Re: Non-interactive password-change with gnupg 2.0?

2017-02-02 Thread Werner Koch
On Thu, 5 Jan 2017 21:07, pablo-gn...@duckdalbe.org said: > I'm trying to write code to change the passphrase of a key without > user-interaction that works with both, gpg 2.0 and gpg 2.1. I would not invest too much time into 2.0; as stated on the website it will reach end-of-life by the end

Non-interactive password-change with gnupg 2.0?

2017-01-05 Thread Pablo Santee
Hello, I'm trying to write code to change the passphrase of a key without user-interaction that works with both, gpg 2.0 and gpg 2.1. For gpg 2.1 I'm using '--pinentry-mode loopback --command-fd 0 --status-fd 2' and an expect-style script (not a pretty concept, IMHO, but it works). For gpg 2.0

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-26 Thread Stephan Beck
Hi Teemu, Teemu Likonen: > Stephan Beck [2016-11-24 16:51:00Z] wrote: > >> A1) Install the monkeysphere package (1) that includes openpgp2ssh tool >> A2) Export the secret subkey you'd like to use for ssh authentication >> purposes and pipe it through openpgp2ssh >> gpg2 --export-secret-subkeys

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-26 Thread Stephan Beck
Oh indeed! I didn't catch it at first glance that you were referring to that short moment between creating the file and chmod 0600! I thought I missed something with secure file permissions. :-) I only could say that I was "blinded by the light" you shed, but I won't Thanks! Stephan Peter

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-26 Thread Werner Koch
On Thu, 24 Nov 2016 17:51, st...@mailbox.org said: > Yes, --export-ssh-key has been introduced in gpg with release of version > 2.1.11. Unfortunately there is a regession in 2.1.16 which renders this command unusable. 2.1.15 worked and we will fix the regression for 2.1.17. Shalom-Salam,

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-25 Thread Peter Lebbing
On 25/11/16 14:36, Stephan Beck wrote: > Would you please describe more in detail where (or in which way, in > which use case) the window is left open? Let me reuse a bit of quote from an earlier mail: >>> A2) Export the secret subkey you'd like to use for ssh authentication >>> purposes and

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-25 Thread Teemu Likonen
Stephan Beck [2016-11-24 16:51:00Z] wrote: > A1) Install the monkeysphere package (1) that includes openpgp2ssh tool > A2) Export the secret subkey you'd like to use for ssh authentication > purposes and pipe it through openpgp2ssh > gpg2 --export-secret-subkeys \ > --export-options

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-25 Thread Stephan Beck
Hi, Peter Lebbing: > On 2016-11-24 16:59, Teemu Likonen wrote: >> I believe that file ~/.gnupg/sshcontrol should contain >> key's keygrip but how do I get the keygrip when there's no >> --with-keygrip option in 2.0? > > I think the following: > > $ gpg-connect-agent >> help keyinfo > # KEYINFO

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Peter Lebbing
On 24/11/16 20:56, Peter Lebbing wrote: > This is not true if you are on an NFS share, though! I mean: if you're on an NFS share, or an a disk partition from which things are shared over NFS. So if you're sharing /srv/export and you're on /srv/somewhere/else, it's still not safe. HTH, Peter.

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Peter Lebbing
Stephan, thanks for helping out! I think I can improve a bit on one part of it, though. On 24/11/16 17:51, Stephan Beck wrote: > A2) Export the secret subkey you'd like to use for ssh authentication > purposes and pipe it through openpgp2ssh > gpg2 --export-secret-subkeys \ > --export-options

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Peter Lebbing
On 2016-11-24 18:36, Peter Lebbing wrote: keyinfo --list No, that's wrong, scratch that. That will not work for OpenPGP keys because those aren't handled by the agent in 2.0. Silly me. I'm not sure you can add an OpenPGP auth subkey to the agent's SSH support without resorting to external

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Peter Lebbing
On 2016-11-24 16:59, Teemu Likonen wrote: I believe that file ~/.gnupg/sshcontrol should contain key's keygrip but how do I get the keygrip when there's no --with-keygrip option in 2.0? I think the following: $ gpg-connect-agent help keyinfo # KEYINFO [--[ssh-]list] [--data] [--ssh-fpr]

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Stephan Beck
Hi Teemu, Teemu Likonen: > Keys with authentication capability can be used with ssh, and GnuPG > 2.1's command --export-ssh-key will export the ssh public key. Right? Yes, --export-ssh-key has been introduced in gpg with release of version 2.1.11. To set the whole thing up, a few more steps are

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Teemu Likonen
Peter Lebbing [2016-11-24 16:04:42+01] wrote: > On 24/11/16 15:27, Teemu Likonen wrote: >> Unfortunately I have GnuPG 2.0.26 (as packaged in Debian 8). Can it be >> told to export ssh public keys? > > I think 2.0 also supported: > > $ ssh-add -L > > to list all SSH keys known to the agent.

Re: Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Peter Lebbing
On 24/11/16 15:27, Teemu Likonen wrote: > Unfortunately I have GnuPG 2.0.26 (as packaged in Debian 8). Can it be > told to export ssh public keys? I think 2.0 also supported: $ ssh-add -L to list all SSH keys known to the agent. ssh-add is part of the openssh-client package. HTH, Peter. --

Is --export-ssh-key functionality possible with GnuPG 2.0?

2016-11-24 Thread Teemu Likonen
Keys with authentication capability can be used with ssh, and GnuPG 2.1's command --export-ssh-key will export the ssh public key. Right? Unfortunately I have GnuPG 2.0.26 (as packaged in Debian 8). Can it be told to export ssh public keys? -- /// Teemu Likonen - .-..

Re: Configuration hints for using gnupg (2.0.x) interchangeably with graphical frontend and in the terminal

2016-06-11 Thread Peter Lebbing
On 09/06/16 19:50, Peter Lebbing wrote: > Of course, if you > multi-display a single "screen" terminal session, it might go haywire as > any X application would, since it would pick the DISPLAY from the > "screen" session that started it. I just realised this even happens with "regular" screen

Re: Configuration hints for using gnupg (2.0.x) interchangeably with graphical frontend and in the terminal

2016-06-09 Thread Peter Lebbing
be necessary. The only thing where you normally need to watch out is with the SSH agent support, which has no means to communicate invoking tty and graphical display. But when you're just using gpg, it should do the correct thing out-of-the-box, and you need no configuration for using gnupg (2.0.x)

Configuration hints for using gnupg (2.0.x) interchangeably with graphical frontend and in the terminal

2016-06-01 Thread Bjoern Kahl
Dear All, I am looking for hints or best practices to seamlessly mix use of GnuPG in the terminal and with frontends, in my case Enigmail in Thunderbird. I am on MacOS X (10.9.5 "Mavericks") with GnuPG installed through MacPorts as my main machine and also quite often logged into other

gnupg 2.0 Build fails

2013-06-21 Thread ahoeltje
Hello gpg Folks, I downloaded the gnupg-2.0.20 files and the associated required lib sources, including pth-2.0.7, today. The configure, make, make check, and make install, all went well in this order: libgpg-error-1.11 libassuan-2.1.0 libksba-1.3.0 libgcrypt-1.5.2 pth-2.0.7

GnuPG 2.0 decryption of two PGP Message blocks in one Message

2012-04-24 Thread Ajayk1122
and more clear picture of the scenario. Any help is greatly appreciated. Thanks. -- With Regards, Ajay Kallur http://old.nabble.com/file/p33740429/Sample%2BPGP%2Bmessage%2Bwith%2B2%2Bpgp%2Bblocks Sample+PGP+message+with+2+pgp+blocks -- View this message in context: http://old.nabble.com/GnuPG

GnuPG 2.0 decryption of two PGP Message blocks in one Message

2012-04-24 Thread Ajay Kallur
Dear Developer, Here's a peculiar scenario, I have a file which has 2 pgp messages or blocks embedded in a single file one below the other. Can GPG 2.0 be able to decrypt both the blocks and concatenate the messages inside same single file? I have attached the sample PGP file for reference and

Re: [Announce] Security Alert for GnuPG 2.0 - Realloc bug in GPGSM

2010-07-27 Thread Werner Koch
Hi, some more inforrmation about this bug On Fri, 23 Jul 2010 14:36, w...@gnupg.org said: bug was found in GnuPG's GPGSM tool. It is likely that this bug is exploitable by sending a special crafted signed message and having a On a first view this might actually happen. However, after some

[Announce] Security Alert for GnuPG 2.0 - Realloc bug in GPGSM

2010-07-23 Thread Werner Koch
Realloc Bug with X.509 certificates in GnuPG == 2010-07-23 Summary === While trying to import a server certificate for a CDN service, a segv bug was found in GnuPG's GPGSM tool. It is likely

Installing gnupg 2.0.[89] on AIX 5.3

2008-12-09 Thread REX NUFER
I hope there is someone who can help me with the install problems I'm having. I'm trying to install on an AIX 5.3 box. Please CC me with any response. I'm wondering if using an old version of gcc may be part of my problem. Thank you for any help you can provide. First I tried to install

Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

2007-01-28 Thread Benjamin Donnachie
Alon Bar-Lev wrote: The users used IDEA algorithm in GnuPG-1.4, and are unable to use their keys in GnuPG-2.0. Do they /absolutely/ need to use GPG v2? If not, it's probably going to be easier if they go back to using v1.4.x... Ben ___ Gnupg-users

Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

2007-01-28 Thread Alon Bar-Lev
On 1/28/07, Benjamin Donnachie [EMAIL PROTECTED] wrote: Do they /absolutely/ need to use GPG v2? If not, it's probably going to be easier if they go back to using v1.4.x... This is the easy way out :) gpg2 should be backward compatible... I would like to make it work too... :) Best Regards,

Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

2007-01-28 Thread Benjamin Donnachie
Alon Bar-Lev wrote: Do they /absolutely/ need to use GPG v2? If not, it's probably going to be easier if they go back to using v1.4.x... This is the easy way out :) It's the one the gnupg team recommend! gpg2 should be backward compatible... I would like to make it work too... :) I

Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

2007-01-28 Thread Werner Koch
On Sun, 28 Jan 2007 18:22, [EMAIL PROTECTED] said: This is the easy way out :) gpg2 should be backward compatible... I would like to make it work too... :) IDEA is not even supported by 1.4 - it is kind of coincidence that there is a way to plugin the IDEA module ;-) Thus there will be no

Re: [HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

2007-01-28 Thread David Shaw
On Sun, Jan 28, 2007 at 07:33:15PM +, Benjamin Donnachie wrote: Alon Bar-Lev wrote: Do they /absolutely/ need to use GPG v2? If not, it's probably going to be easier if they go back to using v1.4.x... This is the easy way out :) It's the one the gnupg team recommend! gpg2 should

[HELP NEEDED] GnuPG-1.4 IDEA migration to GnuPG-2.0

2007-01-21 Thread Alon Bar-Lev
Hello, Can anyone help some of our (Gentoo) users solving a migration issue they have? http://bugs.gentoo.org/show_bug.cgi?id=159870 The users used IDEA algorithm in GnuPG-1.4, and are unable to use their keys in GnuPG-2.0. The libgcrypt was patched to enable IDEA algorithm. Any help

Re: GnuPG 2.0 compilation fails with undefined reference to gpg_err_code_from_syserror

2006-11-29 Thread Werner Koch
On Tue, 28 Nov 2006 22:11, [EMAIL PROTECTED] said: ../jnlib/libjnlib.a ../common/libcommonpth.a ../gl/libgnu.a -lgcrypt -lgpg-error -L/usr/local/libassuan-1.0.1/lib -lassuan-pth -L/usr/lib -lpth -lnsl -L/usr/local/libgpg-error-1.4/lib -lgpg-error -ldl -L/usr/lib -lpth -lnsl

Re: GnuPG 2.0 compilation fails with undefined reference to gpg_err_code_from_syserror

2006-11-29 Thread Ralph Seichter
Werner Koch wrote: I can mitigate the problem by changing the order. However, these kinds of problems are not completly solvable. Well, even though it is not a perfect solution, it might be a good idea to check the user-supplied library directories before /usr/lib. As a quick hack, I suggest

Re: GnuPG 2.0 compilation fails with undefined reference to gpg_err_code_from_syserror

2006-11-29 Thread Werner Koch
On Wed, 29 Nov 2006 15:10, [EMAIL PROTECTED] said: I'll attach a small patch for the configure script of GnuPG 2.0.1 which works for me. But only for you. As soon as --ldflags returns a non-standard directory it won't work. Shalom-Salam, Werner

GnuPG 2.0 compilation fails with undefined reference to gpg_err_code_from_syserror

2006-11-28 Thread Ralph Seichter
Hi list, I'm having trouble compiling the agent component of GnuPG 2.0 on a Gentoo-based machine. I could not find anything about the error message (please see attachment) in the FAQ or by searching the Net, so I hope that the members of this mailing list are able to help. If you need any

Re: GnuPG 2.0 compilation fails with undefined reference to gpg_err_code_from_syserror

2006-11-28 Thread Werner Koch
On Tue, 28 Nov 2006 17:09, [EMAIL PROTECTED] said: I'm having trouble compiling the agent component of GnuPG 2.0 on a Gentoo-based machine. I could not find anything about the error message Please try 2.0.1 which I released this evening. Salam-Shalom, Werner

Re: GnuPG 2.0 compilation fails with undefined reference to gpg_err_code_from_syserror

2006-11-28 Thread Ralph Seichter
Werner Koch wrote: Please try 2.0.1 which I released this evening. I tried, but unfortunately version 2.0.1 won't compile either. -- Mit freundlichen Grüßen / Sincerely Dipl. Inform. Ralph Seichter gcc -I/usr/local/libgpg-error-1.4/include -g -O2 -Wall -Wno-pointer-sign -o gpg-agent

Re: GnuPG 2.0

2006-11-23 Thread Adam Cripps
On 11/14/06, Werner Koch [EMAIL PROTECTED] wrote: As soon as there is a financial backing, a real port to Windows can be done. Shalom-Salam, Werner Would windows users be willing to fund development by contribution? That way, once a threshold of money has been received then someone

Re: gnupg 2.0 // compile on cygwin ?

2006-11-17 Thread Ismael Valladolid Torres
[EMAIL PROTECTED] escribe: can gnupg 2.o be set up in cygwin using cygwin's gcc compiler ? Haven't you tried? Cordially, Ismael -- Ismael Valladolid Torres Il est vain de pleurer sur l'esprit, il suffit de travailler pour lui. Albert Camus

Re: GnuPG 2.0

2006-11-16 Thread David Shaw
On Tue, Nov 14, 2006 at 09:46:53AM +0100, Sven Radde wrote: Summarizingly, I hope that there will be a Windows version. If nothing else, there should be a clear commitment as to the future of 1.4.x (i.e. not only maintaining but active further development) to avoid the feeling that Windows

gnupg 2.0 // compile on cygwin ?

2006-11-16 Thread vedaal
On Tue, Nov 14, 2006 at 09:46:53AM +0100, Sven Radde wrote: Summarizingly, I hope that there will be a Windows version. maybe it can be compiled on cygwin ? i have gnupg 1.4.5 on windows, and 1.4.2.2 on cygwin (a 'full' install on cygwin includes gnupg, gcc, perl and python) and both gnupg

Re: GnuPG 2.0

2006-11-16 Thread Werner Koch
On Thu, 16 Nov 2006 17:19, [EMAIL PROTECTED] said: Here is your clear commitment to the future of 1.4.x. The numbering between 1.4 and 2.0 is perhaps unfortunate in that it implies that 2.0 replaces 1.4. It doesn't. They are two different programs that serve AFAICS, Apache does it the same

Re: GnuPG 2.0

2006-11-14 Thread Remco Post
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John W. Moore III wrote: The Bottom Line is that nothing is /missing/ in 1.4.x Builds. GPGshell WinPT will *not* work on Linux so GPG-Agent is the Linux version of a 'Shell' for easy manipulation of GnuPG within Linux. _but_ gpg-agent also

[Announce] GnuPG 2.0 released

2006-11-13 Thread Werner Koch
Hello! The GNU project is pleased to announce the availability of a new stable GnuPG release: Version 2.0.0. The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data, create digital signatures, help authenticating using Secure

GnuPG 2.0

2006-11-13 Thread Richard H. Stoddard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 I received the notice that 2.0 has been released. I'm currently using GnuPG 1.4.5, which I downloaded as part of the Gnu for Windows package, and GPGshell for Windows 3.52. Can I upgrade to v2.0 without abandoning GPGshell? Do I need to uninstall

Re: GnuPG 2.0

2006-11-13 Thread spacemarc
2006/11/13, Werner Koch [EMAIL PROTECTED]: There is no version of GnuPG 2 for Windows. A port to Windows might eventually be done but as of now I see no reason for it. Shalom-Salam, Werner so, for an installation from scratch, can be installed the new 2.0 version to the place of the

Re: GnuPG 2.0

2006-11-13 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Aldert Hazenberg wrote: On Nov 13, 2006, at 4:28 PM, Werner Koch wrote: A port to Windows might eventually be done but as of now I see no reason for it. What is your reason for no windows port of 2.0 ? Is it a business reason ? Or

Re: GnuPG 2.0

2006-11-13 Thread Alphax
Aldert Hazenberg wrote: On Nov 13, 2006, at 4:28 PM, Werner Koch wrote: A port to Windows might eventually be done but as of now I see no reason for it. Hi Werner, What is your reason for no windows port of 2.0 ? Is it a business reason ? Or ideological ? As I understand,