gmane.comp.encryption.gpg.user

Re: Website link broken

2012-05-16T13:06:56

-----BEGIN PGP SIGNED MESSAGE-----

On 16/05/12 08:01, Brad Rogers wrote:
I just deleted my cache - it still works - very odd

David


- -- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of death. No
delusion.” https://linuxcounter.net/user/512854.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBT7OmcOJpqm7flRExAQGagQgAkoQ7UV7ciwwkmijBE7QH8eaJEDSoP1vL
VLRMOI0irtfMNCtvrR3VR3Ft8ZnZ4lONrGrVvQRw2NQJNxbM9XTDr5FOddb0gYXM
rEnJxGDvdgl2h8xKarTWKm9Cv2V4xlU8T85ISc9mML1z0QDnTKeksMlu2AhOxHAp
nqCCJilvsupxsfXyYUou5WXtG1abXIP1LKVNVECVk6VyVKZy4ZN4LeP+nThQHyN1
jZYbNMkbyc64U2mvdOs8Ev4fjbEJE3vsUsWDLxcM/w8swyltDb6iKy0AE3eGegJe
+OXpex6zYZrvAvoIFxdXQqJdT25it8DGsn01fYEXwQPAJMAeX2VDWQ==
=V1B3
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users< at >gnupg.org
http://lists.

Problem with libgcrypt

Paul Salters — 2012-05-16T08:13:18

Hi,

I am using libcurl to develop an appilication to do xml requests.
These requests are using HTTPS so the libgnutls and libgcrypt is used.
It uses multiple threads to do requests. Most of the time it runes
fine but sometimes I get the following error:

"ath.c:193: _gcry_ath_mutex_lock: Assertion '*lock == ((ath_mutex_t)"

What causes this?

I have read the documentation about thread safety and I have the
following lines in my code.

GCRY_THREAD_OPTION_PTHREAD_IMPL;

gcry_control (GCRYCTL_SET_THREAD_CBS, &gcry_threads_pthread);
gnutls_global_init();

Appreciate your help!

Paul Salters
The Netherlands

Re: Website link broken

yyy — 2012-05-16T06:47:17

----- Original Message ----- 
From: "MFPA" <expires2012< at >rocketmail.com>
To: "david< at >gbenet.com on GnuPG-Users" <gnupg-users< at >gnupg.org>
Sent: Wednesday, May 16, 2012 12:43 AM
Subject: Re: Website link broken




does not works from here, either

Re: Website link broken

Bernhard Kleine — 2012-05-16T07:08:47

Am Mittwoch, den 16.05.2012, 07:33 +0100 schrieb david< at >gbenet.com:
Well, I have never been to that link before and it is godaddy. What
about cleaning cache?

Bernhard
_______________________________________________
Gnupg-users mailing list
Gnupg-users< at >gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Website link broken

Brad Rogers — 2012-05-16T07:01:42

On Wed, 16 May 2012 07:33:12 +0100
"david< at >gbenet.com" <david< at >gbenet.com> wrote:

Hello david< at >gbenet.com,


I can confirm MFPA's (and the OP's) findings that the link goers to a
place holder.

Are you, possibly, seeing a locally cached version of that page?

Re: Website link broken

Бранко Мајић — 2012-05-16T07:47:53

Well, checking from Serbia - the domain is parked.

The link works, but points, well, to parked domain :)

Дана Wed, 16 May 2012 07:33:12 +0100
"david< at >gbenet.com" <david< at >gbenet.com> написа:

how to use samrtcard with PC/SC cardreader

Yang Hon-Jang — 2012-05-16T02:13:51

I am interested in NOT put private keys in disk. I like the idea, put
private keys in smartcard.

 How to use the Fellowship
Smartcard<http://www.gnupg.org/howtos/card-howto/en/smartcard-howto-single.html#id2504251>describe
how to use OpenPGP card with gpg. But in section 2.3.2,
PC/SC(Personal computer/Smart card), there are only two lines:


option to GnuPG.

My questions are:

1. If I use command

    gpg --disable-ccid

    I got message

    gpg: invalid option "--disable-ccid"

    (PS, I use GnuPG 2.0.17 in Windows 7)

   What is wrong?

2. Are GnuPG 2.0.17, Windows(Operation System), OpenPGP SmartCard
V2<http://shop.kernelconcepts.de/product_info.php?products_id=42>,EZ
100 PU USB PC/SC IC card reader compatible ?


Thanks.


<http://shop.kernelconcepts.de/product_info.php?products_id=42>


http://shop.kernelconcepts.de/product_info.php?products_id=42<http://shop.kernelconcepts.de/product_info.php?products_id=42%20>
_______________________________________________
Gnupg-users mailing list
Gnupg-users< at >gn

Re: Website link broken

2012-05-16T06:33:12

-----BEGIN PGP SIGNED MESSAGE-----

On 15/05/12 22:43, MFPA wrote:

How odd is that? I rechecked the link and it still works

David

- -- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of death. No
delusion.” https://linuxcounter.net/user/512854.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBT7NKKOJpqm7flRExAQHFTwgAodLomaeNIG2W51ZGnlgi3yScqNcAkqzn
5X1+BmAZicTNEkAFYnzdL5i7G0YTAmh8VreNWdZPp8niXVU2YaoDVPeb3RKdeamZ
tbBZaGrac17OCkWooh2Udpjf9KG7Fzj0nb9X6yV4ORiurZG3a6OY7uTx9yyfgkHH
avtbH2ji4IjiKCFRc7LLXqCFFzlKI+ZRHdhBx9zwrLKSaoV7SIGfQPD5wzFj0kYo
1lYcjyipthxJEpQGNNo7uCGNRKRC2XD2ffNMtUK3CD5HEPCEFAG3fH4cgoMaupwU
x1tGcbVhI6mRgEQ8k0bZF0qp1Cqy0LGW8a6FPV8Sil2Ht+FQiG2tog==
=ZQ7R
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users< at >gnupg.org
http://lists.gn

Re: Website link broken

MFPA — 2012-05-15T21:43:18

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi


On Tuesday 15 May 2012 at 9:21:13 PM, in
<mid:4FB2BAB9.4020102< at >gbenet.com>, david< at >gbenet.com wrote:



Not from here - I just visited http://xfmail.slappy.org/ and was
served a "domain parked" holding page.



- --
Best regards

MFPA                    mailto:expires2012< at >rocketmail.com

Wait. You think I'm right?
-----BEGIN PGP SIGNATURE-----

iQCVAwUBT7LOA6ipC46tDG5pAQqvMQQAyHfV3G5xQ94b5nfUS+3eThbxAAbot3Ks
ct7imvys177iPVrSNaBD3J0qivjX95G0W6xAxHXt+Uz1sGZX24qUr9zBj/kEDE//
5JIgl3bxg96pER2Au8/BF9Jsjv0RdifHfWpuj/pfI0ft0KKn7FKkBl/JzIbAfoKF
rsiXrpazpPk=
=mD5v
-----END PGP SIGNATURE-----

Re: Website link broken

2012-05-15T20:21:13

-----BEGIN PGP SIGNED MESSAGE-----

On 15/05/12 16:51, Prakash Sankar wrote:
It works now :)

David


- -- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of death. No
delusion.” https://linuxcounter.net/user/512854.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.16 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBT7K6ueJpqm7flRExAQEejAgAkt+1ncg7VhFIwkadm6jrQIuHDuFyE+52
k7kZ3KEdOYFDdbcCk6uXFf8IWjI1PTm/0b11ofcmm9s2WeGW6qqhOSCkNliBZNWx
EyrNSxYoMQc6evWP+mHUcvwnd3v5QehB1JUJ9s1qCVFQMHpOcbvb+I8fBrO/RNZ3
MwP5KGmlNF9BneJksU4+iwutt/8S0bVZbAjD2S4N7NFvE/mpHtBOkkCiMR+jcCFk
w2kr0Lz+lBdEbjguldrwPFlONTV4JXjFJ8bM8g8sqj/VO0VteKE13KP5OdVGWZoJ
CxeY+KfbbpwTQEAwJASub35ujkgftKSgF+FaDg5dYufQsE1rxxmT5w==
=GN7q
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users< at >gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-

Website link broken

Prakash Sankar — 2012-05-15T15:51:02

http://www.gnupg.org/related_software/frontends.html#mua

*XFmail <http://xfmail.slappy.org/>*

http://xfmail.slappy.org/

The link above is broken it points to godaddy page now.

Please fix or remove.

Thanks

Prakash
_______________________________________________
Gnupg-users mailing list
Gnupg-users< at >gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPG 1.4.x, 2.x, ECC, and portability

Avi — 2012-05-15T14:50:46

Thank you; I didn't see this in the manual. I'm loathe to change it
though as that probably affects many programs on the hosting computer,
and may cause many other programs to go a bit haywire.


Speaking for myself, I think I would prefer the latter to the former,
as I would prefer to have a Windows installation that is (as much as
possible) completely divorced from the hosting computer and results in
a GnuPG installation that is as "portable" as possible between trusted
computers. This would mean minimizing or eliminating any reference to
environment variable OR having the launch of the program/GUI setting
them temporarily each time if necessary. Allowing an option to have
the home and other helper directories configured as a subfolder of the
install directory on the install should be helpful as well.  What I
have now with 1.4.x is the ability to plug my stick into any trusted
computer, fire up Truecrypt, mount the encrypted drive, and use a GUI
to sign, encrypt, and decrypt the clipboard or files, manage

Re: GPG 1.4.x, 2.x, ECC, and portability

Werner Koch — 2012-05-15T09:33:54

On Mon, 14 May 2012 23:53, avi.wiki< at >gmail.com said:


The directory is determined by looking at CSIDL_COMMON_APPDATA.  It
seems you can change the value by changing the environment variable
APPDATA.  However, I am not sure whether this is a documented feature.

A quick test shows that a wrong value for APPDATA returns an error and
thus gnupg will use a value based on the actual modules directory.

What do you think of an environment variable to explicitly force the use
of the installation directory (i.e the USB stick).  Instead of an envvar
we could also check the presence of a marker file in the installation
directory, to disable all use of default locations.  Both things are
easy to implement.

I don't know how the USB stick approach works with the Outlook and
Explorer plugins - they need to have registry entries.


Shalom-Salam,

   Werner

Re: GPG 1.4.x, 2.x, ECC, and portability

Avi — 2012-05-14T21:53:21


Thank you, Werner.

I've tried installing GPG4Win to my USB stick, and I cannot get
anything to work, as I am not able to figure out how to us gpgconf to
switch sysconfdir to my stick's drive, and everything else is failing
due to not finding the corresponding drive on C: (which I do not want
to exist). Am I just missing something simple?

Thank you,

Avi

----
User:Avraham

pub 3072D/F80E29F9 1/30/2009 Avi (Wikimedia-related key) <avi.wiki< at >gmail.com>
   Primary key fingerprint: 167C 063F 7981 A1F6 71EC ABAA 0D62 B019 F80E 29F9

Re: GPG 1.4.x, 2.x, ECC, and portability

Werner Koch — 2012-05-14T21:19:03

On Mon, 14 May 2012 18:05, avi.wiki< at >gmail.com said:

Right, that is the current plan.  Maintaining two stable branches is
extremely time and thus cost intensive.  Given that it is hard to find
any financial funding for our work, we need to spend our time more
effective.  Consider that GnuPG-2 is more than 10 years old and 1.4 only
4 years older.  I consider 2.0 more matured than 1.4.


We try to make it as easy as possible.  In 2.1 there is even a way to
provide a passphrase to gpg-agent - without a need for Pinentry.



With gpgconf it is even easier to do this with 2.x.  There is no need
for a registry key for example.  Obviously you need to set GNUPGHOME if
you don't want to use the default home directory.


The major problem is not about writing the code in the first place, but
to maintain it for the next couple of years if not decades.


Salam-Shalom,

   Werner

GPG 1.4.x, 2.x, ECC, and portability

Avi — 2012-05-14T16:05:08

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

In one of the recent, longer, threads, it was my understanding
that Werner said that the 1.4.x branch of GnuPG will not be
updated to have ECC capabilities, and may eventually be "put
into runoff" as it were. Werner, may I request that you confirm
or refute that?

Assuming that is the case, it means those of us using 1.4.x need
to move to 2.x to use ECC. In and of itself that shouldn't be an
issue. What concerns me is that, and perhaps this is due solely
to ignorance, it appears to me that GnuPG 2.0 for Windows cannot
be installed in a solely portable fashion the way that 1.4.12
can. I do not wish to get into the debate about the benefits of
having ones GnuPG installation on a USB stick, keyloggers,
rootkits, and the overall safety of all of the above. If for
whatever reason there are people who wish to have a completely
self-contained Windows installation of GnuPG on a flashdrive
(and not one built-in like crypto drive, which cannot use ECC
now anyway) is the

Re: x509 and openGPG smartcard

Werner Koch — 2012-05-10T11:44:10

On Thu, 10 May 2012 13:29, simon< at >josefsson.org said:


There was some spare space on the new chips and thus the specs allow for
an optional field to store a certificate (or any other data) .  GnuPG 1.4
does not support it.


Salam-Shalom,

   Werner

Re: x509 and openGPG smartcard

Simon Josefsson — 2012-05-10T11:29:41


I thought OpenPGP cards didn't support storing X.509 certs?

/Simon

Re: x509 and openGPG smartcard

Werner Koch — 2012-05-10T11:09:48

On Wed,  9 May 2012 22:15, guyome< at >lechiennoir.net said:


I don't know.  I only implemented it once and never used.  There is no
need for it in GnuPG.  To debug it you should put 

  debug 2048
  debug 1024
  log-file /foor/bar/scd.log

into scdaemon.log and run 

  gpgconf --reload scdaemon

to restart scdaemon.

Take care: debug 2048 may also log your PIN.


Salam-Shalom,

   Werner

x509 and openGPG smartcard

Guillaume Lanquepin-Chesnais — 2012-05-09T20:15:05

Hello,

I've just bought a Gemalto USB Shell Token V2 and openGPG smartcard. I
successfully get it work on Ubuntu 12.04 (gnupgp 2.0.17) without any problem. However, I
can't store a x509 certificate on the smartcard.

I get a certificate from Cacert that I converted with gpgsm

gpgsm --import guyome.p12
gpgsm -o guyome.pem --export -a XXXXXX

Then I edit the smartcard 

gpg2 --card-edit

and I import the certificate on the smartcard

gpg/card> admin
Les commandes d'administration sont permises

gpg/card> writecert 3 < guyome.pem

Up to now, I did not get any error message. But If do

gpg/card> readcert 3 > test.pem
gpg: error reading certificate from card: Not Found

gpg/card> writecert 3 < guyome.pem
gpg: error writing certificate to card: General Erreur

It seems that I can't write the certificate to the smartcard.
Is it a bug or did I made a mistake? BTW, I get the same error on Fedora 16..

Regards,

Guillaume

Key in keyring signed but not valid?

Scott Lambdin — 2012-05-09T16:40:30

Good day:

             --list-sig shows that a certain key is signed by the private
key that signed all the other keys, but still --edit-key shows "Validity:
unknown"
Does anyone know how that can be?   While investigating, the key in one
keyring later turned to "Validity:  Full", seemingly without our issuing
any commands that would have caused it to change.  In another keyring, that
key remains "Validty:  Unknown."
--Scott