RE: Multiple Subkeys/UIDs

2005-03-21 Thread Grimes, Dean
>That makes things very difficult, unfortunately. Given those >restrictions, I think your best bet is to have some sort of "check >out" process when someone needs to read a file. At that point, the >file is decrypted by the master key and then re-encrypted to that >persons key. Your local policy

gpg: WARNING: unsafe ownership on configuration file "/home/jason/.gnupg/gpg.conf"

2005-03-21 Thread Jason Wallwork
Received the warning message: gpg: WARNING: unsafe ownership on configuration file "/home/jason/.gnupg/gpg.conf" after running gpg --version as root. I don't get the warning if I run the same command as a regular user. Here's the permissions on the file: [EMAIL PROTECTED]:~> ls -l .gnupg/gpg.c

Re: signature level

2005-03-21 Thread Atom Smasher
On Mon, 21 Mar 2005, Janusz A. Urbanowicz wrote: How is signature level specification done in 1.4+? --ask-cert-level previously this was on by default. apparently it caused too much confusion, so now you have to specify it if you want it. -- ...atom _

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-21 Thread David Shaw
On Tue, Mar 22, 2005 at 12:18:03AM +0100, Carlo Luciano Bianco wrote: > Il /21 mar 2005/, *David Shaw* ha scritto: > > > On Sun, Mar 20, 2005 at 04:18:35PM +0100, Carlo Luciano Bianco wrote: > > > >> 1) It seems that, when running a subprocess like a gpgkeys_*.exe, gpg.exe > >> does not pass it t

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-21 Thread Carlo Luciano Bianco
Il /21 mar 2005/, *David Shaw* ha scritto: > On Sun, Mar 20, 2005 at 04:18:35PM +0100, Carlo Luciano Bianco wrote: > >> 1) It seems that, when running a subprocess like a gpgkeys_*.exe, gpg.exe >> does not pass it the environment variables. Most notably, it does not pass >> the system %PATH%. Bot

Re: signature level

2005-03-21 Thread David Shaw
On Mon, Mar 21, 2005 at 10:52:07PM +0100, Janusz A. Urbanowicz wrote: > How is signature level specification done in 1.4+? By default, GnuPG does not prompt you for a signature level. If you want to be prompted, use '--ask-cert-level'. If you want to specify, but not be prompted each time, use '

signature level

2005-03-21 Thread Janusz A. Urbanowicz
How is signature level specification done in 1.4+? Alex -- mors ab alto 0x46399138 ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

RE: GPGee - GPG Explorer Extension (context menu) front end

2005-03-21 Thread Kiefer, Sascha
Well, It would be nice to have a control to select the keyring location. I keep my keys on a memory stick, so i'm not able to use your tool! --esskar > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kurt Fitzner > Sent: Montag, 21. März 2005 23:19 >

Re: Multiple Subkeys/UIDs

2005-03-21 Thread David Shaw
On Mon, Mar 21, 2005 at 04:25:07PM -0600, Grimes, Dean wrote: > >You mention that all data enters the central location encrypted, but is > then decrypted ("for processing") and then re-encrypted. > > The processing script would most likely decrypt the file piping the output > into the processing p

RE: Multiple Subkeys/UIDs

2005-03-21 Thread Grimes, Dean
>You mention that all data enters the central location encrypted, but is then decrypted ("for processing") and then re-encrypted. The processing script would most likely decrypt the file piping the output into the processing program. Once processing is complete, the script would then mv/cp the alr

GPGee - GPG Explorer Extension (context menu) front end

2005-03-21 Thread Kurt Fitzner
I've written a new Windows explorer extension front end for gpg. I know that Timo has winfpse, and somewhere out there is gpgsx. But as I've never been able to find gpgsx nor get winfpse to work, I figured I'd take a stab at it. I've always wanted an excuse to write an Explorer extension anyways

Re: new (2005-03-20) keyanalyze results (+sigcheck)

2005-03-21 Thread Jason Harris
On Mon, Mar 21, 2005 at 08:21:43AM +, Neil Williams wrote: > On Sunday 20 March 2005 9:50 pm, Jason Harris wrote: > > New keyanalyze results are available at: > > > > http://keyserver.kjsl.com/~jharris/ka/2005-03-20/ > > Jason, I've been meaning to ask you this for ages. In the analysis rep

Re: 1.4.0a won't retrieve key from keyserver?

2005-03-21 Thread David Shaw
On Wed, Mar 16, 2005 at 10:32:51AM -0500, Jason Markley wrote: > David, > >Sorry to bring this back up when it's supposed to be fixed, but with > 1.4.1 I'm still having the same issue as before. Do you know what bug # > it was specifically that was 'fixed'? Thanks. I'm not sure if it ever

Re: Multiple Subkeys/UIDs

2005-03-21 Thread David Shaw
On Mon, Mar 21, 2005 at 01:28:30PM -0600, Grimes, Dean wrote: > Is this possible to do with GnuPG? It wise to do something like this? Is > there anyone else besides me who has this situation or one similar? If so, > how did you/they solve the problem? Any help would be greatly appreciated. There

Multiple Subkeys/UIDs

2005-03-21 Thread Grimes, Dean
I have been searching the mail archives for a while but have not yet found any discussion related to the situation I have. I'm new to GnuPG and data encryption in general so if some of my ideas or thoughts go completely against common sense then. Anyway here is my situation. I have about 300 r

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-21 Thread David Shaw
On Sun, Mar 20, 2005 at 04:18:35PM +0100, Carlo Luciano Bianco wrote: > 1) It seems that, when running a subprocess like a gpgkeys_*.exe, gpg.exe > does not pass it the environment variables. Most notably, it does not pass > the system %PATH%. Both gpg.exe and gpgkeys_*.exe depends on many dlls >

Re: Retaining expired sigs

2005-03-21 Thread David Shaw
On Mon, Mar 21, 2005 at 01:41:46PM -0500, Jason Harris wrote: > As you seem to have concluded, that fact takes precedence in my > logic, and as I have concluded, it seems to take no precedence in > yours. I can only conclude that we are talking completely past one another. You do seem to be very

Re: Retaining expired sigs

2005-03-21 Thread Jason Harris
On Sun, Mar 20, 2005 at 11:36:42PM -0500, David Shaw wrote: > On Sun, Mar 20, 2005 at 11:07:50PM -0500, Jason Harris wrote: > > I really don't think it is worth trying to protect against these > > scenarios. A user can simply remove any non-revocable sigs they > > don't want in their local keyri

Re: Question about ultimate trust

2005-03-21 Thread David Shaw
On Sun, Mar 20, 2005 at 01:12:33PM +0800, Zuxy wrote: > Hi List, > > Not until recently did I notice that I can trust any key ultimately, > even those without secret part. Isn't ultimate trust expected to be > assigned exclusively to my own keys? Not necessarily. You can set ultimate trust to an

Re: gpg over ssh...

2005-03-21 Thread Atom Smasher
On Mon, 21 Mar 2005, Gerhard Siegesmund wrote: Almost. :-) But this is the other way round. I want to call gpg from the other server to decrypt something. I have the feeling, that it is not possible to send something for decryption to another server. This would have been a great feature. Imagine

Re: Possable bug with winpt-0.9.90rc1

2005-03-21 Thread David Vallier
Zuxy wrote: > On Sun, 20 Mar 2005 20:00:41 -0700, David Vallier > <[EMAIL PROTECTED]> wrote: > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> Recently I tried signing a file using winpt-0.9.90rc1 and right >> after words I get a "box" popping up saying what? with 2 5-6 >> digit numbers sep

Re: gpg over ssh...

2005-03-21 Thread Gerhard Siegesmund
Hello Atom Smasher > this seems to work for me: > $ ssh [EMAIL PROTECTED] 'cat file1' | gpg | ssh [EMAIL PROTECTED] 'cat - > > file2' > note the quotes. > it reads an encrypted file (file1) from the server, decrypts it locally > and writes the decrypted data back to a file (file2) on the serve

Re: new (2005-03-20) keyanalyze results (+sigcheck)

2005-03-21 Thread Neil Williams
On Sunday 20 March 2005 9:50 pm, Jason Harris wrote: > New keyanalyze results are available at: > > http://keyserver.kjsl.com/~jharris/ka/2005-03-20/ Jason, I've been meaning to ask you this for ages. In the analysis report, at the very tail, I get: 13 hops: 2 Farthest keys (13 hops): 5

Re: Possable bug with winpt-0.9.90rc1

2005-03-21 Thread Timo Schulz
On Sun Mar 20 2005; 20:00, David Vallier wrote: > Recently I tried signing a file using winpt-0.9.90rc1 and right after > words I get a "box" popping up saying what? with 2 5-6 digit numbers > separated by a slash and what appears to be a progress bar below that, Yes, this is a well known problem