Re: A safe text editor

2012-09-09 Thread Marco Steinacher
Am 09.09.2012 20:39, schrieb Peter Lebbing: > On 09/09/12 13:12, Milo wrote: >> Also there are vim scrips allowing some level of integration with gnupg. > > Personally, I'd have more faith in a text editor that was written ground-up > with > security in mind. If you take a full-fledged editor tha

Re: Using a different OpenPGP card/subkeys with same master key

2012-08-14 Thread Marco Steinacher
Am 14.08.2012 03:11, schrieb Olivier Mehani: > I am using two OpenPGP cards from Kernel Concepts. Each contains > different subkeys created from the same master key. I tend to use one at > work, and the other at home. > > Now, the work one is currently not available (lost it somewhere), so I'm > u

Re: GPG key to authenticate to SSH?

2012-07-25 Thread Marco Steinacher
On 25.07.2012 12:04, Werner Koch wrote: > On Tue, 24 Jul 2012 22:04, jer...@budts.be said: >> What I really wanted to accomplish here is to use my GPG >> authentication subkey for SSH authentication, without having to use an >> SSH-key at all. But it is still not clear to me how this can be >> acco

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

2012-06-04 Thread Marco Steinacher
Hi, Am 03.06.2012 17:45, schrieb Robin Kipp: > However, as I'd much rather use 2048-bit keys, I guess I'll just have > to sort things out with the retailer I got it from... Can you > recommend another brand that produces readers which are easier to > use? E.g. Gemalto or G&D or anything in that di

Re: OpenPGP Cards

2012-04-16 Thread Marco Steinacher
Hi, On 04/14/2012 02:53 PM, gabriel@telenet wrote: > My question is now: where can I buy, preferably in Belgium, blank > OpenPGP cards? I don't know about Belgium, but you can buy OpenPGP cards from kernelconsepts in Germany: http://shop.kernelconcepts.de/product_info.php?cPath=1_26&products_id=4

Re: Migrating to Smartcards

2011-09-01 Thread Marco Steinacher
On 30.08.2011 20:40, Werner Koch wrote: > On Tue, 30 Aug 2011 17:54, rich...@r-selected.de said: > >> keytocard, restore the backup, insert card #2, issue keytocard again. >> Will that cause any problems in later GnuPG use as the cards' IDs are > > Possible. It will be easy to disable the check o

Troubles with scim and pinentry

2011-08-26 Thread Marco Steinacher
Hi, I have the problem that the process 'scim-bridge' crashes (segfault) from time to time on my system. After that, keyboard input doesn't work anymore and I have to kill and restart scim in a console outside of X. I suspect that this problem is related to pinentry (gtk2) because it happens just

Re: Restarting gnupg-agent inside X session

2011-03-01 Thread Marco Steinacher
Daniel Kahn Gillmor wrote: > On 02/28/2011 06:49 PM, David Tomaschik wrote: >> Each process has its own copy of the environment inherited from its >> parent, so it's not possible to change the GPG_AGENT_INFO variable for >> all processes. You could start gpg-agent with --use-standard-socket, >> an

Restarting gnupg-agent inside X session

2011-02-28 Thread Marco Steinacher
Hi, I use a OpenPGP smartcard with gnupg 2.0.14 and Ubuntu for different tasks. From time to time I face the following problem: The gpg-agent crashes for some reason after entering the PIN, 'ps' reports the daemon process as a zombie STAT START TIME COMMAND Zs Feb26 0:01 [gpg-agent] and '

Re: Do smartcards stay unlocked forever by design?

2011-01-18 Thread Marco Steinacher
On 01/17/2011 04:03 PM, Grant Olson wrote: > I've been using a smartcard for several months now. It's a cryptostick > if the model is important. Every time I sign something, it asks me for > my pin. But once the card is unlocked, ssh authentication and > decryption seem to happen forever, regard

Re: Testing with card, some questions

2010-11-16 Thread Marco Steinacher
Hi J, Gnupg creates secret key stubs in your keyring. These are just meta data, i.e. references to the keys on your card. They can be deleted and are created automatically again if you do a 'gpg --card-status'. Probably the backup you mentioned just contains these stubs. Check if in the 'gpg --li

Re: using a smartcard without keytocard

2010-03-22 Thread Marco Steinacher
Hauke Laging wrote: > I have just bought a gnupg smartcard, copied my subkeys to it, and it works. > I > have been using a key on several computers. Now I want the other systems to > use the smartcard, too, so that I can delete the private keys there. The > content of the smartcard is shown by

cache-timeout not working with smartcard

2009-12-16 Thread Marco Steinacher
Hi, I'm using gnupg with an OpenPGP smartcard since a few days now and basically it works very well. However, one thing bothers me a bit: Neither the cache-timeout options (gpg-agent) nor the card-timeout option (scdaemon) seem to work. I have set all timeouts to very low values but the PIN is sti