craciun
On Tue, Jul 31, 2012 at 6:35 PM, Werner Koch w...@gnupg.org wrote: On Tue, 31 Jul 2012 12:54, ciprian.crac...@gmail.com said: Not a good idea, because GnuPG 2.1 requires the gpg-agent and won't see any private key stuff. Not necessarily if you use the `--batch`, `--no-use-agent`, or

message signature types

2012-07-31 Thread auto15963931
If this is the wrong place to ask, please point me in the right direction. Where can I learn more about importing, if such a thing is even done this way, and making use of message signatures which utilize an smime.p7s file? I got a message from someone who uses this, and I need to learn about

Re: pipe passphrase to unlock key

2012-07-31 Thread Werner Koch
On Tue, 31 Jul 2012 17:53, ciprian.crac...@gmail.com said: First of all I would really have liked the tool to not just ignore the `--no-user-agent` flag and bail out... That would make migration for user of 2.0 to 2.1 too complicate. We try to do the migration as smooth as possible.

Re: message signature types

2012-07-31 Thread Werner Koch
On Tue, 31 Jul 2012 18:57, auto15963...@hushmail.com said: even done this way, and making use of message signatures which utilize an smime.p7s file? I got a message from someone who uses this, and I Feel free to ask here. GnuPG has a complete CMS/X.509 (aka S/MIME) implementation. like

Re: gpg simplified?

2012-07-31 Thread peter . segment
On 31/07/12 09:35, Werner Koch - w...@gnupg.org wrote: Why do you think gpg2 won't work or does any network access without user consent? Correct me if I'm wrong, but it is unreasonable to expect anybody to successfully and safely use gpg without understanding the concepts and mastering the

Re: message signature types

2012-07-31 Thread Charly Avital
auto15963931 jv92pc$ct5$1...@dough.gmane.org July 31, 2012 2:47:22 PM wrote: If this is the wrong place to ask, please point me in the right direction. Where can I learn more about importing, if such a thing is even done this way, and making use of message signatures which utilize an smime.p7s

Re: gpg simplified?

2012-07-31 Thread Robert J. Hansen
On 7/31/2012 8:17 AM, peter.segm...@wronghead.com wrote: Correct me if I'm wrong, but it is unreasonable to expect anybody to successfully and safely use gpg without understanding the concepts and mastering the skills essential to the WOT: This is not at all the case. Set up a trusted

Re: New GnuPG mirror

2012-07-31 Thread Sam Whited
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 07/31/2012 11:04 PM, Sam Whited wrote: where to pull from (presumably there is an rsync server somewhere?). Right after spamming the list I realized that the ftp server probably also handled rsync. Other recommendations are still welcome

Re: New GnuPG mirror

2012-07-31 Thread Sam Whited
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 07/28/2012 03:20 PM, HardKor wrote: I just set up a mirror of the GnuPG website. I was considering running a GnuPG mirror for a while, but couldn't find any information about where (geographically) they needed mirrors, how often they