Re: regular update of all keys from a keyserver

2016-10-18 Thread Martin T
Thank you for all the replies! Martin On Mon, Oct 17, 2016 at 7:52 PM, Brian Minton wrote: > > > On 10/17/2016 11:41 AM, Daniel Kahn Gillmor wrote: >> On Mon 2016-10-17 06:31:16 -0400, Martin T wrote: >> >>> I am aware that one can update all the keys in local-keyring from a >>> keyserver usi

reviewing wiki / shortlist PIN-pad readers

2016-10-18 Thread Daniel Pocock
I was looking at this page: https://wiki.gnupg.org/CardReader/PinpadInput Are any of these more outstanding than the others, or it doesn't matter which one somebody chooses? Could anybody comment on which of those are easily available in small quantities for developers, or suppliers who are co

Re: Why doesn't gpg-agent forwarding work?

2016-10-18 Thread Kevin Gallagher
Hey Thomas, Thanks for the advice. But as I mentioned, I tried using GnuPG 2.1.15 on the target machine as well (via the packages in Debian sid), and this did not work. gpg2 is simply not speaking to the forwarded gpg-agent socket, however gpg-connect-agent can. Any other ideas? Kevin On 10/16/

Re: reviewing wiki / shortlist PIN-pad readers

2016-10-18 Thread NIIBE Yutaka
Sorry, I didn't have time to reply your call the other day. I think that Gemalto Shelltoken Card Reader, which is available at http://shop.kernelconcepts.de/ is good one. Please note that OpenPGP card requires specific card readers. Its users usually use RSA-2048, RSA-3072, or RSA-4096. For tho

smartcard reader

2016-10-18 Thread Elizabeth Ferdman
Hello, I'm in the market for a smartcard reader and I live in the United States. I found two ways to get an OpenPGP card already, either from shop.kernelconcepts.de or from the FSFE as a sustaining member. Does anyone know how I can get a smart card reader though? It has to be one from this list:

Re: reviewing wiki / shortlist PIN-pad readers

2016-10-18 Thread Daniel Pocock
On 18/10/16 10:58, NIIBE Yutaka wrote: > Please note that OpenPGP card requires specific card readers. Its > users usually use RSA-2048, RSA-3072, or RSA-4096. For those key > sizes, the communication is somewhat difficult for old standard of ISO > 7816. (For RSA-1024, most smart card readers

list revoked UIDs

2016-10-18 Thread Martin T
Hi, I imported a public key from keyserver which has multiple UIDs and one of those UIDs is revoked. When I execute "gpg --list-keys " then I see only active UIDs and not that one revoked UID. Is there a way to list that revoked UID? Or wasn't that imported in the first place? thanks, Martin __

Re: reviewing wiki / shortlist PIN-pad readers

2016-10-18 Thread Stephan Beck
Hi, NIIBE Yutaka: > Sorry, I didn't have time to reply your call the other day. > > I think that Gemalto Shelltoken Card Reader, which is available > at http://shop.kernelconcepts.de/ is good one. > > Please note that OpenPGP card requires specific card readers. Its > users usually use RSA-2048,

Re: reviewing wiki / shortlist PIN-pad readers

2016-10-18 Thread Peter Lebbing
On 18/10/16 10:58, NIIBE Yutaka wrote: > I don't think the attack to USB communication could be mitigated by > pinpad card reader. If such an attack is possible, a user already > would be defeated. It would IMO not prevent key usage, so in that sense the user is defeated. It would still limit the

Re: list revoked UIDs

2016-10-18 Thread Peter Lebbing
On 18/10/16 12:42, Martin T wrote: > Is there a > way to list that revoked UID? I think it's: gpg --list-options show-unusable-uids --list-keys <...> I grepped the man page for "revoked" until I hit upon this. > Or wasn't that imported in the first > place? That is a possibility, depending on

Re: list revoked UIDs

2016-10-18 Thread Martin T
Thanks! This did the trick. Martin On Tue, Oct 18, 2016 at 2:29 PM, Peter Lebbing wrote: > On 18/10/16 12:42, Martin T wrote: >> Is there a >> way to list that revoked UID? > > I think it's: > > gpg --list-options show-unusable-uids --list-keys <...> > > I grepped the man page for "revoked" unt

gpgsm --verify back to back gpgsm --gen-key

2016-10-18 Thread Meno Abels
Hi, i tried to run some combinations of "gpgsm —verify” all without any success. # gpgsm --batch --gen-key < gpgsm-keygen | gpgsm —verify gpgsm (GnuPG) 2.1.15; Copyright (C) 2016 Free Software Foundation, Inc. This is free software: you are free to change and redistribute it. There is NO WARRAN

Re: Please develop even easier materials for complete novice type folks...

2016-10-18 Thread Jürgen Polster
Give this a try: https://gpg4win.de/doc/en/gpg4win-compendium.html Kind regards JP > Please develop even easier materials for complete novice type folks > other than at > https://emailselfdefense.fsf.org/en/ > > and at > https://gnupg.org > _

Re: smartcard reader

2016-10-18 Thread Stephan Beck
Hi Liz, Elizabeth Ferdman: > Hello, > > I'm in the market for a smartcard reader and I live in the United > States. I found two ways to get an OpenPGP card already, either from > shop.kernelconcepts.de or from the FSFE as a sustaining member. > Does anyone know how I can get a smart card reader

Re: Why doesn't gpg-agent forwarding work?

2016-10-18 Thread Thomas Glanzmann
Hello Kevin, > Thanks for the advice. But as I mentioned, I tried using GnuPG 2.1.15 > on the target machine as well (via the packages in Debian sid), and > this did not work. gpg2 is simply not speaking to the forwarded > gpg-agent socket, however gpg-connect-agent can. Any other ideas? Check yo

Re: Why doesn't gpg-agent forwarding work?

2016-10-18 Thread Stephan Beck
Hi Kevin, Kevin Gallagher: > Hi all, > > I've tried to get this working to no avail. I've consulted past postings > to this list as well as various online references. Some people seem to > have got this to work, but most seem to have trouble. I would appreciate > any guidance or help anyone can o

Re: smartcard reader

2016-10-18 Thread NIIBE Yutaka
On 10/19/2016 12:40 AM, Stephan Beck wrote: >> FSIJ Gnuk Token >> USB ID: 234b: Ah... This is not a card reader. It is the project of Free Software Initiative of Japan (FSIJ) since 2010. FSIJ acquired USB vendor ID, specifically for this project. Please visit: https://www.fsij.org/cat