Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 02:37 AM, Guillaume Lanquepin-Chesnais wrote: > It seems that the version of gnome shipped with F17 includes a > gnome-keyring that supports smartcard (cf > http://nlnet.nl/project/seahorse-sc/). You should look into seahorse/key > manager if your smartcard is listed in it If GnuPG c

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 04:32 AM, Robert J. Hansen wrote: > If GnuPG can't access it from the command line, Seahorse isn't going to > have any better luck. > > With gnome-keyring-daemon running: And, after restarting gnome-keyring-daemon: [rjh@isaiah Downloads]$ gpg2 --card-status gpg: selecting openpgp

Re: changing the default for --keyid-format

2012-05-30 Thread Michel Messerschmidt
On Tue, May 29, 2012 at 10:03:57PM -0400, Robert J. Hansen wrote: > There may be a use case for contextualization in certificates, but if so > I haven't found it yet. :) You may wnat to lookup up all certificates that signed a certificate. Or just get all your certificates displayed. Or all cert

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 10:50, r...@sixdemonbag.org said: > for a bit. If anyone has any advice, I'll be coming back to this > problem tomorrow. Maybe letting it sit for a while will spur my brain > into solving it. The "sudo gpg2" might indicate that root has a running gpg-agent and thus scdaemon.

Re: [Sks-devel] [FYI] keys.gnupg.net (was: changing the default for --keyid-format)

2012-05-30 Thread Jeffrey Johnson
On May 29, 2012, at 1:26 PM, Werner Koch wrote: > Hi, > > I can't remember whether I announced it, but since some weeks > > keys.gnupg.net is a CNAME to pool.sks-keyservers.net > > and > > http-keys.gnupg.net is a CNAME to ha.pool.sks-keyservers.net > > The reason for this change is that i

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Nguyễn Hồng Quân
Hello Werner, I also encounter this problem on Ubuntu 12.04 I tried to make the log, but both the file S.log and mycombinedlog are empty. Did I wrong somewhere? hongquan@Pangolin ~ $ cat .gnupg/scdaemon.conf log-file socket://home/hongquan/.gnupg/S.log verbose debug 1024 debug 2048 debug-ccid-d

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 11:47, quanngu...@mbm.vn said: > I tried to make the log, but both the file S.log and mycombinedlog are > empty. > Did I wrong somewhere? Did you restart gpg-agent? pkill gpg-agent and check with ps that it has really been killed. You should see a notice in the log as s

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
Thanks very much for being willing to help with this. I appreciate it. After making the debugging changes to scdaemon.conf and gpg-agent.conf, I ps ax|grepped for gpg-agent and killed all running instances. I then logged out of my GNOME 3 session, in order to bring the state to as close to prist

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
On 5/30/12 5:13 AM, Werner Koch wrote: > log-file socket://home/USER/.gnupg/S.log Also, should this be socket://home... or socket:///home...? With the former, when I invoke gpg-agent manually I get a message of "can't connect to `home/rjh/.gnupg/S.log': No such file or directory". With the latt

Re: getting an encrypted file to show what public key was used

2012-05-30 Thread Mark H. Wood
On Tue, May 29, 2012 at 11:28:36AM -0400, Robert J. Hansen wrote: > This goes to underline the importance of proper certificate validation. > If I have the sequence of events correct, then it could have been > avoided entirely if there had been a Step 4.5, "validate the certificate > he just receiv

Re: changing the default for --keyid-format

2012-05-30 Thread Mark H. Wood
On Tue, May 29, 2012 at 09:23:08PM +0200, Werner Koch wrote: > On Tue, 29 May 2012 19:44, r...@sixdemonbag.org said: > > > Anyway. If people are interested in what I found out about effective > > user-interface design with respect to certificate managers, say the > > word. Otherwise I'll crawl b

Re: changing the default for --keyid-format

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 09:40 AM, Mark H. Wood wrote: > Oh, how many times have I wondered why GPA has no search tool. Taking a look at GPA, it seems that 0.9.0 no longer compiles on a modern UNIX -- it expects libassuan-1.x, apparently, and libassuan's now in a version 2. I wasn't able to get the git chec

Re: changing the default for --keyid-format

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 16:16, r...@sixdemonbag.org said: > On 05/30/2012 09:40 AM, Mark H. Wood wrote: >> Oh, how many times have I wondered why GPA has no search tool. > > Taking a look at GPA, it seems that 0.9.0 no longer compiles on a modern > UNIX -- it expects libassuan-1.x, apparently, and liba

GPA download site (was: changing the default for --keyid-format)

2012-05-30 Thread Werner Koch
The new download site is ftp://ftp.gnupg.org/gcrypt/gpa/ -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz. ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPA download site

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 10:46 AM, Werner Koch wrote: > The new download site is > > ftp://ftp.gnupg.org/gcrypt/gpa/ > > You may want to update: http://www.gnupg.org/related_software/gpa/ then, as it points off at a site which only offers 0.9.0 for download. :) _

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 14:54, r...@sixdemonbag.org said: > Also, should this be socket://home... or socket:///home...? Oops, 3 dashes are correct. > Starting over from scratch again I manually removed S.gpg-agent and > S.log. S.gpg-agent was recreated automatically, but S.log seemed to not be. S.

Re: GPA download site

2012-05-30 Thread Werner Koch
On Wed, 30 May 2012 16:54, r...@sixdemonbag.org said: > >http://www.gnupg.org/related_software/gpa/ > > then, as it points off at a site which only offers 0.9.0 for download. :) That makes sense. For most other parts of GnuPG we enter the current version number into a file swdb.wml and

Re: PGP interoperability

2012-05-30 Thread MFPA
Hi On Friday 25 May 2012 at 10:22:45 AM, in , Johan Wevers wrote: > Maybe the NSA has found a workable solution for > factoring but not for DL? And shared the fact privately with Symantec? -- Best regards MFPAmailto:expires2...@rocketmail.com Wisdom is a companion

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread MFPA
Hi On Monday 28 May 2012 at 3:12:24 AM, in , Robert J. Hansen wrote: > The problem isn't the fraction of the population. The > problem is command and control. That will always be a problem if the planting is uncoordinated. As a thought experiment, what happens when all the "real" protesters

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread Robert J. Hansen
On 05/30/2012 04:14 PM, MFPA wrote: > That will always be a problem if the planting is uncoordinated. And if the planting *is* coordinated, why in the world would you ever need a 1 in 6 penetration rate? I'm sorry, but this is rapidly descending down the rabbit-hole of conspiracy theory -- where

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread Jean-David Beyer
MFPA wrote: > Hi > > > On Monday 28 May 2012 at 3:12:24 AM, in > , Robert J. Hansen wrote: > > >> The problem isn't the fraction of the population. The >> problem is command and control. > > That will always be a problem if the planting is uncoordinated. > > As a thought experiment, what ha

Re: Some people say longer keys are silly. I think they should be supported by gpg.

2012-05-30 Thread Hubert Kario
On Wednesday 30 of May 2012 21:14:42 MFPA wrote: > Hi > > > On Monday 28 May 2012 at 3:12:24 AM, in > > , Robert J. Hansen wrote: > > The problem isn't the fraction of the population. The > > problem is command and control. > > That will always be a problem if the planting is uncoordinated. >

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Nguyễn Hồng Quân
Hi, After pkill gpg-agent, it seems that gg-agent still run: hongquan@Pangolin ~ $ pkill gpg-agent hongquan@Pangolin ~ $ ps ax | grep gpg-agent 1991 ?Ss 0:00 /usr/bin/ssh-agent /usr/bin/gpg-agent --daemon --sh --write-env-file=/home/hongquan/.gnupg/gpg-agent-info-Pangolin /usr/bin/dbus

Re: GnuPG 2 + OpenPGP card on F17

2012-05-30 Thread Robert J. Hansen
After more wrestling with this, I'm still no closer to a solution than I was this morning. I was able to recreate Nguyễn's difficulties with an Ubuntu 12.04LTS/64-bit system, though, so we can confirm that one's got problems and it's not simple user error on his part. Or, rather, if it is then I'