Re: Design of a Modern Keyserver Network

2025-01-29 Thread Jakob Bohm via Gnupg-users
I wonder if removing the UID information from a key is enough to be forgotten (vs the entire key). (Disclaimer: I am *not* a lawyer) I believe it should be enough to satisfy the right to be forgotten. According to Article 4(1) of the GDPR, "‘personal data’ means any information relating to an

Re: Question on Kyber Encryption (Key Gen)

2024-11-01 Thread Jakob Bohm via Gnupg-users
On 10/29/2024 10:05 AM, Werner Koch via Gnupg-users wrote: Hi! you should really set aside problems wit the distribution and use the speedo variant to build eberthing. This is somewhat similar to an AppImage. From the README: To quickly build all required software without installing it, th

Re: Error: Bad length of salt (32) for AES when importing a p12 certificate

2024-09-20 Thread Jakob Bohm via Gnupg-users
Dear Nils, Given the error message in the subject line above, the step to reproduce may be to pass 32 instead of 64 to the openssl command that makes the test certificate. Otherwise, look for a command that can dump out the formatting details of the (non-distributable) problematic pkcs12 fil

Re: Text (non-binary) keyring format

2024-09-16 Thread Jakob Bohm via Gnupg-users
On 2024-09-13 13:39, Werner Koch via Gnupg-users wrote: Hi! On Thu, 12 Sep 2024 13:28, Alejandro Colomar said: I have my ~/.gnupg keyring under git source control, which helps creating and updating backups, and also having a history of the changes. We actually moved to an SQL database to spee

Re: [Feature request] Please make it easier to check success/failure from scripts

2024-09-16 Thread Jakob Bohm via Gnupg-users
On 2024-09-13 16:42, Werner Koch wrote: Hi! GnuPG 2.5.1 has the option --assert-signer and 2.4.6 will have this option as well: --assert-signer fpr_or_file This option checks whether at least one valid signature on a file has been made with the specified key. The key is e

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-09-04 Thread Jakob Bohm via Gnupg-users
On 2024-09-02 09:00, Werner Koch via Gnupg-users wrote: On Sat, 31 Aug 2024 18:29, T. S. said: either because of the -BEGIN PGP SIGNED MESSAGE- strings, or because the unknown attachments in MIME message. Don't use those legacy inline PGP encryption. Use PGP/MIME, a 28 year old standa

Re: Signing (and Encrypting) Mails with gpg like DKIM

2024-09-04 Thread Jakob Bohm via Gnupg-users
On 2024-09-01 10:07, Henning Follmann wrote: On Sep 1, 2024, at 02:18, Stuart Longland via Gnupg-users wrote: [Re-send with correct from: address… apologies to the moderators for the noise] On 1/9/24 15:55, Marco Moock via Gnupg-users wrote: Is there a limit for DNS records? In theory, p

[Feature request] Please make it easier to check success/failure from scripts

2024-08-27 Thread Jakob Bohm via Gnupg-users
Dear GnuPG team, According to the documentation for the version I have received from Debian, scripts that wish to check for success failure of decryption and/or signature validation done by invocation of gpg/gpgv/gpgsm, the script is currently required to set up a "status-fd", then check the

Re: ftp down

2024-08-23 Thread Jakob Bohm via Gnupg-users
On 2024-08-23 06:27, Ineiev via Gnupg-users wrote: On Thu, Aug 22, 2024 at 02:01:15PM +0200, Björn Persson wrote: Those who already have GPG and the release-signing keys can verify the next version of GPG that way. To anyone who doesn't already have GPG, HTTPS is the best integrity protection th

Re: sopv-gpgpv: an implementation of the verification-only subset of the Stateless OpenPGP CLI using gpgv as a backend

2024-08-06 Thread Jakob Bohm via Gnupg-users
On 2024-08-06 13:28, andrewg wrote: On 2024-08-06 10:32, Jakob Bohm via Gnupg-users wrote: For issues such as the above, the proper script-friendly solution is to enhance gpgv itself with command line options to specify the desired trust requirements.  For the multi-signer scenario above, an

Re: sopv-gpgpv: an implementation of the verification-only subset of the Stateless OpenPGP CLI using gpgv as a backend

2024-08-06 Thread Jakob Bohm via Gnupg-users
On 2024-08-05 20:08, Björn Persson wrote: Daniel Kahn Gillmor via Gnupg-users wrote: On Mon 2024-07-29 15:47:09 -0400, Todd Zullinger via Gnupg-users wrote: Using /usr/lib/rpm/redhat/gpgverify -- which is a small shell script wrapper for gpgv -- avoids new dependencies and produces quite readab

Re: How can I have gpg pause to receive its passphrase, before it starts outputing decrypt to stdout?

2024-03-21 Thread Jakob Bohm via Gnupg-users
On 2024-03-19 00:01, Bee via Gnupg-users wrote: However if you known the passphrase, you can pass it to gpg directly using --passphrase-file and --pinentry-mode=loopback. I figured, but am trying to avoid having the passphrase land on disk at all. Due to the way a pipe works there is not much

Re: Second OpenPGP-card

2024-02-20 Thread Jakob Bohm via Gnupg-users
On 2024-02-17 12:37, Juergen BRUCKNER via Gnupg-users wrote: Hello Jacob, Am 17.02.24 um 12:04 schrieb Jakob Bohm via Gnupg-users: [...] I don't know exactly how the situation about this is in Germany. But here in Austria many mobile phone shops have a SIM card punch with which you can

Re: Second OpenPGP-card

2024-02-17 Thread Jakob Bohm via Gnupg-users
On 2024-02-15 18:42, Juergen BRUCKNER via Gnupg-users wrote: Hello Matthias, Am 13.02.24 um 17:32 schrieb Matthias Apitz: We need here 'Microm SIM'. And I talked to the owner of floss-shop. They do not offer a way to pop out Micro SIM. I don't know exactly how the situation about this is in G

Re: Second OpenPGP-card

2024-02-13 Thread Jakob Bohm via Gnupg-users
On 2024-02-13 14:32, Matthias Apitz wrote: El día martes, febrero 13, 2024 a las 11:04:31a. m. +0100, Werner Koch via Gnupg-users escribió: On Fri, 9 Feb 2024 15:36, Matthias Apitz said: So, can I buy this card here in Europe or even in Germany? floss-shop.de I've contacted floss-shop.de.

Re: Regarding the expiration of the signed data in npth-1.6.tar.bz2

2024-02-05 Thread Jakob Bohm via Gnupg-users
On 2024-02-03 17:31, Bruce Walzer wrote: On Sat, Feb 03, 2024 at 11:35:20PM +0900, witchy via Gnupg-users wrote: [...] I noticed that the npth signature data has expired. Why is anyone signing software with expiring keys anyway? I have ranted against the practice of PGP key expiry in general[1]

Re: gpgsm: ksba_cms_parse failed: Broken pipe

2023-12-15 Thread Jakob Bohm via Gnupg-users
Hi, On 2023-12-14 19:43, Werner Koch wrote: On Thu, 14 Dec 2023 16:19, Jakob Bohm said:   zcat ${infl} |     faketime "${DSTAMP}" gpgsm --verify --validation-model shell --assume-binary --status-fd 3 --output - - 3>${wrkdir}/sigdec.status || : gpgsm: ksba_cms_parse failed: Broken pi

gpgsm: ksba_cms_parse failed: Broken pipe

2023-12-14 Thread Jakob Bohm via Gnupg-users
Dear list, I am using gpgsm in a script for its ability to efficiently process CMS format messages larger than available memory.  However after a recent script change, it now fails every time on previously accepted data with error messages that are essentialy gpg implementation internals gobbledy