GnuPG 2.1.0: --refresh-keys regression

2014-11-11 Thread Luis Ressel
Hello, One of the changes introduced with GnuPG 2.1 -- namely, using dirmngr for key retrieval -- has caused some problems for me. First of all, I'm not able to use gpg --refresh-keys anymore, as dirmngr requests all of the keys from the keyserver at once, instead of one-by-one as GnuPG 2.0 did.

Re: Tweeting for GnuPG

2014-11-11 Thread Aaron Toponce
On Wed, Nov 05, 2014 at 09:21:14PM +0100, Werner Koch wrote: > I am looking for one or two people who would like to fill the @gnupg > Twitter account with some life. > > I am not one of those short message people but Twitter seems to be a big > deal these days. Thus if someone would be interested

Re: GPG 2.1.0/Win32: keyserver lookup problems

2014-11-11 Thread MichaelQuigley
"Gnupg-users" wrote on 11/08/2014 12:54:30 PM: > - Message from Werner Koch on Fri, 07 Nov 2014 > 17:32:49 +0100 - > > To: > > "Robert J. Hansen" > > cc: > > gnupg-users@gnupg.org > > Subject: > > Re: GPG 2.1.0/Win32: keyserver lookup problems > > On Thu, 6 Nov 2014 20:09, r...

Re: [Announce] GnuPG 2.1.0 "modern" released

2014-11-11 Thread Ville Määttä
No worries on my part. > it seems to install software in versioned directories. Exactly, under /usr/local… and without messing with the system installed binaries or libraries. Some things, like openssl libraries, it will not link automatically to avoid some issues with system provided libraries

Re: GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-11 Thread Werner Koch
On Tue, 11 Nov 2014 15:21, bernh...@intevation.de said: > In https://www.mailpile.is/blog/2014-10-07_Some_Thoughts_on_GnuPG.html > the Mailpile developers would like to replace GnuPG with something better > and for the short term propose to extend GnuPG with a command line JSON I have a reply in

Re: [Announce] GnuPG 2.1.0 "modern" released

2014-11-11 Thread Werner Koch
On Tue, 11 Nov 2014 15:59, mailing-li...@asatiifm.net said: > I don’t have CFLAGS set to anything. Mac OS X 10.9 and using homebrew > for most things. The only thing I do is run ./configure && make in the > untarred gnupg-2.1.0. I wouldn’t be surprised if there’s something I don't know any detail

GnuPG 2.1.0 Merging secret key

2014-11-11 Thread Mustrum
Hi all, I'm merging one of my 'old' sub-key into another key-pair. It kept the same keygrip but got a new ID/fingerprint. How can I use that new subkey to decrypt something encrypted to my 'old' subkey ? Regards ___ Gnupg-users mailing list Gnupg-use

SSH generic socket forwarding for gpg-agent

2014-11-11 Thread Matthew Monaco
Does anyone have gpg-agent forwarding working with SSH's recent generic socket forwarding? Does it still require socat on one end, because I've only been able to specify a socket path on the left-hand side of the forwarding specification. signature.asc Description: OpenPGP digital signature

Re: [Announce] GnuPG 2.1.0 "modern" released

2014-11-11 Thread Ville Määttä
Hi, That’s somehow just the result of running ./configure. Running a fresh (fresh untarred source, no speedo runs) configure reported this for me: … configure: checking for libraries checking for gpg-error-config... /usr/local/bin/gpg-error-config checking for GPG Error - version >= 1.15... yes

GnuPG 2.1 and Mailpile (LWN comments) about GPGME

2014-11-11 Thread Bernhard Reiter
In https://www.mailpile.is/blog/2014-10-07_Some_Thoughts_on_GnuPG.html the Mailpile developers would like to replace GnuPG with something better and for the short term propose to extend GnuPG with a command line JSON interface in the short term. I've commented the article under the LWN news about

Re: GnuPG 2.1 Unattended EC Generation

2014-11-11 Thread Nicholas Cole
I'm so sorry, Werner. I thought I'd checked the manual. Huge apologies. On Tuesday, 11 November 2014, Werner Koch wrote: > On Tue, 11 Nov 2014 12:56, nicholas.c...@gmail.com said: > > > Is that still possible? In version 2.1, if no password is specified, > > gpg2 tries to call pin-entry and as

Re: GnuPG 2.1 Unattended EC Generation

2014-11-11 Thread Werner Koch
On Tue, 11 Nov 2014 12:56, nicholas.c...@gmail.com said: > Is that still possible? In version 2.1, if no password is specified, > gpg2 tries to call pin-entry and ask for a passphrase. A quick look into the manual (for me the source, but you may want to use the online version) gives: @item %n

Re: GnuPG 2.1 Unattended EC Generation

2014-11-11 Thread Nicholas Cole
On Mon, Nov 10, 2014 at 4:41 PM, Werner Koch wrote: > On Mon, 10 Nov 2014 12:52, nicholas.c...@gmail.com said: > >> How does unattended generation of elliptic curve keys work? As far as >> I can see, that section of the manual has not been updated for the new >> EC options, but I presume that it h

Re: Detached signature ambiguity

2014-11-11 Thread Werner Koch
On Tue, 11 Nov 2014 11:00, pe...@digitalbrains.com said: > How would the warning be triggered? By the extension of the signature > file or by existence of a file without the .sig extension, or even some > other way? Using an extension is in general not a good idea but in this case we use it anywa

Re: Detached signature ambiguity

2014-11-11 Thread Peter Lebbing
On 11/11/14 09:52, Werner Koch wrote: > I think this is what I will implement. How would the warning be triggered? By the extension of the signature file or by existence of a file without the .sig extension, or even some other way? > That is an entire different thing and not a problem of gpg. If

Re: [Announce] GnuPG 2.1.0 "modern" released

2014-11-11 Thread Werner Koch
Hi, On Thu, 6 Nov 2014 15:22, mailing-li...@asatiifm.net said: >> gcc -I/usr/local/Cellar/libgcrypt/1.6.2/include ! >> -I/usr/local/Cellar/libgpg-error/1.13/include >> -I/usr/local/Cellar/libassuan/2.1.2/include ! >> -I/usr/local/Cellar/libgpg-error/1.13/include >> -I/usr/local/Cellar/libk

Re: Clang with GnuPG 2.1.0

2014-11-11 Thread Werner Koch
On Fri, 7 Nov 2014 19:53, r...@sixdemonbag.org said: > In file included from /usr/include/netinet/in.h:22: > In file included from ../gl/stdint.h:83: That file is the cause of a lot of evil. gnulib is simply to complex to use only a small part of it and neglect to update it with each release. N

Re: Detached signature ambiguity

2014-11-11 Thread Werner Koch
On Mon, 10 Nov 2014 12:59, pe...@digitalbrains.com said: > If GnuPG encounters this situation, but file.ext.sig is not a detached > signature, it could display a big fat warning: > > WARNING: file.ext.sig is NOT a detached signature; the file file.ext is > NOT VERIFIED! I think this is what I wil