Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Antony Prince
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On February 20, 2015 1:00:52 AM EST, Doug Barton wrote: >On 2/19/15 12:16 AM, Pete Stephenson wrote: > >> Considering the way it was abandoned by its developers, TrueCrypt is >> probably not the best choice going forward. > >We don't know the whole

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Doug Barton
On 2/19/15 12:16 AM, Pete Stephenson wrote: Considering the way it was abandoned by its developers, TrueCrypt is probably not the best choice going forward. We don't know the whole story about what happened there, so I would be hesitant to attribute malice. For some of us who need to have the

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Ranjini H.K
Yes i used Scute. No success with it. I better ask OpenSC mailing list with the help asking for the support for handle data objects even if the card could store them.. Ranjini HK Software Engineer - Tyfone, Inc. Bangalore www.tyfone.com Mobile: +91-9886262192 On Fri, Feb 20, 2015 at 1:50 AM, M

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Robert J. Hansen
> [1] https://en.wikipedia.org/wiki/Hanlon%27s_razor ; apparently > after Robert J. Hanlon, not Hansen ;P There are at least four guys in the security world named Robert Hansen; to make matters worse, some of us have spoken at the same conferences. My middle initial is only to distinguish me from

Re: gpg-agent does not authenticate ssh connections

2015-02-19 Thread NIIBE Yutaka
On 02/09/2015 02:41 AM, Rainer Keller wrote: > In .gnupg/sshcontrol I have added the correct keygrip and "ssh-add -l" shows > the right key: > >> 4096 XX:XX:XX cardno: (RSA) Well, you don't need to add this manually, for your smartcard. >> gpg-agent smartcard signing failed: Bad PIN > > It

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 19.02.15 21:18, Ville Määttä wrote: > Surely someone from the KDE / larger community > using pinentry-qt4 has been working on a QT 5 version of pinentry? Ok, found it :). Issue #1806 [1]. [1]: https://bugs.g10code.com/gnupg/issue1806 -- Ville signature.asc Description: OpenPGP digital sig

Re: GnuPG 2.0.27 "stable" released

2015-02-19 Thread Richard Stallman
[[[ To any NSA and FBI agents reading my email: please consider]]] [[[ whether defending the US Constitution against all enemies, ]]] [[[ foreign or domestic, requires you to follow Snowden's example. ]]] Congratulations on the new release. -- Dr Richard Stallman President, Free Software

Re: gpg-agent does not authenticate ssh connections

2015-02-19 Thread Rainer Keller
> Gpg-agent uses the smartcard key which is identified by the $AUTHKEYID > attribute: > > $ gpg-connect-agent 'scd getattr $AUTHKEYID' /bye > S $AUTHKEYID OPENPGP.3 > OK I get the same output for my card. > Thus only the keys listed in ~/.gnupg/sshcontrol will be used. The keygrip from the

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Matthias-Christian Ott
On 2015-02-19 20:00, Werner Koch wrote: > On Thu, 19 Feb 2015 18:22, o...@mirix.org said: > >> Your Java Card does probably not support PKCS #11. An applet on the card >> might implement it. To make it work, you need a PKCS #11 middleware and > > PKCS#11 is an API between two applications. It is

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Matthias-Christian Ott
On 2015-02-19 19:50, Thomas Harning Jr. wrote: > On Thu Feb 19 2015 at 12:23:34 PM Matthias-Christian Ott > wrote: > >> On 2015-02-19 09:23, Ranjini H.K wrote: >>> Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. >>> What should i do othercase To make my OpenPGP applet supp

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Thomas Harning Jr.
On Thu Feb 19 2015 at 12:23:34 PM Matthias-Christian Ott wrote: > On 2015-02-19 09:23, Ranjini H.K wrote: > > Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. > > What should i do othercase To make my OpenPGP applet support PKCS#11. > > Your Java Card does probably not supp

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Jonathan Schleifer
Am 19.02.2015 um 20:08 schrieb Werner Koch : > Because I have to enter the PIN everytime (right, I do this on purpose), > the RSA signatures a long, and I do not keep my signing key card > inserted all the time. In fact I have to walk out of the office to pick > it up. Another approach is to not

Re: Compiled binaries execute but exit with "Abort"

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 12:01, er...@askerrol.org said: > Thanks. Now to figure out why make check fails but make works without > error. Are there dependencies besides pth for libgpg-error? Are you using a recent Pth version? I recall that older Pth versions had problems when used by programs which a

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 18.02.15 13:05, Jonathan Schleifer wrote: >> > Upstream still does have the issue which now seems to have been fixed in >> > the fork but in a binary removed from upstream… > I really can not confirm this. I am running vanilla GnuPG 2.1.2 (built from > source) on Yosemite (10.10.2 to be exact)

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 18:16, js-gnupg-us...@webkeks.org said: > I also like @ to hide useless output, but is downloading *and > executing* from a remote location really something you should hide? > Especially if everything else isn't hidden? Okay, someone please write a noscript extension for the l

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 18:15, js-gnupg-us...@webkeks.org said: > I don't really see how that is cumbersome if you have an alias for tag > and for commit that each specify the key you want? Because it is too easy to forget about it. And I would need to teag Magit. I started to use a new key for com

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Werner Koch
On Thu, 19 Feb 2015 18:22, o...@mirix.org said: > Your Java Card does probably not support PKCS #11. An applet on the card > might implement it. To make it work, you need a PKCS #11 middleware and PKCS#11 is an API between two applications. It is not directly related to smartcards. However, it

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 18.02.15 07:21, Werner Koch wrote: >> wrappers or fixes upstream. Case in point: Has the fix for gpg-agent / >> > scdaemon hang been discussed upstream at all [4], [5]? In MacGPG there >> > is still ../libexec/gnupg-pcsc-wrapper which has been modified in >> > commit f4c3e1bb to fix the issues o

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 18.02.15 07:21, Werner Koch wrote: >> > command line tools. *I think there is no more reason to develop >> > MacGPG*, i.e. a port, anymore. Let the port die. > Can you briefly explain how Patrick's new installer [1] is related to that? > Would it be an option to use that as the core for gpgtools

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Ville Määttä
On 17.02.15 23:32, Lukas Pitschl wrote: > The best way to reach us is either our support platform at > https://gpgtools.tenderapp.com or t...@gpgtools.org. Ok, that link explains the certificate and it makes more sense. I can see you've already changed at least the first link to the support site

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Peter Lebbing
On 2015-02-19 18:16, Jonathan Schleifer wrote: I also like @ to hide useless output, but is downloading *and executing* from a remote location really something you should hide? Especially if everything else isn't hidden? I can understand you're pretty darn pissed off that they executed untrust

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Matthias-Christian Ott
On 2015-02-19 09:23, Ranjini H.K wrote: > Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. > What should i do othercase To make my OpenPGP applet support PKCS#11. Your Java Card does probably not support PKCS #11. An applet on the card might implement it. To make it work, yo

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Jonathan Schleifer
Am 18.02.2015 um 16:05 schrieb Werner Koch : > I also do this often to avoid cluttering the screen. No need to assume > a backdoor. It is for a Mac and Mac users want a clean tty ;-) I also like @ to hide useless output, but is downloading *and executing* from a remote location really somethin

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Jonathan Schleifer
Am 18.02.2015 um 15:57 schrieb Werner Koch : >> git commit -S >> >> You can just create an alias for that, I for example use git ci. > > I know that but I would like to have a different key for tag and commit. > Requiring an option is just too cumbersome. I don't really see how that is cumbers

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Richard Ulrich
Hi Ranjini, Does it have to be truecrypt? LUKS works very well with OpenPGP SmartCards or JavaApplets implementing it (e.g. YubiKey NEO). Just follow the steps in this blog post: https://blog.kumina.nl/2010/07/two-factor-luks-using-ubuntu Rgds Richard Am Donnerstag, den 19.02.2015, 13:53 +0530 s

Re: Compiled binaries execute but exit with "Abort"

2015-02-19 Thread Errol Casey
Thanks. Now to figure out why make check fails but make works without error. Are there dependencies besides pth for libgpg-error? make check-TESTS bash: line 5: 11699 Abort (core dumped) ${dir}$tst FAIL: t-version Unspecified source: Success gcrypt: Invalid length specifier in S

Re: GNUPG 2.* and AIX - questions

2015-02-19 Thread Werner Koch
On Sun, 15 Feb 2015 12:16, aixto...@gmail.com said: > I took the hint and tried to package gnu/nth but make fails - immediately - > with this message. You might find something about this in bugs.gnupg.org. I have not tried gnupg 2.0.x on AIX for many years thus it is quite possible that you run

Re: 2.1.2: keyserver route failure

2015-02-19 Thread Werner Koch
On Wed, 18 Feb 2015 20:13, d...@fifthhorseman.net said: > Reasonable IPv6 stacks should return an ENETUNREACH (Network is > unreachable) error message when trying to connect() to an address for > which there is no route, which should already cause dirmngr to failover The error handler after a con

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Ranjini H.K
Thanks Pete Stephenson. Yes my java card supports PKCS#11. Am not so sure about OpenPGP applet. What should i do othercase To make my OpenPGP applet support PKCS#11. Ranjini HK Software Engineer - Tyfone, Inc. Bangalore www.tyfone.com Mobile: +91-9886262192 On Thu, Feb 19, 2015 at 1:46 PM, Pet

Re: Help need to use truecryt + openpgp applet.

2015-02-19 Thread Pete Stephenson
On Thu, Feb 19, 2015 at 5:53 AM, Ranjini H.K wrote: > Hi all, > > Am trying to implement disk encryption/decryption using truecrypt with > security token support. I have a java card with openPGP applet loaded on to > it. Inspite of configuring truecrypt to use the security token, its not > finding

Re: Please remove MacGPG from gnupg.org due to serious security concerns

2015-02-19 Thread Werner Koch
On Wed, 18 Feb 2015 20:24, d...@fifthhorseman.net said: >> as did a few other maintainers. However there was not only not a >> consensus to do this more generally, there was active opposition to >> doing it at all. > > that's a bummer :( I guess that is a GPL issue. They don't want any GPLed