Re: configure warnings and errors upon ./configure for Pinentry v0.9.7

2016-11-20 Thread David Adamson
Thanks Krzysztof. I did apt-get install pinentry-qt4 although it was an older (0.8.3-2) version than what is on gnupg . org. It installed without any errors but when I run gpg2 --gen-key I'm still getting: We need to generate a lot of random bytes. It is a good idea to perform some other action (t

Re: Implications of a common private keys directory in 2.1

2016-11-20 Thread Carola Grunwald
On Sun, 16 Oct 2016 01:22:50 + (UTC), I wrote: >Hi, > >my next problem with 2.1.15 on Windows 7. > >I add a pub/sec keypair to two different keyrings > '--import ... --keyring a.kbx', then '--import ... --keyring b.kbx'. >Following this I delete that key from one of the keyrings > '--delete-

How to prevent passphrase caching in 2.1

2016-11-20 Thread Carola Grunwald
Hi, is adding | default-cache-ttl 0 and/or | max-cache-ttl 0 to gpg-agent.conf the official way to deactivate passphrase caching completely and make GnuPG only use the term transferred with the --passphrase option? Thanks Caro ___ Gnupg-users mail

How to prevent passphrase caching in 2.1

2016-11-20 Thread Carola Grunwald
Hi, is adding | default-cache-ttl 0 and/or | max-cache-ttl 0 to gpg-agent.conf the official way to deactivate passphrase caching completely and make GnuPG only use the term transferred with the --passphrase option? Thanks Caro ___ Gnupg-users mail

Re: Primary and Signing Key on Different Smart Cards

2016-11-20 Thread Anton Marchukov
> Which version, GnuPG 2.0 or 2.1? I think you can use 2.1 to reach the desired > outcome without difficulty, even if it might be a bit non-standard. I have 2.1.11 > Can we first get out of the way which exact version of GnuPG you're using? If > you're using 2.0, start with the threads linked abo

Re: Primary and Signing Key on Different Smart Cards

2016-11-20 Thread Anton Marchukov
> You will need the private key on-disk *temporarily* while setting up the > smartcards. But with Knoppix, that "disk" can be a RAM disk in the main > memory of your computer, obliterated once you power it off. I think you will have to keep it as backup too in case you will want to add another sma

GPGSM detached signature without auth attributes

2016-11-20 Thread Jernej Kos
Hello! I would like to use GPGSM to sign a Linux kernel module with a private key stored on an OpenPGP smartcard. The original signing tool uses OpenSSL to sign the kernel module using a detached CMS signature. The kernel requires that the CMS does not contain any authenticated attributes and it

Re: Primary and Signing Key on Different Smart Cards

2016-11-20 Thread Anton Marchukov
On Thu, Nov 17, 2016 at 7:45 PM, Arthur Ulfeldt wrote: > I have a similar setup and have been doing it successfully. I have two > yubikey neos with signing keys. I found that because of bugs in gpg 2.1 I That's interesting as I want exactly that - two yubikeys for signing. Will be bale to try tha