compile 2.1.10 no bzip2 ?

2016-01-11 Thread Fulano Diego Perez
Hi, This must be something simple I'm missing but on a debian stretch 64 machine i cannot get gpg 2.1.10 compiled with bzip2 support which prevents me from reading bzip2 compressed files - they can decrypt but: gpg: uncompressing failed: Unknown compression algorithm ./configure --build=x86_6

Re: basic identity mgmt

2016-01-11 Thread Peter Lebbing
Hi! > Do I have to sign it? Is there no way to configure gpg locally to > say "the info in this key (fingerprint) is accurate", without having > to sign? You have to sign it; that's how it works :). > Is the semantics of signing with lsign or sign "the info in this key > is accurate"? Yes. "Th

Re: basic identity mgmt

2016-01-11 Thread Damien Goutte-Gattat
On 01/10/2016 11:01 PM, Full Name wrote: Do I have to sign it? Is there no way to configure gpg locally to say "the info in this key (fingerprint) is accurate", without having to sign? If you are using the default trust model ("pgp"), no. In this model, the validity of a key is only determine

compile 2.1.10 with libgcrypt 1.7.0-beta300

2016-01-11 Thread Fulano Diego Perez
Can anybody confirm on debian stretch 64 a successful build with libgcrypt beta ? checking for LIBGCRYPT - version >= 1.6.0... yes (1.7.0-beta300) checking LIBGCRYPT API version... okay i cannot create curve25519 encryption sub keys gpg: agent_genkey failed: Invalid flag gpg: Key generation fai

Re: basic identity mgmt

2016-01-11 Thread Doug Barton
On 01/10/2016 02:01 PM, Full Name wrote: Do I have to sign it? Is there no way to configure gpg locally to say "the info in this key (fingerprint) is accurate", without having to sign? Is the semantics of signing with lsign or sign "the info in this key is accurate"? You've already received g

Re: basic identity mgmt

2016-01-11 Thread Lachlan Gunn
> > >> You've already received good answers on your questions, so some questions > for you. :) What is your concern about signing the key? And are you aware > that local signatures will not be communicated beyond your keyring? I actually ran into this issue the other day. For me it's problemati

Re: basic identity mgmt

2016-01-11 Thread Martin Behrendt
Am 11.01.2016 um 17:35 schrieb Lachlan Gunn: >> >> >>> You've already received good answers on your questions, so some questions >> for you. :) What is your concern about signing the key? And are you aware >> that local signatures will not be communicated beyond your keyring? > > > I actually ra

Problem while installing NitrokeyPro's App

2016-01-11 Thread stebe
Hi GnuPG users, (sorry for this long posting) I'm about to create a new key using NitrokeyPro and its app but I have some problems with installing the app. I am not sure if this is more a Nitrokey or a Debian issue. I'm using Debian oldstable (7.9.) 32 bits on a 64 bit processor and a 64 bit kerne

Re: basic identity mgmt

2016-01-11 Thread Peter Lebbing
On 11/01/16 18:06, Martin Behrendt wrote: > Without thinking a lot about it on my part, but wouldn't a separate > signing sub-key help with this? Signing other people's keys is called certifying, and certification is a capability only the primary key has. The "Sign" capability indicates it can cre

Re: basic identity mgmt

2016-01-11 Thread Peter Lebbing
On 11/01/16 17:35, Lachlan Gunn wrote: > I actually ran into this issue the other day. For me it's problematic because > my certification key is on an offline machine, so it's inconvenient to have to > power it up and do a round-trip through the airgap when I'm not going to > propagate the signatu

Re: compile 2.1.10 no bzip2 ?

2016-01-11 Thread NIIBE Yutaka
On 01/11/2016 05:52 PM, Fulano Diego Perez wrote: > This must be something simple I'm missing but on a debian stretch 64 > machine i cannot get gpg 2.1.10 compiled with bzip2 support which > prevents me from reading bzip2 compressed files - they can decrypt but: [...] > ENABLE_BZIP2_SUPPORT_FALSE='

Re: compile 2.1.10 with libgcrypt 1.7.0-beta300

2016-01-11 Thread NIIBE Yutaka
On 01/11/2016 11:23 PM, Fulano Diego Perez wrote: > Can anybody confirm on debian stretch 64 a successful build with > libgcrypt beta ? GnuGP and libgcrypt development version build successfully on my 32-bit ARMv7l. > checking for LIBGCRYPT - version >= 1.6.0... yes (1.7.0-beta300) > checking LIB