Re: GnuPG Large File Issues - Windows

2005-09-03 Thread Werner Koch
On Fri, 2 Sep 2005 12:32:36 -0400, Jeffrey Tadlock said:

> 'gpg --encrypt-files -r "System Administrator" -z 0
> '

I recall that I once tested it and it used to work.  However it is a
long time ago so no guarantee.  My current test machine has not enough
space to run a test right now.

What will always work is to use

  gpg --encrypt-files -r "System Administrator" -z 0 < FILENAME > FILENAME.GPG

Note the '<' and '>'.  Using redirection gpg won't know anything about
the file seize and simply encrypt everything coming in on the stdin to
stdout.  Decryption work similar.


Shalom-Salam,

   Werner


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP card and gpg-agent --enable-ssh-support

2005-09-03 Thread Werner Koch
On Sat, 03 Sep 2005 01:48:30 +0200, Andreas Liebschner said:

> But it still asks me the actual password for the user, not the pin or
> the passphrase of my gpg key. So I thought I should have added some

What does 

  ssh-add -l

give?  You should see the fingerprint of the card's key as well as
the card's number.  Note that there isno actual need for gpgkey2ssh; I
simply do

  ssh-add -L

which gives me the public key directly from the card.

To better debug what's going on, the first thing you should do is to
run

  ssh -v host

this will show you what keys are offered to the server and whether
they worked.

> Also, I noticed gpgkey2ssh will always produce a ssh-rsa key, even if I
> pass it the CS or the E key, is this normal?

Yes.


Salam-Shalom,

   Werner


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP Card

2005-09-03 Thread Alon Bar-Lev

Hello Werner,




May I understand that you agree that gpg-agent should support PKCS#11
as a mean to interact with cryptographic tokens?



No.




I now completely understand your position, and know that I 
have no other arguments left to try and defend my position...


I am sorry if I was too harsh during this discussion, it hurts 
to see people inventing standards of their own thus limiting 
the usage of their own great software.


I want to thank you for this discussion.

Best Regards,
Alon Bar-Lev.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP card and gpg-agent --enable-ssh-support

2005-09-03 Thread Andreas Liebschner
Werner Koch wrote:
> On Sat, 03 Sep 2005 01:48:30 +0200, Andreas Liebschner said:
>  
>>But it still asks me the actual password for the user, not the pin or
>>the passphrase of my gpg key. So I thought I should have added some
> 
> What does 
>   ssh-add -l
> 
> give?  You should see the fingerprint of the card's key as well as
> the card's number.  Note that there isno actual need for gpgkey2ssh; I
> simply do
> 
>   ssh-add -L
> 
> which gives me the public key directly from the card.

Oh that's true, it works.. I used gpgkey2ssh because I saw a post from
may where you were talking about creating such a tool

>>Also, I noticed gpgkey2ssh will always produce a ssh-rsa key, even if I
>>pass it the CS or the E key, is this normal?
>  
> Yes.

Okay.

Well thank you, it's working just fine!

-- 
Andreas Liebschner <[EMAIL PROTECTED]>

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: OpenPGP Card

2005-09-03 Thread Werner Koch
On Sat, 03 Sep 2005 13:05:50 +0300, Alon Bar-Lev said:

> I am sorry if I was too harsh during this discussion, it hurts to see
> people inventing standards of their own thus limiting the usage of
> their own great software.

No problem.

> I want to thank you for this discussion.

Its always good to discuss things, it helps to get to new ideas or to
reconder things.


Shalom-Salam,

   Werner


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


RE: GnuPG Large File Issues - Windows

2005-09-03 Thread Jeffrey Tadlock
-Original Message-
From:   Werner Koch [mailto:[EMAIL PROTECTED] Sat 9/3/2005 2:56 AM
>What will always work is to use
>
>  gpg --encrypt-files -r "System Administrator" -z 0 < FILENAME > >FILENAME.GPG
>
>Note the '<' and '>'.  Using redirection gpg won't know anything about
>the file seize and simply encrypt everything coming in on the stdin to
>stdout.  Decryption work similar.

First apologies for whatever mangling Outlook Web Access does to this email.

I tried the command line above on a smaller file (which has been encrypting and 
decrypting with no issues) and received the following error:

gpg: input line 1 too long or missing LF

Am I typing something wrong?  Here is what I typed:

gpg --encrypt-files -r "System Administrator" -z 0 < sql-db.bak > sql-db.gpg

The files I am trying to encrypt/decrypt are Microsoft SQL Backup flat files 
(DB dumps).

Thanks again!
Jeffrey

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Lost Private Key

2005-09-03 Thread Dan Mundy
Thanks for your advice all... i will generate a revocation cert and
backup everything now. thanks!
Dan


signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Transparent keyboards

2005-09-03 Thread Oskar L.
Hi,

Can anyone recommend a transparent keyboard, or any kind of keyboard witch
makes it easy to check that a keylogger has not been installed inside
whilst you were away. I only found this one:
http://www.directron.com/kb603cl.html

Oskar

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Transparent keyboards

2005-09-03 Thread Jean-David Beyer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Oskar L. wrote:
> Hi,
> 
> Can anyone recommend a transparent keyboard, or any kind of keyboard witch
> makes it easy to check that a keylogger has not been installed inside
> whilst you were away. I only found this one:
> http://www.directron.com/kb603cl.html
> 
If I were going to put a keylogger in a computer, I would not do it in the
keyboard. Why bother. Put in inside the box; have it email a report every
time a newline character is typed, or queue it up until next time the
machine is on line.

- --
  .~.  Jean-David Beyer  Registered Linux User 85642.
  /V\  PGP-Key: 9A2FC99A Registered Machine   241939.
 /( )\ Shrewsbury, New Jerseyhttp://counter.li.org
 ^^-^^ 20:45:00 up 80 days, 14:41, 3 users, load average: 4.09, 4.16, 4.09
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDGkRePtu2XpovyZoRAkVwAJ9GEknXpQ8k0BqiTPHLSn10DCpzpgCgsFOS
8IEEwDeVgheni/jHVZWHi1w=
=SErb
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users