Re: 1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread Charly Avital
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 John W. Moore III wrote the following on 4/5/06 7:13 PM: [...] > Had you chosen to 'save' the changes it would have appeared Green when I > first Opened this Post. My suggestion would be to go ahead and 'save' > the changes and rest comfortably tha

Re: 1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread David Shaw
On Wed, Apr 05, 2006 at 07:47:12PM -0400, [EMAIL PROTECTED] wrote: > the key i originally wrote in about, > is an older (but still v4) rsa key and rsa signing subkey > and i couldn't get it to cross-certify > > can others try this out on any older PGP-generated keys they might > have, > and see

Re: pka-lookups

2006-04-05 Thread David Shaw
On Wed, Apr 05, 2006 at 10:56:13AM -0400, John W. Moore III wrote: > Throughout the 'snapshot' phase of 1.4.3 this ability was turned OFF by > default. With the release of 1.4.3 stable and the availability of > cross-certification and pka-lookup now widely available, will the > features once defau

Re: 1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread David Shaw
On Wed, Apr 05, 2006 at 06:07:18PM -0400, Charly Avital wrote: > I have chosen to quit without saving any changes, because the truth is I > do not fully understand what the change is, and what it would do to my > key and/or to my signing subkey. http://www.gnupg.org/faq/subkey-cross-certify.html

1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread vedaal
Charly Avital shavital at mac.com wrote on Thu Apr 6 00:07:18 CEST 2006 : >When I tried that, I was prompted to enter my passphrase after a row showing that my signing subkey was selected: >But when I Quit, I am prompted to save changes: hmmm, ok, tried this again, same result as before, the

Re: 1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Charly Avital wrote: > But when I Quit, I am prompted to save changes: > -- > Command> quit > Save changes? (y/N) n > Quit without saving? (y/N) y > -- > > I have chosen to quit without saving any changes, because the truth

keytocard doesn't move key

2006-04-05 Thread Hartmut Henkel
Hi, using an SCR335 card reader with gnupg 1.4.3 under debian-sarge AMD64 i can do gpg --card-edit > generate > list which generates new keys on the smartcard fine and puts them also into file secring.gpg. But then trying to move the secret key to the smartcard by gpg --edit-key Befehl> toggle

Automated Decryption via Script Running Setuid

2006-04-05 Thread John M Church
Searched the archives back through Oct. '05 and didn't see a solution to my problem... Bottom line to problem: If a script running setuid as userA but called by userB contains a GPG command, GPG responds with userB information instead of userA. I have a perl script 'parseMail_andSubmit_toDB.pl

Re: 1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread Charly Avital
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 [EMAIL PROTECTED] wrote the following on 4/5/06 3:50 PM: > what is the syntax needed to use the cross-certify > to have a signing subkey sign the master? > > i tried cross-certify with --edit-key > and got no response > (not even the polite custom

1.4.3 // proper syntax for --edit-key cross-certify ?

2006-04-05 Thread vedaal
what is the syntax needed to use the cross-certify to have a signing subkey sign the master? i tried cross-certify with --edit-key and got no response (not even the polite customary error message ;-) ) here is the command and gpg output: $ gpg --edit-key 0x6A589A97 gpg (GnuPG) 1.4.3; Copyright

Re: GnuPG - where is the .exe file???

2006-04-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 [EMAIL PROTECTED] wrote: > Thanks for your help! > > Did you download GnuPG 1.4.3 from > http://www.gnupg.org/(en)/download/index.html? > > Even searching my computer does not find that .exe file. Perhaps you might look under C:\GnuPG You could

Re: GnuPG - where is the .exe file???

2006-04-05 Thread Ramprasad B
--- joeking <[EMAIL PROTECTED]> wrote: > I then have to add the GnuPG executable path in Enigmail so that they work > together. > My problem is finding GnuPG.exe. It doesn't seem to be in my GnuPG folder. I downloaded today and installed gnupg. The gpg.exe guy was at -> C:\Program Files\GNU\Gnu

Re: GnuPG - where is the .exe file???

2006-04-05 Thread info
Thanks for your help! Did you download GnuPG 1.4.3 from http://www.gnupg.org/(en)/download/index.html? Even searching my computer does not find that .exe file. On 5 Apr 2006 at 8:07, Ramprasad B wrote: > --- joeking <[EMAIL PROTECTED]> wrote: > > > I then have t

Re: GnuPG - where is the .exe file???

2006-04-05 Thread Ramprasad B
--- joeking <[EMAIL PROTECTED]> wrote: > I then have to add the GnuPG executable path in Enigmail so that they work > together. > My problem is finding GnuPG.exe. It doesn't seem to be in my GnuPG folder. I downloaded today and installed gnupg. The gpg.exe guy was at -> C:\Program Files\GNU\Gnu

Re: GnuPG - where is the .exe file???

2006-04-05 Thread info
I found my problem - I did not download Windows version! I am an idiot. You are a great person for helping a stranger. On 5 Apr 2006 at 9:30, Ramprasad B wrote: > > [EMAIL PROTECTED] wrote: > > > Did you download GnuPG 1.4.3 from > > http://www.gnupg.org/(en)/download/index.html? > > yep. >

Re: GnuPG - where is the .exe file???

2006-04-05 Thread joeking
Forgot to say I am using Windows. And it helps to download the Windows version . . . -- View this message in context: http://www.nabble.com/GnuPG---where-is-the-.exe-file--t1399921.html#a3768339 Sent from the GnuPG - User forum at Nabble.com. ___ Gnu

OpenPGP card: What RSA problems? Why not for key signing?

2006-04-05 Thread Felix E. Klee
I consider creating a new master key: My old one wasn't stored securely in the past and it has been rarely used. This new key I want to generate on a system with a temporary fresh LINUX install and upload it to two Smartcards (one is for backup). Now, the only thing that's preventing me from doin

Re: dns cert support

2006-04-05 Thread David Shaw
On Wed, Apr 05, 2006 at 03:18:31PM +0200, Peter Palfrader wrote: > On Wed, 05 Apr 2006, David Shaw wrote: > > > On Wed, Apr 05, 2006 at 12:30:42PM +0200, Peter Palfrader wrote: > > > > > I notice that if I have both, a IPGP and a PGP CERT RR that GnuPG fails > > > to import the key some of the ti

GnuPG - where is the .exe file???

2006-04-05 Thread joeking
I am trying to set up secure email encryption using Thunderbird, Enigmail and GnuPG. I have everything in place bar GnuPG. I downloaded it and extracted it. I then have to add the GnuPG executable path in Enigmail so that they work together. My problem is finding GnuPG.exe. It doesn't seem to

pka-lookups

2006-04-05 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Throughout the 'snapshot' phase of 1.4.3 this ability was turned OFF by default. With the release of 1.4.3 stable and the availability of cross-certification and pka-lookup now widely available, will the features once defaulted to off be defaulted t

Re: gpg-zip

2006-04-05 Thread vedaal
On Wed, 05 Apr 2006 05:23:40 -0400 [EMAIL PROTECTED] wrote: >Send Gnupg-users mailing list submissions to > gnupg-users@gnupg.org > >Message: 6 >Date: Tue, 4 Apr 2006 23:47:35 -0700 (PDT) >From: Arild "Bjørk" <[EMAIL PROTECTED]> >Subject: gpg-zip? >* Added "gpg-zip", a program to crea

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Wed, 05 Apr 2006, David Shaw wrote: > On Wed, Apr 05, 2006 at 12:30:42PM +0200, Peter Palfrader wrote: > > > I notice that if I have both, a IPGP and a PGP CERT RR that GnuPG fails > > to import the key some of the time: > > [..] > > > } ;; ANSWER SECTION: > > } peter.palfrader.org.43200

Re: dns cert support

2006-04-05 Thread David Shaw
On Wed, Apr 05, 2006 at 12:30:42PM +0200, Peter Palfrader wrote: > I notice that if I have both, a IPGP and a PGP CERT RR that GnuPG fails > to import the key some of the time: [..] > } ;; ANSWER SECTION: > } peter.palfrader.org.43200 IN CERT6 0 0 > FFsAyW1dVK7hIGuvhN56r26UwJx/ >

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Tue, 04 Apr 2006, Peter Palfrader wrote: > On Mon, 03 Apr 2006, Werner Koch wrote: > > > * New auto-key-locate option that takes an ordered list of methods > > to locate a key if it is not available at encryption time (-r or > > --recipient). Possible methods include "cert" (u

Re: gpg-zip?

2006-04-05 Thread Alphax
Werner Koch wrote: > On Tue, 4 Apr 2006 23:47:35 -0700 (PDT), Bjørk said: > >> I've searched the manual and the installation path for gnupg for >> Windows and I can't find the program or find it mentioned in the >> manual. Why isn't it included in the Windows version? > > Because it won't work

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Wed, 05 Apr 2006, Werner Koch wrote: > On Wed, 5 Apr 2006 10:02:28 +0200, Peter Palfrader said: > > > + const char *tmp = fpr; > > + while (*tmp) > > + { > > + if (isxdigit(*tmp)) > > Will segv on many non-glibc systems if you pass non-ascii characters > to it. Never ever use

Re: dns cert support

2006-04-05 Thread Werner Koch
On Wed, 5 Apr 2006 10:02:28 +0200, Peter Palfrader said: > + const char *tmp = fpr; > + while (*tmp) > + { > + if (isxdigit(*tmp)) Will segv on many non-glibc systems if you pass non-ascii characters to it. Never ever use isfoo functions without additional checks. Salam-Sha

Re: gpg-zip?

2006-04-05 Thread Werner Koch
On Tue, 4 Apr 2006 23:47:35 -0700 (PDT), Bjørk said: > I've searched the manual and the installation path for gnupg for > Windows and I can't find the program or find it mentioned in the > manual. Why isn't it included in the Windows version? Because it won't work with Windows. It requires a B

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Tue, 04 Apr 2006, David Shaw wrote: > > Also, is there a tool that produces a snippet which is ready for > > inclusion into a zone file anywhere? Something similar to ssh-keygen > > for SSHFP RRs: > > [EMAIL PROTECTED]:~$ ssh-keygen -r galaxy -f /etc/ssh/ssh_host_rsa_key -g > > galaxy IN T