Re: smartcard reader

2016-11-19 Thread Nix
On 22 Oct 2016, Bjoern Kahl spake thusly: > I /think/ it worked exactly once. But then I played a bit with the > PIV applet on the YubiKey (using yubico's piv-tool), and since then > I can not get to the OpenPGP applet on the YubiKey. Only the PIV > works (I see my x509 certificates in there

Re: [tool / utility] check-trustpaths, a command-line tool for retrieving and checking chains of signatures in the web of trust

2016-05-05 Thread Johannes Nix
Hello Bernhard, > I like the idea, I'll probably try it once I have a need for > the use case. Maybe you can add a link to your tool to > wiki.gnupg.org? Sure, if that's OK for a still somewhat experimental stage. > Did you consider pyme or > pygpgme? (See https://wiki.gnupg.org/APIs ) I did se

[tool / utility] check-trustpaths, a command-line tool for retrieving and checking chains of signatures in the web of trust

2016-05-04 Thread Johannes Nix
I wrote a small tool for automatically retrieving and checking trust paths between two PGP keys. This was motivated by me experiencing difficulty when verifying signed Linux distribution images or downloads for web software using GnuPG. The PGP Pathfinder Service provided by Henk P. Penning allo

Re: gpg agent forwarding (via ssh) totally broken with 2.1 and NFS-mounted $HOME

2015-09-22 Thread Nix
ut --disable-ccid, or with an exclusive open of pcscd (from pcsc-lite 1.8.14 with the autospawn code hacked back in because not everyone in the whole world can rely on systemd to do that for them), scdaemon gets itself into a terrible tangle after very simple operations with a dual-form dev

Re: gpg agent forwarding (via ssh) totally broken with 2.1 and NFS-mounted $HOME

2015-09-21 Thread Nix
On 21 Sep 2015, Werner Koch spake thusly: > On Mon, 21 Sep 2015 13:44, n...@esperi.org.uk said: > >> catastrophically bad effects on agent forwarding when used in >> conjunction with an NFS-mounted $HOME. > > I know that it is not yet well documented, but thre is a solution for > remote file syste

Re: gpg invocation on machines sharing an NFS-mounted $HOME totally broken with 2.1 (was Re: agent forwarding (via ssh)...)

2015-09-21 Thread Nix
On 21 Sep 2015, n...@esperi.org.uk stated: > On 21 Sep 2015, n...@esperi.org.uk verbalised: > >> We are now in serious trouble -- gpg-agent cannot do anything, and half >> the time it's wedged so hard only kill -9 will get rid of it. > > A terrible, hacky workaround is to change *_SOCK_NAME in con

Re: gpg invocation on machines sharing an NFS-mounted $HOME totally broken with 2.1 (was Re: agent forwarding (via ssh)...)

2015-09-21 Thread Nix
On 21 Sep 2015, n...@esperi.org.uk verbalised: > We are now in serious trouble -- gpg-agent cannot do anything, and half > the time it's wedged so hard only kill -9 will get rid of it. A terrible, hacky workaround is to change *_SOCK_NAME in configure.ac to place all the sockets in a new subdirec

gpg invocation on machines sharing an NFS-mounted $HOME totally broken with 2.1 (was Re: agent forwarding (via ssh)...)

2015-09-21 Thread Nix
nt forwarding will forever be hopeless on machines with NFS-mounted > $HOMEs. It's even worse than that. Just *attempting* to do a GPG operation, even if it's bound to fail because no agent forwarding is in place, will autostart an agent and break the agent connection on the original m

gpg agent forwarding (via ssh) totally broken with 2.1 and NFS-mounted $HOME

2015-09-21 Thread Nix
So I have a 2.0 installation I'm trying to get up to 2.1, taking advantage of the opportunity given by sticking my GPG key on a smartcard and using it for SSH authentication. Everything is going smoothly, the smartcard part is working fine, but unfortunately the fixed path used for the GPG agent i

gpg -u problem

2009-07-20 Thread Nix
Hello, I have a problem with gpg (GnuPG) 1.4.9 I got three keys. I receive a crypted file and when i want to decrypt gpg don't want to use another key than the default. i use this commande gpg -u 5E95FE19 -d 00poap/gpg Can you help me plz. pub 1024D/118A9D3A 2008-12-11 uid

crontab + openbsd

2009-04-02 Thread Nix
Hi I got a problem with a crypt file. When i execute my script no problem everything work, but when i schedule it in a crontab there is a problem with the passphrase "gpg: decryption failed: secret key not available" #!/bin/sh gpgdir=/appli/ for i in `find $gpgdir -name '*.TOTO'`; do echo ma_pa

crontab + openbsd

2009-04-01 Thread Nix
Hi I got a problem with a crypt file. When i execute my script no problem everything work, but when i schedule it in a crontab there is a problem with the passphrase "gpg: decryption failed: secret key not available" #!/bin/sh gpgdir=/appli/ for i in `find $gpgdir -name '*.TOTO'`; do echo ma_pa

crontab + openbsd

2009-04-01 Thread Nix
Hi I got a problem with a crypt file. When i execute my script no problem everything work, but when i schedule it in a crontab there is a problem with the passphrase "gpg: decryption failed: secret key not available" #!/bin/sh gpgdir=/appli/ for i in `find $gpgdir -name '*.TOTO'`; do echo ma_pa

Re: How to protect private keys?

2007-04-13 Thread nix
The private keys are encrypted even in exported form. Anyone who can grab your private key will need your passphrase to decrypt it. By default, GnuPG uses the cipher CAST5 to encrypt private keys. You can change that with the --s2k-* options. However, for a hacker, having something to decrypt

Re: GPG question

2006-12-12 Thread nix
>In PGP I can select the symmetric cryptographic algorithm to use (e.g. >TripleDES, IDEA, >etc.). >How can I make this selection in GPG ? If not: what is setup at the moment ? >Note that I cannot find anything in one of the preferences (I'm using GPG4Win). use the command line options '--symmetr