[PATCH gnupg] gpg: Add --list-filter properties sig_expires/sig_expires_d

From: "Robin H. Johnson" Modelled after key_expires/key_expires_d. This should be useful to detect upcoming certification expiry, so the certifications can be renewed in advance of the expiry. Signed-off-by: Robin H. Johnson --- doc/gpg.texi | 6 ++ g10/import.c | 14 +++

Adding one ADSK to multiple keys

e original subkey: gpg: key "44883766ABE65F20453E6FC046D03490A60D7131" not found: No public key How can I configure the same subkey as an ADSK for multiple other keys? Regards, Robin Full log: $ gpg --list-keys --with-subkey-fingerprint [keyboxd] - pub rsa20

Re: New keyserver at keys.openpgp.org - what's your take?

Linux, we've recently spun up dedicated keyservers intended for @gentoo.org keys only. And being able to include our own CA for approved signatures would fit well with future plans. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Treasurer E-Mail : robb...@gentoo.org GnuPG F

Re: Unblocking the user PIN does not work with a new PIN

Hi Peter, you are right, that was the problem. If I choose a longer PIN, it is working as expected. Thank you! /Robin signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Unblocking the user PIN does not work with a new PIN

chose a new user PIN. For the second, I entered the current user PIN. /Robin [0] https://www.gnupg.org/howtos/card-howto/en/ch03s02.html $ gpg --card-status Reader ...: 20A0:4109:0:0 Application ID ...: D2760001240103030005636F Version ..: 3.3 Manufacturer

Re: Efficent batch fetching with verification?

h gnupg2.2, each exec of gpg is still at least 100ms, which adds up over time. Part this may be having a huge keyring present (50k+ keys). -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Asst. Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF

Re: Efficent batch fetching with verification?

On Fri, Nov 03, 2017 at 12:50:06PM +0100, Peter Lebbing wrote: > On 03/11/17 06:20, Robin H. Johnson wrote: > > Presently, the code is effectively this: > > ...cat-list-of-fingerprints... | xargs gpg --recv > > > > This has the downside of causing many exec ... > Any

Efficent batch fetching with verification?

sign or verify many files. -- Robin Hugh Johnson Gentoo Linux: Dev, Infra Lead, Foundation Asst. Treasurer E-Mail : robb...@gentoo.org GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85 GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136 signature.asc Description: Di

Re: Keysigning

p;fingerprint=on Regards, Robin Mathew Rajan On 02-12-2014 PM 05:35, da...@gbenet.com wrote: > On 02/12/14 10:53, Robin Mathew Rajan wrote: >> Hello David, :) >> >> I already uploaded my public key to a public key server some months ago. But >> there's no local

Re: Sign key and export for each UID

You will be asked to confirm every mail being sent unless -y is used. The -u, -c, -b, -e and -n options override the env vars MYKEY, CC, BCC and OWNER respectively. For more details, read the source. Other general info can be found at: https://www.roe.ch/GPG Regards, Robin Mathew Rajan https://ww

Re: Keysigning

he same time it's an effective solution for remote areas. I think key signing through video conferencing, might help in reducing 'crypto divide' (like that in 'digital divide'). :) Regards, Robin Mathew Rajan https://www.robinmathewrajan.com/ On 02-12-2014 PM 03:05, da

Keysigning

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello, Where can I get my keys signed? Does here anyone provide keysigning services through video conference? :) Thanks and regards, Robin Mathew Rajan -BEGIN PGP SIGNATURE- Version: GnuPG v2 iQIcBAEBCgAGBQJUfXfhAAoJEJyRZAJNoXmuFecP

Re: Setpref is not working or is it a bug or something?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi bro, :) Thanks for correcting me. Regards! :) Robin Mathew Rajan On 29-11-2014 AM 08:57, Robert J. Hansen wrote: >> You can delete these values from your current gpg.conf. >> >> s2k-digest-algo SHA256 s2k-cipher-algo AES25

Re: Setpref is not working or is it a bug or something?

onally, by typing this command, we can see how our existing keys are encrypted. For Linux: gpg --list-packets ~/.gnupg/secring.gpg For Windows: %APPDATA%\gnupg\secring.gpg For example, C:\Users\Admin\AppData\Roaming\gnupg\secring.gpg Replace 'Admin' with your user name. So it becomes, C:\U

Re: Setpref is not working or is it a bug or something?

onally, by typing this command, we can see how our existing keys are encrypted. For Linux: gpg --list-packets ~/.gnupg/secring.gpg For Windows: %APPDATA%\gnupg\secring.gpg For example, C:\Users\Admin\AppData\Roaming\gnupg\secring.gpg Replace 'Admin' with your user name. So it becomes, C

Re: Setpref is not working or is it a bug or something?

No bro. You got me wrong. :( I referred these two manuals before I made the change in gpg.conf. 1) https://www.gnupg.org/documentation/manuals/gnupg/GPG-Esoteric-Options.html "--default-preference-list string Set the list of default preferences to string. This preference list is used for ne

Setpref is not working or is it a bug or something?

trust: ultimate validity: ultimate sub 4096R/9939A3DF created: 2014-11-22 expires: never usage: E sub 4096R/4DA179AE created: 2014-11-22 expires: never usage: S [ultimate] (1). Robin Mathew Rajan (https://www.robinmathewrajan.com/) [ultimate] (2) Robin

NSA, PGP and RSA

Hi everyone! I'm Robin Mathew Rajan from India and I'm a new member here. I'm also new to PGP cryptographic concepts. I've some experiences with some other forms of crypto concepts though. I wish to explore more about PGP. Straight to my question! According to many spe

Re: First steps with GPG, am I off to a good start?

ISAAEWq2K+rwKxFZmQo= =t5+4 -END PGP PUBLIC KEY BLOCK- Robin signature.asc Description: Message signed with OpenPGP using GPGMail ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: First steps with GPG, am I off to a good start?

d even put in their phone number or street address if they so desired, right? > > i hope this analysis is helpful, Yes, thanks a lot for the effort - greatly appreciated! :-) Robin signature.asc Description: Message signed with OpenPGP using GPGMail ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: First steps with GPG, am I off to a good start?

would be nice to have a UID without email address but with a > comment which explains the security of the key. Something like > > "Robin Kipp (normal security level subkeys with offline mainkey)" This is something I'm not really sure about, for the reasons that Daniel poi

Re: First steps with GPG, am I off to a good start?

t to start out as such and (hopefully) not have to revoke the main key because of any stupid mistakes… Robin signature.asc Description: Message signed with OpenPGP using GPGMail ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

First steps with GPG, am I off to a good start?

ublic keys to a secure medium, also exported the secret sub keys. 7. Rebooted to my production system, imported the public keys and the secret subkeys. The listing now looks as follows. For public keys: MacBook-Pro:~ robin$ gpg --list-keys DC329876 pub 2048R/DC329876 2013-10-1

Re: [#JYM-378-41570]: Re: Why trust any software?

dress got on this list somehow, hence a new ticket gets created each time someone on this list starts a new discussion. So, looks like their Piracy Department is getting lots of work for no reason :-) HTH! Robin Am 06.08.2013 um 02:42 schrieb Jean-David Beyer : > On 08/05/2013 09:23 AM, T

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

ust have to sort things out with my retailer, and end up purchasing a new card reader. So, if you could possibly recommend a brand that produces easier to handle readers I'd definitely appreciate some advice on that! :-) Thanks! Robin ___ Gnupg-users

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

d another brand that produces readers which are easier to use? E.g. Gemalto or G&D or anything in that direction. Thanks a lot! Robin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

Hi Werner, Am 03.06.2012 um 12:29 schrieb Werner Koch: > What reader are you using? It is possible that your reader does not > support extended length APDUs, which are required for v2 cards. Hmmm, very interesting. I'm using an OMNIKEY 6121 USB card reader, which I purchased along with my Open

Re: Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

The v2.0 card is capable of larger keys. It is an OpenGPG v2.0-compatible card. According to its specs, it should be capable of handling keys up to 3072bits... Robin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Problem: cannot generate / copy keys larger than 1024bit on my OpenPGP-compatible card

ered any helpful solutions as far as I could tell. Thanks! Robin ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Testing GPG EMail encryption

ll the messages that ended up in my inbox, and I'll definitely reply during the next few hours!!! This is a great community, and I'm really glad that I'm now part of it - keep up the great work everyone!!! :-) Best wishes, Robin. signature.asc Description: Messag

Testing GPG EMail encryption

GPG users on here to contact me offlist so that we could try this out once? If anyone on here would be willing to do that, I'd greatly appreciate that! Thanks for any help :-) Best regards, Robin. signature.asc Description: Message signed with OpenPGP using GPGMail

WoT cluster analysis tools?

yring. Specifically interested in isolation of local clusters within the sets of keys. Two sets of keys, one of current developers only, and a second of all developers, past and present. Looking around, I find a few WoT graphing sites, but none of the tools used by said sites. -- Robin Hugh Johnson G

Re: cannot pass in input and passphrase at the same time in batch mode?

C VERIFY and MESSAGE are the only primitives implemented to date for that, so you'd need to do some work there. -- Robin Hugh Johnson E-Mail : robb...@gentoo.org GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85 ___ Gnupg-users mailing

Re: Security Concern - Open Source Binaries

he status of Gentoo signing plans are linked from there (disclaimer: I'm the driving force behind them). -- Robin Hugh Johnson Gentoo Linux Developer & Infra Guy E-Mail : robb...@gentoo.org GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85 pgp95hpQ944YJ.pgp Description: PGP

Re: A circular dependency problem with notification-daemon and libnotify...

ure what I need > and > send it to this OS). This email is entirely unrelated to the gnupg-users mailing list. See Gentoo bug 252521 for your issue. -- Robin Hugh Johnson Gentoo Linux Developer & Infra Guy E-Mail : robb...@gentoo.org GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 9

Re: is there any remote possibility to recover passphrase?

s of your own paraphrase. I had to do that a while ago after a bad bit of mistyping (don't set a passphrase on a brand new keyboard with a slightly different layout than you are used to). -- Robin Hugh Johnson Gentoo Linux Developer & Infra Guy E-Mail : [EMAIL PROTECTED] GnuPG FP :

Re: Printing Keys and using OCR.

et. An interesting twist on this, is that some of my newer drives fail to read the old discs properly. The older drives work fine however. -- Robin Hugh Johnson Gentoo Linux Developer & Council Member E-Mail : [EMAIL PROTECTED] GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488

Re: controlling the use of subkeys

und and use the subkey 205D3103, thus this e-mail chain ive started. *waves at Mike* Mike, to answer your question directly, PORTAGE_GPG_KEY="0xE837F581!" Put it in your environment and your make.conf. If that doesn't work, give me a shout directly. -- Robin Hugh Johnson E-Ma

Re: Bug in getkey.c:2219:merge_selfsigs

le on gcc4! sed -i -e '/AM_CFLAGS/s!-Wno-pointer-sign!!g' g10/Makefile.am sed -i -e '/AM_CFLAGS/s!-Wno-pointer-sign!!g' g10/Makefile.in -- Robin Hugh Johnson E-Mail : [EMAIL PROTECTED] Home Page : http://www.orbis-terrarum.net/?l=people.robbat2 ICQ# : 30269588 or 41

Re: Disaster Key Recovery - Unix

ou've met Werner and exchanged identities with him, then signing his key exportably is ok, but in general, people should be using non-exportable signatures here, with lsign, to not pollute the web of trust unnecessarily. -- Robin Hugh Johnson E-Mail : [EMAIL PROTECTED] Home Page : http

Help revoking signatures on a key

Thanks for help everyone. I've revoked the signatures I wanted to and the key now shows revokations in the output of gpg --edit-key ... revsig. I've submmitted the key to pgp.mit.edu and it did say that new signatures were added, but after 24 hours, I can still see my signatures listed there. I've

Help revoking a signature

I feel like this ia a dumb question, but I can't seem to find the commands in my docs or the WinPT program. How can I revoke a signature I have added to someone else's key? -- [EMAIL PROTECTED] PGP public key fingerprint: 2EE2 8019 3B18 1720 960F B57A C9C3 3CB2 86B1 4A38 Lookup @ pgp.mit.edu: h