Re: tofu: Missing entry in the bindings table for new key

ory, like so (assuming a Bourne-like shell): This was easier to reproduce than I expected. I've attached the transcript of a shell session demonstrating the problem. Manually calling "gpg --tofu-policy good $KEYID" fixes the issue. I'm using gpg 2.1.17; I haven't checked yes

Re: Choosing between multiple signing keys

On Sat, 21 Jan 2017 11:55:46 +0100 Peter Lebbing wrote: > You should append a ! to the key ID. This specifies you want this > specific key and not the keyset to which it belongs. Thanks for the hint! This did indeed fix my problem. Regards, Luis pgp7ae65VL0gg.pgp Description: O

tofu: Missing entry in the bindings table for new key

ot;, but it still looks like a bug to me. Any ideas how this could happen? Potentially relevant facts: * The new key's userid collides with that of my old key. * I'm using the setting "tofu-default-policy unknown". Regards, Luis Ressel __

Choosing between multiple signing keys

be used? I've tried passing in the subkey ID via the '-u'-option, but this didn't work. I'm using GnuPG 2.1.17. Regards, Luis Ressel ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Fresh OS installation

filesystem entry just reprents the socket that gnupg uses to communicate with gpg-agent. It's not a file, and no data is stored in it. Regards, Luis Ressel ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: [Announce] Libgcrypt 1.7.5: secmem trouble

which caused the issue, and 1.7.5 fixes it again. Thanks for your help, and sorry about the noise! Regards, Luis Ressel ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: [Announce] Libgcrypt 1.7.5: secmem trouble

Hello, since I've upgraded to libgcrypt 1.7.5, gpg emits the warning 'Warning: using insecure memory!' (and hence refuses to run, since my config file includes 'require-secmem'). Any hints for debugging this issue would the greatly appreciat

How to add ssh key to gpg-agent in Windows 10?

I'm using GnuPG 2.1.11 from the *Simple installer for GnuPG modern* Windows binary release on https://www.gnupg.org/download/index.html After muddling about a great deal, I found gpg-agent can be enabled as an ssh-agent for PuTTY by - adding enable-putty-support to *gpg-agent.conf* - gpg --e

offtopic [WAS] Re: generating revocation certs non-interactively

??? Is this spam? How odd. Could this person be stuck in this mailinglist somehow? On 05/06/2015 11:08 PM, Michelle Gmail wrote: > Some how in the one ur doing this to I have done nothing to deserve to have > put through 2 months of non stop names called then I love then I hate u ... > Do u

Re: generating revocation certs non-interactively

px.expect("Is this okay?") px.sendline("y") px.expect(pexpect.EOF) bidx = px.before.index('-BEGIN PGP PUBLIC KEY BLOCK-') eidx = px.before.index('-END PGP PUBLIC KEY BLOCK-') eidx += len('-END PGP PUBLI

generating revocation certs non-interactively

So maybe this is so by design? How could I get around the interactive process and generate the certificate programmatically? I have also tried pexpect to 'mock' user input to bypass interaction, no success there. Any help would be greatly appreciated. Cheers, Luis. - -- Luis F

GnuPG 2.1.0: --refresh-keys regression

r the keyservers to deny such requests?) dirmngr also seems to have problems with hkps certificate checking for keyserver addresses with round-robin DNS, but I need to examine this further before I can provide details. Regards, Luis Ressel -- Luis Ressel GPG fpr: F08D 2AF6 655E 25DE 52BC E53D 08F5

Re: gpg asks for the same passphrase each time it uses new subkey

Huh? It shouldn't be neccessary at all to enter your passphrase for encryption... -- Luis Ressel GPG fpr: F08D 2AF6 655E 25DE 52BC E53D 08F5 7F90 3029 B5BD signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnup

Re: gpg-agent chooses wrong identity when picking SSH key

Adding "IdentitiesOnly no" to the top of your ~/.ssh/config should help. Regards, Luis Ressel signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Subject: openpgp card and basiccard RNG

ce which is supposed to be open? That sounds nasty and basically means there could even be backdoors in the implementation, not only in the underlying system... Regards, Luis Ressel signature.asc Description: PGP signature ___ Gnupg-users mailing list

Re: Difference between setpref and options in the configuration

s SHA512 SHA384 SHA256 SHA224 s2k-cipher-algo AES256 s2k-digest-algo SHA512 (I added Camellia and CAST5 because 3DES gets forcibly added at the end and I'd still prefer those two over 3DES...) Regards, Luis Ressel -- Luis Ressel GPG fpr: F08D 2AF6 655E 25DE 52BC E53D 08F5 7F90 3029

Using a Gemalto IDBridge K30 with the internal CCID driver

error seems to be "ccid-driver: invalid response for S-block (Change-IFSD)". Does anyone have an idea about this? I'll use pcscd if I have to, but I'd rather prefer the internal driver if it's possible to fix this problem. Regards, Luis Ressel -- Luis Ressel GPG fpr: F08D 2

Using a Gemalto IDBridge K30 with the internal CCID driver

error seems to be "ccid-driver: invalid response for S-block (Change-IFSD)". Does anyone have an idea about this? I'll use pcscd if I have to, but I'd rather prefer the internal driver if it's possible to fix this problem. Regards, Luis Ressel -- Luis Ressel GPG

GnuPG 1.4.15 RAM EATER? Or just a bug?

I noticed that this 1.4.15 version consumes much more RAM than previous versions.My Linux desktop background wallpaper turns blank(dark) when encrypting/decrypting operations (which is a novelty,and that is why I detected this "problem") and when I execute the free command to analyse RAM the use

SSL on gnupg.org

pipes. Kind regards. - -- Jose Luis Rivas http://joseluisrivas.net/ -BEGIN PGP SIGNATURE- Version: GnuPG/MacGPG2 v2.0.19 (Darwin) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJSLS0KAAoJEBPsQ+65rIxDN68QAILKlMvW5QC5PFBQjI2z/AEz

Re: Problems with gnome-keyring et al. (was: Card only available to root user)

On Wed, Aug 10, 2011 at 01:29:04PM +0200, Luis de Bethencourt wrote: > So I found a solution \o/ > > If I do: > unset GPG_AGENT_INFO > > then the card works for my user, unfortunately it only does work in terminals. > It does launch pinentry-gtk-2 when I sign an email w

Re: Problems with gnome-keyring et al. (was: Card only available to root user)

So I found a solution \o/ If I do: unset GPG_AGENT_INFO then the card works for my user, unfortunately it only does work in terminals. It does launch pinentry-gtk-2 when I sign an email with mutt, and so that covers my usecase :) Thanks to all! Luis signature.asc Description: Digital

Re: Card only available to root user

ols is intercepting the connection and acts as a > MITM between gpg-connect-agent and gpg-agent. > > Check the owner of the socket decribed by $GPG_AGENT_INFO and if used > the socket ~/.gnupg/S.gpg-agent . > So it looks like GNOME's ssh-agent is interfering. How can I avoid t

Re: Card only available to root user

0.17 this is very strange, that shows it as 2.0.17, but it still says that 'getinfo version' is not implemented. :S Luis signature.asc Description: Digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Desktop Summit Key Signing

Hi everybody :) Anybody also attending the Desktop Summit in Berlin would be interested in some GPG key signing? Luis signature.asc Description: Digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: Card only available to root user

On Fri, Aug 05, 2011 at 10:59:28AM +0200, Peter Lebbing wrote: > On 05/08/11 03:02, Luis de Bethencourt wrote: > > device in debian: > > crw-rw-r--+ 1 root root 189, 516 2011-08-05 00:46 /dev/bus/usb/005/005 > > > > device in gentoo: > > crw-rw-r-- 1 root pcscd 1

Re: Card only available to root user

is really gpg2 (check using gpg --version). > gpg --version gpg (GnuPG) 2.0.17 > > But when I run it in root it does create this file. > > That smells like a file permission problem. > Both the user and root have access to where the log file should be dropped. By the way, since

Card only available to root user

ailed: Missing item in object scdaemon[31077]: reading public key failed: Missing item in object Application ID ...: D2760001240102050CC9 Version ..: 2.0 Manufacturer .: ZeitControl Serial number : 0CC9 Name of cardholder: Luis de Bethencourt Language prefs ...: e

Re: Card only available to root user

On Thu, Aug 04, 2011 at 11:25:36PM +0200, Luis de Bethencourt wrote: > Hi everybody and thanks for the help. > > I recently upgraded my GnuPG setup with a Smart Card (GnuPG Card v2). > > I can get/set the information of the card through the root user, but this is > not good f

Re: Card only available to root user

On Fri, Aug 05, 2011 at 10:25:33AM +0200, Luis de Bethencourt wrote: > On Fri, Aug 05, 2011 at 09:32:35AM +0200, Werner Koch wrote: > > On Fri, 5 Aug 2011 01:49, l...@debethencourt.com said: > > > > > > luisbg@atlas ~ $ gpg --card-status > > > gpg: s

Re: Card only available to root user

running after that. > To debug this you should put these lines into scdaemon.conf > > log-file /foo/bar/scd.log > debug 2049 > debug-ccid-driver > verbose > > > Salam-Shalom, > >Werner > > > -- > Die Gedanken sind frei. Ausnahmen regelt ein Bu

Re: Card only available to root user

On Fri, Aug 05, 2011 at 01:07:19AM +0200, Hauke Laging wrote: > Am Freitag, 5. August 2011, 03:02:07 schrieb Luis de Bethencourt: > > device in debian: > > crw-rw-r--+ 1 root root 189, 516 2011-08-05 00:46 /dev/bus/usb/005/005 > > > > device in gentoo: > > crw-rw

Re: Card only available to root user

On Fri, Aug 05, 2011 at 12:14:47AM +0200, Hauke Laging wrote: > Am Freitag, 5. August 2011, 01:49:21 schrieb Luis de Bethencourt: > > > I can get/set the information of the card through the root user > > > Notice how I can check the status as root, and do SCD Learn as

Re: Card only available to root user

On Fri, Aug 05, 2011 at 01:49:21AM +0200, Luis de Bethencourt wrote: > Hi everybody and thanks for the help. > > I recently upgraded my GnuPG setup with a Smart Card (GnuPG Card v2). > > I can get/set the information of the card through the root user, but this is > not good f

Card only available to root user

ailed: Missing item in object scdaemon[31077]: reading public key failed: Missing item in object Application ID ...: D2760001240102050CC9 Version ..: 2.0 Manufacturer .: ZeitControl Serial number : 0CC9 Name of cardholder: Luis de Bethencourt Language prefs ...: e

Elementary Question

I've googled and checked the docs for an answer to this, but have come up empty-handed. Is it possible to verify public keys without actually adding them to my keyring? For example, I don't want to add keys from mailing lists under most circumstances, but I would like to retreive the corresponden

Re: Newbie - compiling gnupg-1.4.6 and GpgSM

an find GpgSM sources for my > gnupg-1.4.6 / gpgme-1.0.3 please? > > Any other advice? > > Thanks, > > Geoff > > > > > ___ > Gnupg-users mailing list > Gnupg-users@gnupg.org > http://lists.gnupg.org/mailman/listinfo/gnupg-users > -- Luis OpenPGP key: 0xA53D8214 |

bad signature on encrypted and signed block?

ointers on this. -- Luis ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users