On Thu, 5 Jan 2017 21:07, pablo-gn...@duckdalbe.org said:
> I'm trying to write code to change the passphrase of a key without
> user-interaction that works with both, gpg 2.0 and gpg 2.1.
I would not invest too much time into 2.0; as stated on the website it
will reach end-of-life by the end
Hello,
I'm trying to write code to change the passphrase of a key without
user-interaction that works with both, gpg 2.0 and gpg 2.1.
For gpg 2.1 I'm using
'--pinentry-mode loopback --command-fd 0 --status-fd 2'
and an expect-style script (not a pretty concept, IMHO, but it works).
For gpg 2.0
Hi Teemu,
Teemu Likonen:
> Stephan Beck [2016-11-24 16:51:00Z] wrote:
>
>> A1) Install the monkeysphere package (1) that includes openpgp2ssh tool
>> A2) Export the secret subkey you'd like to use for ssh authentication
>> purposes and pipe it through openpgp2ssh
>> gpg2 --export-secret-subkeys
Oh indeed! I didn't catch it at first glance that you were referring to
that short moment between creating the file and chmod 0600!
I thought I missed something with secure file permissions. :-)
I only could say that I was "blinded by the light" you shed, but I won't
Thanks!
Stephan
Peter
On Thu, 24 Nov 2016 17:51, st...@mailbox.org said:
> Yes, --export-ssh-key has been introduced in gpg with release of version
> 2.1.11.
Unfortunately there is a regession in 2.1.16 which renders this command
unusable. 2.1.15 worked and we will fix the regression for 2.1.17.
Shalom-Salam,
On 25/11/16 14:36, Stephan Beck wrote:
> Would you please describe more in detail where (or in which way, in
> which use case) the window is left open?
Let me reuse a bit of quote from an earlier mail:
>>> A2) Export the secret subkey you'd like to use for ssh authentication
>>> purposes and
Stephan Beck [2016-11-24 16:51:00Z] wrote:
> A1) Install the monkeysphere package (1) that includes openpgp2ssh tool
> A2) Export the secret subkey you'd like to use for ssh authentication
> purposes and pipe it through openpgp2ssh
> gpg2 --export-secret-subkeys \
> --export-options
Hi,
Peter Lebbing:
> On 2016-11-24 16:59, Teemu Likonen wrote:
>> I believe that file ~/.gnupg/sshcontrol should contain
>> key's keygrip but how do I get the keygrip when there's no
>> --with-keygrip option in 2.0?
>
> I think the following:
>
> $ gpg-connect-agent
>> help keyinfo
> # KEYINFO
On 24/11/16 20:56, Peter Lebbing wrote:
> This is not true if you are on an NFS share, though!
I mean: if you're on an NFS share, or an a disk partition from which
things are shared over NFS. So if you're sharing /srv/export and you're
on /srv/somewhere/else, it's still not safe.
HTH,
Peter.
Stephan, thanks for helping out! I think I can improve a bit on one part
of it, though.
On 24/11/16 17:51, Stephan Beck wrote:
> A2) Export the secret subkey you'd like to use for ssh authentication
> purposes and pipe it through openpgp2ssh
> gpg2 --export-secret-subkeys \
> --export-options
On 2016-11-24 18:36, Peter Lebbing wrote:
keyinfo --list
No, that's wrong, scratch that. That will not work for OpenPGP keys
because those aren't handled by the agent in 2.0. Silly me.
I'm not sure you can add an OpenPGP auth subkey to the agent's SSH
support without resorting to external
On 2016-11-24 16:59, Teemu Likonen wrote:
I believe that file ~/.gnupg/sshcontrol should contain
key's keygrip but how do I get the keygrip when there's no
--with-keygrip option in 2.0?
I think the following:
$ gpg-connect-agent
help keyinfo
# KEYINFO [--[ssh-]list] [--data] [--ssh-fpr]
Hi Teemu,
Teemu Likonen:
> Keys with authentication capability can be used with ssh, and GnuPG
> 2.1's command --export-ssh-key will export the ssh public key. Right?
Yes, --export-ssh-key has been introduced in gpg with release of version
2.1.11.
To set the whole thing up, a few more steps are
Peter Lebbing [2016-11-24 16:04:42+01] wrote:
> On 24/11/16 15:27, Teemu Likonen wrote:
>> Unfortunately I have GnuPG 2.0.26 (as packaged in Debian 8). Can it be
>> told to export ssh public keys?
>
> I think 2.0 also supported:
>
> $ ssh-add -L
>
> to list all SSH keys known to the agent.
On 24/11/16 15:27, Teemu Likonen wrote:
> Unfortunately I have GnuPG 2.0.26 (as packaged in Debian 8). Can it be
> told to export ssh public keys?
I think 2.0 also supported:
$ ssh-add -L
to list all SSH keys known to the agent. ssh-add is part of the
openssh-client package.
HTH,
Peter.
--
Keys with authentication capability can be used with ssh, and GnuPG
2.1's command --export-ssh-key will export the ssh public key. Right?
Unfortunately I have GnuPG 2.0.26 (as packaged in Debian 8). Can it be
told to export ssh public keys?
--
/// Teemu Likonen - .-..
On 09/06/16 19:50, Peter Lebbing wrote:
> Of course, if you
> multi-display a single "screen" terminal session, it might go haywire as
> any X application would, since it would pick the DISPLAY from the
> "screen" session that started it.
I just realised this even happens with "regular" screen
be necessary. The only thing where you normally
need to watch out is with the SSH agent support, which has no means to
communicate invoking tty and graphical display. But when you're just
using gpg, it should do the correct thing out-of-the-box, and you need
no configuration for using gnupg (2.0.x)
Dear All,
I am looking for hints or best practices to seamlessly mix use of
GnuPG in the terminal and with frontends, in my case Enigmail in
Thunderbird.
I am on MacOS X (10.9.5 "Mavericks") with GnuPG installed through
MacPorts as my main machine and also quite often logged into other
Hello gpg Folks,
I downloaded the gnupg-2.0.20 files and the associated required lib
sources, including pth-2.0.7, today. The configure, make, make check,
and make install, all went well in this order:
libgpg-error-1.11
libassuan-2.1.0
libksba-1.3.0
libgcrypt-1.5.2
pth-2.0.7
and more clear picture of
the scenario.
Any help is greatly appreciated.
Thanks.
--
With Regards,
Ajay Kallur
http://old.nabble.com/file/p33740429/Sample%2BPGP%2Bmessage%2Bwith%2B2%2Bpgp%2Bblocks
Sample+PGP+message+with+2+pgp+blocks
--
View this message in context:
http://old.nabble.com/GnuPG
Dear Developer,
Here's a peculiar scenario, I have a file which has 2 pgp messages or
blocks embedded in a single file one below the other.
Can GPG 2.0 be able to decrypt both the blocks and concatenate the messages
inside same single file?
I have attached the sample PGP file for reference and
Hi,
some more inforrmation about this bug
On Fri, 23 Jul 2010 14:36, w...@gnupg.org said:
bug was found in GnuPG's GPGSM tool. It is likely that this bug is
exploitable by sending a special crafted signed message and having a
On a first view this might actually happen. However, after some
Realloc Bug with X.509 certificates in GnuPG
==
2010-07-23
Summary
===
While trying to import a server certificate for a CDN service, a segv
bug was found in GnuPG's GPGSM tool. It is likely
I hope there is someone who can help me with the install problems I'm having.
I'm trying to install on an AIX 5.3 box. Please CC me with any response. I'm
wondering if using an old version of gcc may be part of my problem. Thank you
for any help you can provide.
First I tried to install
Alon Bar-Lev wrote:
The users used IDEA algorithm in GnuPG-1.4, and are unable to use
their keys in GnuPG-2.0.
Do they /absolutely/ need to use GPG v2? If not, it's probably going to
be easier if they go back to using v1.4.x...
Ben
___
Gnupg-users
On 1/28/07, Benjamin Donnachie [EMAIL PROTECTED] wrote:
Do they /absolutely/ need to use GPG v2? If not, it's probably going to
be easier if they go back to using v1.4.x...
This is the easy way out :)
gpg2 should be backward compatible... I would like to make it work too... :)
Best Regards,
Alon Bar-Lev wrote:
Do they /absolutely/ need to use GPG v2? If not, it's probably going to
be easier if they go back to using v1.4.x...
This is the easy way out :)
It's the one the gnupg team recommend!
gpg2 should be backward compatible... I would like to make it work
too... :)
I
On Sun, 28 Jan 2007 18:22, [EMAIL PROTECTED] said:
This is the easy way out :)
gpg2 should be backward compatible... I would like to make it work too... :)
IDEA is not even supported by 1.4 - it is kind of coincidence that
there is a way to plugin the IDEA module ;-)
Thus there will be no
On Sun, Jan 28, 2007 at 07:33:15PM +, Benjamin Donnachie wrote:
Alon Bar-Lev wrote:
Do they /absolutely/ need to use GPG v2? If not, it's probably going to
be easier if they go back to using v1.4.x...
This is the easy way out :)
It's the one the gnupg team recommend!
gpg2 should
Hello,
Can anyone help some of our (Gentoo) users solving a migration issue they have?
http://bugs.gentoo.org/show_bug.cgi?id=159870
The users used IDEA algorithm in GnuPG-1.4, and are unable to use
their keys in GnuPG-2.0.
The libgcrypt was patched to enable IDEA algorithm.
Any help
On Tue, 28 Nov 2006 22:11, [EMAIL PROTECTED] said:
../jnlib/libjnlib.a ../common/libcommonpth.a ../gl/libgnu.a -lgcrypt
-lgpg-error -L/usr/local/libassuan-1.0.1/lib -lassuan-pth -L/usr/lib
-lpth -lnsl -L/usr/local/libgpg-error-1.4/lib -lgpg-error -ldl
-L/usr/lib -lpth -lnsl
Werner Koch wrote:
I can mitigate the problem by changing the order. However, these kinds
of problems are not completly solvable.
Well, even though it is not a perfect solution, it might be a good idea
to check the user-supplied library directories before /usr/lib.
As a quick hack, I suggest
On Wed, 29 Nov 2006 15:10, [EMAIL PROTECTED] said:
I'll attach a small patch for the configure script of GnuPG 2.0.1
which works for me.
But only for you. As soon as --ldflags returns a non-standard
directory it won't work.
Shalom-Salam,
Werner
Hi list,
I'm having trouble compiling the agent component of GnuPG 2.0 on a
Gentoo-based machine. I could not find anything about the error message
(please see attachment) in the FAQ or by searching the Net, so I hope
that the members of this mailing list are able to help.
If you need any
On Tue, 28 Nov 2006 17:09, [EMAIL PROTECTED] said:
I'm having trouble compiling the agent component of GnuPG 2.0 on a
Gentoo-based machine. I could not find anything about the error message
Please try 2.0.1 which I released this evening.
Salam-Shalom,
Werner
Werner Koch wrote:
Please try 2.0.1 which I released this evening.
I tried, but unfortunately version 2.0.1 won't compile either.
--
Mit freundlichen Grüßen / Sincerely
Dipl. Inform. Ralph Seichter
gcc -I/usr/local/libgpg-error-1.4/include -g -O2 -Wall -Wno-pointer-sign -o
gpg-agent
On 11/14/06, Werner Koch [EMAIL PROTECTED] wrote:
As soon as there is a financial backing, a real port to Windows can be
done.
Shalom-Salam,
Werner
Would windows users be willing to fund development by contribution?
That way, once a threshold of money has been received then someone
[EMAIL PROTECTED] escribe:
can gnupg 2.o be set up in cygwin using cygwin's gcc compiler ?
Haven't you tried?
Cordially, Ismael
--
Ismael Valladolid Torres Il est vain de pleurer sur l'esprit, il suffit
de travailler pour lui. Albert Camus
On Tue, Nov 14, 2006 at 09:46:53AM +0100, Sven Radde wrote:
Summarizingly, I hope that there will be a Windows version.
If nothing else, there should be a clear commitment as to the future of
1.4.x (i.e. not only maintaining but active further development) to
avoid the feeling that Windows
On Tue, Nov 14, 2006 at 09:46:53AM +0100, Sven Radde wrote:
Summarizingly, I hope that there will be a Windows version.
maybe it can be compiled on cygwin ?
i have gnupg 1.4.5 on windows, and 1.4.2.2 on cygwin
(a 'full' install on cygwin includes gnupg, gcc, perl and python)
and both gnupg
On Thu, 16 Nov 2006 17:19, [EMAIL PROTECTED] said:
Here is your clear commitment to the future of 1.4.x. The numbering
between 1.4 and 2.0 is perhaps unfortunate in that it implies that 2.0
replaces 1.4. It doesn't. They are two different programs that serve
AFAICS, Apache does it the same
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
John W. Moore III wrote:
The Bottom Line is that nothing is /missing/ in 1.4.x Builds. GPGshell
WinPT will *not* work on Linux so GPG-Agent is the Linux version of a
'Shell' for easy manipulation of GnuPG within Linux.
_but_ gpg-agent also
Hello!
The GNU project is pleased to announce the availability of a new
stable GnuPG release: Version 2.0.0.
The GNU Privacy Guard (GnuPG) is GNU's tool for secure communication
and data storage. It can be used to encrypt data, create digital
signatures, help authenticating using Secure
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
I received the notice that 2.0 has been released. I'm currently using
GnuPG 1.4.5, which I downloaded as part of the Gnu for Windows
package, and GPGshell for Windows 3.52. Can I upgrade to v2.0 without
abandoning GPGshell? Do I need to uninstall
2006/11/13, Werner Koch [EMAIL PROTECTED]:
There is no version of GnuPG 2 for Windows. A port to Windows might
eventually be done but as of now I see no reason for it.
Shalom-Salam,
Werner
so, for an installation from scratch, can be installed the new 2.0
version to the place of the
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Aldert Hazenberg wrote:
On Nov 13, 2006, at 4:28 PM, Werner Koch wrote:
A port to Windows might
eventually be done but as of now I see no reason for it.
What is your reason for no windows port of 2.0 ?
Is it a business reason ? Or
Aldert Hazenberg wrote:
On Nov 13, 2006, at 4:28 PM, Werner Koch wrote:
A port to Windows might
eventually be done but as of now I see no reason for it.
Hi Werner,
What is your reason for no windows port of 2.0 ?
Is it a business reason ? Or ideological ?
As I understand,
48 matches
Mail list logo