Re: 1.4.0a won't retrieve key from keyserver?

2005-03-22 Thread David Shaw
On Tue, Mar 22, 2005 at 08:20:05AM -0500, Jason Markley wrote: > David, > >Yes, i do have --openpgp in my gpg.conf file, and i did a > --keyserver-options keep-temp-files from the command line with the > --openpgp option. The results are attached. Thanks. I'll take a look. However, I ask

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-22 Thread David Shaw
On Tue, Mar 22, 2005 at 10:16:19AM +0100, Carlo Luciano Bianco wrote: > Il /22 mar 2005/, *David Shaw* ha scritto: > > > On Tue, Mar 22, 2005 at 12:18:03AM +0100, Carlo Luciano Bianco wrote: > >> Il /21 mar 2005/, *David Shaw* ha scritto: > >> > >> >

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-22 Thread David Shaw
On Tue, Mar 22, 2005 at 06:50:20PM +0100, Carlo Luciano Bianco wrote: > So, it was a problem of the MinGW build of the dll, maybe because it > is an old version. > > The gpgkeys_curl.exe so obtained has been compiled with the *.h files of > mingw-libcurl 7.13.0 and linked against the .a library o

Re: 1.4.0a won't retrieve key from keyserver?

2005-03-22 Thread David Shaw
On Tue, Mar 22, 2005 at 09:57:07AM -0500, Jason Markley wrote: > Taking out the --openpgp in the gpg.conf file seems to have worked for > the hkp keyserver type. What am I losing by taking that option out of > the gpgconf file? I don't want to break something else while 'fixing' > this. Attac

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-22 Thread David Shaw
On Tue, Mar 22, 2005 at 11:38:47PM +0100, Carlo Luciano Bianco wrote: > By the way, what do you think about the path problem? I tried to add > "exec- path "%PATH%"" in gpg.conf, but it does not work. It needs to > be used from the command line. I will make some other tests and I > will let you kno

Re: signature level

2005-03-22 Thread David Shaw
On Wed, Mar 23, 2005 at 12:14:25AM +0100, Marcus Frings wrote: > * Atom Smasher <[EMAIL PROTECTED]> wrote: > > On Mon, 21 Mar 2005, Janusz A. Urbanowicz wrote: > > >> How is signature level specification done in 1.4+? > > > > > --ask-cert-level > > > previously this was on b

Re: Libcurl (was Re: [Announce] GnuPG 1.4.1 released)

2005-03-23 Thread David Shaw
On Wed, Mar 23, 2005 at 10:06:03AM +0100, Carlo Luciano Bianco wrote: > Il /22 mar 2005/, *David Shaw* ha scritto: > > > On Tue, Mar 22, 2005 at 11:38:47PM +0100, Carlo Luciano Bianco wrote: > > > >> By the way, what do you think about the path problem? I tried to

Re: could not check signature

2005-03-23 Thread David Shaw
On Wed, Mar 23, 2005 at 07:29:21PM +0100, Henk de Bruijn wrote: > Hi, > > When I verified one of my own messages which had been signed pgp/mime > I got this errormessage: > > gpg: Signature made 03/23/05 12:16:08 using DSA key ID DBE6E678 > gpg: WARNING: signature digest conflict in message > gpg

Re: could not check signature

2005-03-23 Thread David Shaw
On Wed, Mar 23, 2005 at 09:02:27PM +0100, Henk de Bruijn wrote: > On Wed, 23 Mar 2005 14:51:59 -0500GMT (23-3-2005, 20:51 +0100, where I > live), David Shaw wrote: > > > On Wed, Mar 23, 2005 at 07:29:21PM +0100, Henk de Bruijn wrote: > > >> When I verified one of my

Re: could not check signature

2005-03-23 Thread David Shaw
On Thu, Mar 24, 2005 at 03:21:08AM +0100, Henk de Bruijn wrote: > On Wed, 23 Mar 2005 15:08:19 -0500GMT (23-3-2005, 21:08 +0100, where I > live), David Shaw wrote: > > > On Wed, Mar 23, 2005 at 09:02:27PM +0100, Henk de Bruijn wrote: > > >> I changed the digest

Re: could not check signature

2005-03-23 Thread David Shaw
On Thu, Mar 24, 2005 at 03:54:08AM +0100, Henk de Bruijn wrote: > On Wed, 23 Mar 2005 21:33:18 -0500GMT (24-3-2005, 3:33 +0100, where I > live), David Shaw wrote: > > > On Thu, Mar 24, 2005 at 03:21:08AM +0100, Henk de Bruijn wrote: > > >> Sorry for not telling relev

Re: Shouldn't keyservers store and provide subkeys?

2005-03-24 Thread David Shaw
On Thu, Mar 24, 2005 at 06:34:58PM +0100, Werner Koch wrote: > On Thu, 24 Mar 2005 12:04:52 GMT, Adam Funk said: > > > one at home). Then I tried to update each machine to have the new > > public subkeys (using pgp.mit.edu): > > That keyserver as well as all other servers running the old HKS > s

Re: Shouldn't keyservers store and provide subkeys?

2005-03-24 Thread David Shaw
On Thu, Mar 24, 2005 at 04:44:49PM -0500, Jason Harris wrote: > On Thu, Mar 24, 2005 at 04:20:02PM -0500, David Shaw wrote: > > On Thu, Mar 24, 2005 at 06:34:58PM +0100, Werner Koch wrote: > > > > That keyserver as well as all other servers running the old HKS > >

Re: gpg: WARNING: unsafe ownership on configuration file "/home/jason/.gnupg/gpg.conf"

2005-03-24 Thread David Shaw
On Mon, Mar 21, 2005 at 07:41:39PM -0500, Jason Wallwork wrote: > Received the warning message: > gpg: WARNING: unsafe ownership on configuration file > "/home/jason/.gnupg/gpg.conf" > > after running gpg --version as root. I don't get the warning if I run the > same > command as a regular user

Re: Shouldn't keyservers store and provide subkeys?

2005-03-24 Thread David Shaw
24, 2005 at 04:20:02PM -0500, David Shaw wrote: > > > I'm all for it. It would be nice to point people to a keyserver set > > > that works properly with everything: multiple subkeys, photo IDs, and > > > MR output. At the moment, this is just SKS servers. > > on

The PATH problem (was Re: Libcurl)

2005-03-24 Thread David Shaw
On Wed, Mar 23, 2005 at 06:24:57PM +0100, Carlo Luciano Bianco wrote: > Maybe it is possible to run the keyserver helpers not just by their > name, but by their *entire* name: instead of running > "gpgkeys_xxx.exe", gpg.exe should run > "c:\programmi\gnupg\gpgkeys_xxx.exe". In other words, instead

Re: The PATH problem (was Re: Libcurl)

2005-03-31 Thread David Shaw
On Sat, Mar 26, 2005 at 01:47:36AM +0100, Carlo Luciano Bianco wrote: > Il /25 mar 2005/, *David Shaw* ha scritto: > > > On Wed, Mar 23, 2005 at 06:24:57PM +0100, Carlo Luciano Bianco wrote: > > > >> Maybe it is possible to run the keyserver helpers not just by th

Re: key capabilities usage meanings

2005-04-01 Thread David Shaw
On Fri, Apr 01, 2005 at 06:33:13PM +0200, [EMAIL PROTECTED] wrote: > What is the meaning of usage/capabilities listings for > keys(shown, for > example, during edit-keys interactive sessions)? > S -> sign > E -> encrypt > C -> ? > A -> ? > looking at doc/DETAILS I found > C -> certification > A ->

Re: Encrypt with public key from stdin/file possible?

2005-04-13 Thread David Shaw
On Wed, Apr 13, 2005 at 02:19:04PM +0200, Sargon wrote: > Hi > > I have a public key of a recipient in ASCII or binary form and would > like to feed gpg w/o importing it first in its public keyring and > afterwards specify the ID of the public key. According to my > researches on the net and on th

Re: After installing the new release.

2005-04-15 Thread David Shaw
On Mon, Apr 11, 2005 at 10:25:43AM +0100, Raphael Van Renterghem wrote: > Hello, > > I am sorry to ask one question that could be a bit silly for an expert > like you... > > I have installed GnuPG 1.4.1 like an angel, but I am little worry about > something. > Do I need to revoke my previous ke

Re: Revocation certificate still valid after changing subkeys?

2005-04-18 Thread David Shaw
On Mon, Apr 18, 2005 at 05:11:10PM +0100, Adam Funk wrote: > When I created my keypair I dutifully created and safely stored a > revocation certificate for it. > > I recently added a new subkey and revoked the old subkey (as discussed > on this list). I've also added and revoked a few UIDs since

Re: 1.4.1 won't retrieve key from keyserver?

2005-04-21 Thread David Shaw
On Wed, Apr 20, 2005 at 03:13:38PM -0400, Jason Markley wrote: > David, > >Has this issue been fixed? Here's a recap of what I've observed. > I'm using TB 1.0.2 and gpg 1.4.1 (for windows, obviously) :) > > --- > behavior

Re: importing large keyring

2005-04-21 Thread David Shaw
On Wed, Apr 20, 2005 at 11:28:39PM +0200, Gerhard Siegesmund wrote: > > I've also seen similar "corruption" recently (with GPG 1.4.1): > > %gpg --keyserver hkp://keyserver.sascha.silbe.org --recv CA57AD7C > > Host: keyserver.sascha.silbe.org > > Command:GET > > gpgkeys: H

Re: [PATCH] gnupg.spec [WAS: unable to execute program `gpgkeys_hkp': Permission denied]

2005-04-23 Thread David Shaw
On Wed, Feb 16, 2005 at 10:44:10PM -0500, David Shaw wrote: > On Mon, Feb 14, 2005 at 04:08:00PM -0500, Todd wrote: > > > In doing so, it seems like a nicer way to solve this would be to > > simply modify two automake files in gnupg to use pkglibexecdir instead > > of l

Re: Sign more than one uid

2005-04-25 Thread David Shaw
On Mon, Apr 25, 2005 at 11:53:16AM +0200, Henk M. de Bruijn wrote: > If you don't select a uid all user id's will be signed. Is it possible > to select more than one uid for signing? Sure, just select all the user IDs you want to sign, then "sign". It's the same as signing one user ID, except ther

Re: gpg dependency issues (krb5 & klogd)

2005-04-28 Thread David Shaw
On Thu, Apr 28, 2005 at 09:59:23AM -0700, Shawn Protsman wrote: > I am running SuSE Linux Enterprise 9 on an iSeries > (Power5 chipset) server: > > > uname -a > > Linux l336649e_pub 2.6.5-7.139-pseries64 #1 SMP Fri > Jan 14 15:41:33 UTC > 2005 ppc64 ppc64 ppc64 GNU/Linux > > The installed versio

Re: can not ? receive key : connection timeout

2005-05-05 Thread David Shaw
On Thu, May 05, 2005 at 03:06:00PM +0700, jonathan wrote: > Hello >I am a new comer in linux . I want to receive key from key > server with this code I grabed . > > > $ gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 1F41B907 > > But I do this at my Home which have direct connection

Re: How to change trust model

2005-05-10 Thread David Shaw
On Tue, May 10, 2005 at 05:40:59PM +0200, Per Tunedal Casual wrote: > Hi, > I haven't managed to figure out how to change trust model. Now I am > using the classic model on all installations, but on some of them an > hierarchic model would suite better. > What are the commands and options? > And th

Re: Wherre to place keys under Linux

2005-05-10 Thread David Shaw
On Tue, May 10, 2005 at 03:20:44PM +0200, Gerrit Kruijer wrote: > Hi everybody, > i have just installed GnuPG under Linux but have a question where to put > my keys. > I want to use my keys for both root and user. I know copy them after > changes but i think that's not the best solution. > Does som

Re: How to change trust model

2005-05-10 Thread David Shaw
On Tue, May 10, 2005 at 11:52:19PM +0200, Per Tunedal Casual wrote: > gpg --trust-model PGP --check-trustdb This is the "new" PGP trust model from PGP 5 and later. > gpg --trust-model classic --check-trustdb This is the standard old trust model from PGP 2.x and GnuPG 1.2.x. For most people, th

Re: How to change trust model

2005-05-10 Thread David Shaw
On Wed, May 11, 2005 at 12:16:03AM +0200, Per Tunedal Casual wrote: > Scenario: > A new user has to quickly download keys to his contacts. The keys are > signed by a mutually trusted CA. > How can he get valid keys to use trusting the CA, rather than having > to check and sign each of them? You

Re: How to change trust model

2005-05-10 Thread David Shaw
On Wed, May 11, 2005 at 02:22:28AM +0200, Per Tunedal Casual wrote: > At 00:21 2005-05-11, David Shaw wrote: > >On Wed, May 11, 2005 at 12:16:03AM +0200, Per Tunedal Casual wrote: > > > >> Scenario: > >> A new user has to quickly download keys to his contacts

Re: How to change trust model

2005-05-12 Thread David Shaw
On Wed, May 11, 2005 at 10:05:52PM +0200, Per Tunedal Casual wrote: > now I tried: > 1. Creating one Root-CA, signing a CA-key by: > gpg --edit-key keyid > tsign > with 2 = I trust fully > and > depth = 2 > > 2. Letting a "user key" sign the Root-CA-key with > ltsign > with 2 = I trust fully >

Re: Keyserver

2005-05-13 Thread David Shaw
On Fri, May 13, 2005 at 11:55:27AM +0100, Shaun Lipscombe wrote: > Which keyserver(s) should I use? I heard that some should not be used. Just > want to know what to put in my conf file. Use subkeys.pgp.net David ___ Gnupg-users mailing list Gnupg-user

Re: Difference "gpg --armor --store" Vs. "gpg --enarmor"

2005-05-15 Thread David Shaw
On Sun, May 15, 2005 at 12:43:38PM -0700, David wrote: > Hi List, > > What is the difference between "gpg --armor --store" and "gpg --enarmor"? --armor --store creates an armored OpenPGP message: a "literal message", which is unencrypted and unsigned. --enarmor armors whatever you feed it. The

Re: importing private keys

2005-05-16 Thread David Shaw
On Thu, May 12, 2005 at 04:47:15PM -0400, [EMAIL PROTECTED] wrote: > I currently run pgp 8.1 on my Windows desktop and would like to install > gnupg on my Unix server. When I do this, will I be able to import my > keypair from PGP into gnupg so that I don't have to create a new private > and publi

Re: problem with key import

2005-05-20 Thread David Shaw
On Thu, May 19, 2005 at 12:33:15PM +0100, Karl Kashofer wrote: > Hi ! > > Would anyone know why this key can not be imported into GnuPG ? > > Keyserver: 0x133CC3FD > > It looks OK to me, imports fine in PGP and the self signature was made > one second after the key creation date. No hints in PGP

Re: 2 noob problems

2005-05-21 Thread David Shaw
On Sat, May 21, 2005 at 08:32:34PM +0100, Neil Williams wrote: > On Saturday 21 May 2005 4:53 pm, Alex L. Mauer wrote: > > Yep, I understand the purposes of key signatures. But (unlike with your > > bag/tie analogy), two signatures from the same key don't make a key > > twice as valid. > > If t

Re: 2 noob problems

2005-05-21 Thread David Shaw
On Sat, May 21, 2005 at 10:53:12AM -0500, Alex L. Mauer wrote: > On the other hand, if the signature has expired, since it becomes > meaningless there's no reason to keep it. Look at the PGP Global > Directory key for an example of where this could become a problem. > It re-signs the keys every t

Re: 2 noob problems

2005-05-21 Thread David Shaw
On Sat, May 21, 2005 at 05:36:37PM -0500, Richard Laager wrote: > On Sat, 2005-05-21 at 18:25 -0400, David Shaw wrote: > > A revoked signature similarly is deleted, and takes out > > the superceded signatures with it. > > You'd leave the signature revocation thou

Re: Output file with original filename

2005-05-22 Thread David Shaw
On Sun, May 22, 2005 at 02:32:37AM +0200, Per Tunedal Casual wrote: > Hi again, > > GPG reports original filename when I decrypt a file, but I am not familiar > with any option to get the original name on the output. --use-embedded-filename David ___

Re: Show digest-algo at signature checking

2005-05-23 Thread David Shaw
On Tue, May 24, 2005 at 04:42:28AM +0200, Per Tunedal Casual wrote: > Hi, > today when SHA-1 is questioned and some people use other digest-algos like > RIPEMD160 or even SHA256 it would be appropriate if the digest algo was > displayed when I check a signature. I haven't find any way to do this wi

Re: Unicode support

2005-05-25 Thread David Shaw
On Wed, May 25, 2005 at 01:30:22PM +0200, Sascha Kiefer wrote: > Hi list, > > Assume, i have a mail text body; it's charset is something other than > us-ascii. > Does it work (have not tried it yet) to convert the data to utf-8 and > then signing it armored? GPG doesn't really care very much ab

Re: Additional self-signature

2005-05-26 Thread David Shaw
On Fri, May 27, 2005 at 02:07:27AM +0300, Oskar L. wrote: > Werner wrote: > > When importing a secret key into a keyring without a public key, a > > public key is created from the secret key. Due to historic reasons > > the self-signature on the secret key is a different one than the one > > creat

Re: Additional self-signature

2005-05-27 Thread David Shaw
On Fri, May 27, 2005 at 10:06:12AM +0300, Oskar L. wrote: > "David Shaw" <[EMAIL PROTECTED]> wrote: > > No, it's the other way around. The public key can be created from the > > secret key. What you are seeing with the second self-signature is a > >

Re: Pref

2005-05-31 Thread David Shaw
On Wed, Jun 01, 2005 at 12:00:07AM +0200, Kiefer, Sascha wrote: > Hi > > I have same questions! > > 1. what is the difference between showpef and pref using the option > "--with-colons" ? No difference. > 2. S9 S8 S7 S3 S2 H2 H3 Z2 Z1: S=symmetric, H=hash, Z=compression? H3 means > RIPEMD160 be

Re: Pref

2005-06-01 Thread David Shaw
On Wed, Jun 01, 2005 at 10:11:06AM +0200, Kiefer, Sascha wrote: > > > 3. Will i get more than that "uid:uSascha Kiefer (test4711) > > > <[EMAIL PROTECTED]>1,:" information if i do not have a private > > > key? > > > > I'm not sure what you're asking here. > > Well, i have an automat

Re: Pref

2005-06-01 Thread David Shaw
On Wed, Jun 01, 2005 at 10:00:45PM +0200, Kiefer, Sascha wrote: > > Yes, you will. > > > > However, why are you doing this? GnuPG automatically does > > this for you. > > Not really. Only if i change the pref for the key i use. > My system is similar to the PGP universal system which runs on a

Re: compress-algo vs (cipher-algo and digest-algo)

2005-06-02 Thread David Shaw
On Thu, Jun 02, 2005 at 03:59:51PM +0200, Sascha Kiefer wrote: > The GNU Privacy Handbook declares the following > > cipher-algo name > digest-algo name > compress-algo n > > > What was to purpose to switch from name to number? > Did you want to try something else? ;) You can use names in all o

Re: Set date for signature to expire

2005-06-03 Thread David Shaw
On Sat, Jun 04, 2005 at 04:28:56AM +0200, Per Tunedal Casual wrote: > Hi, > I want to sign keys with signatures having a limited life time. Can I set > an expiration date when I sign a key? > > I often get a question if I want my signature to expire when the key > expires, so far so good. I want t

Re: How to delete superceded self signatures?

2005-06-04 Thread David Shaw
On Sat, Jun 04, 2005 at 11:36:30AM +0200, Johan Wevers wrote: > Hallo, > > When I check my own key, I see this: > > vulcan:~> gpg --edit-key 9E8C5DDF > Command> check > uid Johan Wevers <[EMAIL PROTECTED]> > sig!39E8C5DDF 2005-06-03 [self-signature] > sig! 434ABDAD 2000-08-11 Z

Re: How to delete superceded self signatures?

2005-06-04 Thread David Shaw
On Sat, Jun 04, 2005 at 09:20:07AM -0400, Dan Mundy wrote: > even though i revoked, removed, and otherwise annihilated my other uids, > then uploaded the key to the Keyserver, the revoked ones still appear. > why don't they just go away?! Keyservers do not have the ability to verify signatures (no

Re: subpacket of type 20 has critical bit set

2005-06-04 Thread David Shaw
On Sat, Jun 04, 2005 at 11:04:16PM +0800, omn wrote: > Hi, > > Just installed GnuPG 1.4.2 rc1 to my Win ME. > When I update trust db, I receive following message: > gpg: subpacket of type 20 has critical bit set. > > What does this means ? TIA. Subpacket 20 is a signature notation. What that er

Re: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-04 Thread David Shaw
On Sat, Jun 04, 2005 at 10:42:51AM +0200, Kiefer, Sascha wrote: > Hmm. > I just implemented RFC2015 3 days ago. > The format of PGP/MIME described in that paper does not match the format > you are using. > Your mails start with a Content-Type of multipart/mixed and you declare > The pgp data as att

Re: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-04 Thread David Shaw
On Fri, Jun 03, 2005 at 08:30:53PM -0400, Dan Mundy wrote: > hey all, > > i was wondering what the differences between conventional gpg > clearsigning and pgp/mime signing are. which one's better for what? > which should i use more often? please help me! When at all possible, use PGP/MIME. It's

Re: GnuPG Clearsign vs. PGP/MIME Signing

2005-06-04 Thread David Shaw
On Sat, Jun 04, 2005 at 07:12:51PM -0400, Dan Mundy wrote: > David Shaw wrote: > > Plus, plus, plus. > > No minuses, though, i hope? One or two, yes. Mainly that there are programs out there that - even this many years later - don't understand it. Outlook is the chief

Re: Additional self-signature

2005-06-06 Thread David Shaw
On Sun, Jun 05, 2005 at 10:40:05AM +0300, Oskar L. wrote: > Hi, > > Using the release candidate for version 1.4.2, I imported my public and > secret key, and just like with version 1.4.1 I got double self-signatures > on it. Yes. This will happen with any version. It depends on what version of

Re: How to use a revokation key

2005-06-07 Thread David Shaw
On Wed, Jun 08, 2005 at 05:04:52AM +0200, Per Tunedal Casual wrote: > Hi, > I would like to revoke a key with a designated revokation key. How is this > done? Are you asking how to add a designated revoker to a key or are you the designated revoker and you want to issue a revocation for a key? Fo

Re: Serpent

2005-06-13 Thread David Shaw
On Mon, Jun 13, 2005 at 06:01:35PM +0200, Dario Pilori wrote: > Is there a Serpent plugin for GnuPG? No. Serpent is not part of OpenPGP. David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Compatibility with Eudora and Apple Mail

2005-06-14 Thread David Shaw
On Fri, Jun 10, 2005 at 03:13:20PM +0100, Julian Kramer wrote: > > -- > Is GnuPGP compatible with Eudora and Apple Mail? http://www.macupdate.com/info.php/id/7654 David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: import pgp public key in gnupg

2005-06-14 Thread David Shaw
On Tue, Jun 14, 2005 at 10:01:14AM +0200, [EMAIL PROTECTED] wrote: > Hello, > > I want to import a public key from pgp 8.1 into gnupg 1.4.1. > The pgp key is RSA 1024. > > gpg returns this error messages: > > gpg: armor header: Version: PGP 8.1 > gpg: can't handle public key algorithm 100 > gpg:

Re: Set date for signature to expire

2005-06-14 Thread David Shaw
On Tue, Jun 14, 2005 at 02:58:32PM +0200, Jan Niehusmann wrote: > On Wed, Jun 08, 2005 at 02:09:59AM +0200, Per Tunedal Casual wrote: > > True, but it might be convenient anyhow. The shorter the time, the safer > > the guess! > > > > One way is to assume that the key is attacked immediately and th

Re: How to import a secret subkey?

2005-06-21 Thread David Shaw
On Tue, Jun 21, 2005 at 10:44:40AM +0100, Adam Funk wrote: > I recently created a new subkey for a keypair that I use on two > machines, but I cannot get the subkey onto the second machine. I have > tried gpg --export, --export-secret and --export-secret-subkey on the > first computer but gpg -

Re: Message Digest

2005-06-22 Thread David Shaw
On Tue, Jun 21, 2005 at 06:04:16PM +0200, Ruben De Visscher wrote: > I heard that recently, the SHA-1 message digest has been broken. > Because GnuPG uses this algorithm to make its digital signatures i > think it would be a good thing to implement a safer digest like SHA-2 > for example. GnuPG

Re: is gnupg can retrieve only ascii keys from http?

2005-06-23 Thread David Shaw
On Thu, Jun 23, 2005 at 09:51:27AM +0300, Maxim Britov wrote: > gpg can retrieve only ascii keys from http? > > $ LANG= gpg --keyserver http://www.clamav.net/gpg/tkojm.gpg --recv-keys > 0x985A444B > gpg: requesting key 985A444B from http server www.clamav.net > gpgkeys: key 985A444B not found on

Re: UTF-8 support

2005-06-26 Thread David Shaw
On Fri, Jun 24, 2005 at 05:52:07PM +0200, Alain Bench wrote: > [copy to libiconv author] > > Hello, > > On Saturday, May 21, 2005 at 9:21:01 AM +0200, [EMAIL PROTECTED] wrote: > > > when setting utf-8 for cmd.exe, gpg switches back to its default > > character set. In cmd.exe I do the follw

Re: "--for-your-eyes-only"

2005-06-26 Thread David Shaw
On Sun, Jun 26, 2005 at 11:55:52PM -0400, Charly Avital wrote: > According to man gpg: > --- > Set the `for your eyes only' flag in the message. This > causes GnuPG to refuse to save the file unless the --output > option is given, and PGP to use the "secure viewer" with

Re: "--for-your-eyes-only"

2005-06-27 Thread David Shaw
On Mon, Jun 27, 2005 at 11:16:47AM +, Charly Avital wrote: > when a message processed in MacGPG (GnuPG for the Mac), with those two > options, is decrypted using GnuPG (e.g. by command line) the verbose gpg > output contains a line reading: > gpg: NOTE: sender requested "for-your-eyes-only" >

Re: your mail

2005-07-03 Thread David Shaw
On Sun, Jul 03, 2005 at 10:54:07PM +0200, [EMAIL PROTECTED] wrote: > Hi list, > > I'm using GnuPG 1.4.1 on WinXP Service Pack 2. Whenever I --clearsign a text > message containing some kind of list, dash characters get duplicated. Is > that a feature or bug? See yourself ... Feature. Those dashe

Re: pgp and gpg

2005-07-06 Thread David Shaw
On Wed, Jul 06, 2005 at 03:00:54PM +0200, Hiamal wrote: > I'm a litle bit confused about two different messages, one from gnupg > 1.4.1(Debian sid) an one from PGPfreeware 6.5.3(Win) for the same > e-mail. > > gnupg> gpg: BAD signature from "." > > pgp> *** Status: Good Signature from Inval

Re: FTP Issues

2005-07-07 Thread David Shaw
> Also, what is the best version to install on an AIX system? Will > 1.4.1 work? It should, yes. David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Security problem with zlib

2005-07-07 Thread David Shaw
On Thu, Jul 07, 2005 at 11:17:48PM +0200, Johan Wevers wrote: > Hello, > > I just read on www.tweakers.net that there was a new security problem > with zlib. Patches for several OSes are out and the maintainer has > announced an update. Does this problem has any implication for GnuPG, > like the p

Re: set-policy-url

2005-07-07 Thread David Shaw
On Thu, Jul 07, 2005 at 06:25:51PM -0700, Charles Mauch wrote: > I was browsing through the gnupg manual the other day and was wondering > about what (if any) conventions are in use for the --sig-policy-url and > --cert-policy-url options. > > From what I guess, --cert-policy-url should point to a

Re: Security problem with zlib

2005-07-08 Thread David Shaw
On Fri, Jul 08, 2005 at 09:44:32AM +0200, Johan Wevers wrote: > David Shaw wrote: > > >If you compile GnuPG on a system that has a zlib, the system zlib is > >used. Your system zlib may or may not be vulnerable to the recent > >problem. If your system zlib is vul

Re: Revoking Keys

2005-07-10 Thread David Shaw
On Sun, Jul 10, 2005 at 12:22:54PM +0100, Graham wrote: > Recently I generated some keypairs with their relevant revocation > certificates, but was not able to save my new keyrings before the PC > crashed :-( > > I am therefore dependent on using an old keyring without these new keys > plus the

Re: Development version warning

2005-07-10 Thread David Shaw
On Sun, Jul 10, 2005 at 09:00:37AM -0500, Nicholas E. Bebout wrote: > Is there a option for gpg.conf to disable the "This is a development > version, etc" warning? No. David ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/

Re: revokation thing

2005-07-10 Thread David Shaw
On Sun, Jul 10, 2005 at 08:49:26PM +0200, Folkert van Heusden wrote: > Hi, > > How do I create such a revocation certificate without revoking my key > yet? Could not find it. gpg --gen-revoke (thekey) This outputs the revocation certificate. Save it somewhere, and you're done. David _

Re: how do I excrypt a file so that it can be opened with CA PGP

2005-07-10 Thread David Shaw
On Sun, Jul 10, 2005 at 03:09:21PM -0400, Bill Fears wrote: > Gnupg has a fact that referers to PGP compatiblity, but does anyone > have any experinses they can share? > > I used gpg -r --compress-algo 1 --cipher-algo cast5 -e There are many different versions of PGP. What you are doing will

Re: Direct LDAP access

2005-07-12 Thread David Shaw
On Tue, Jul 12, 2005 at 10:31:48AM -0500, Wes wrote: > I hope this isn't a duplicate question. I can't believe it hasn't come up > before, but I searched the 70MB archive file and found nothing. > > I tweaked (contorted?) our LDAP server to respond to PGP/GPG key retrieval > requests. However, i

Re: catching output from gpg --verify

2005-07-20 Thread David Shaw
On Tue, Jul 19, 2005 at 01:21:00PM -0400, Brad Tilley wrote: > Hello Gnupg users, > > I am writing a script to automate the downloading and building of Linux > kernels. As a part of the script, I use gpg to check and make sure that > the kernel key is installed: > > check = os.popen('gpg --li

Re: same key: pgp 2.6 version and gpg version: keyserver

2005-07-21 Thread David Shaw
On Thu, Jul 21, 2005 at 04:18:00PM +, Uwe Brauer wrote: > Hello > > > Several years ago I submitted my pgp 2.6 to the key server > http://math-www.uni-paderborn.de/pgp/. > > Now I successfully exported that key to gpg. (The key as in both > program the same ID) > > I would like to submit b

Re: same key: pgp 2.6 version and gpg version: keyserver

2005-07-21 Thread David Shaw
On Thu, Jul 21, 2005 at 05:21:13PM +, Uwe Brauer wrote: > >>>>> "David" == David Shaw <[EMAIL PROTECTED]> writes: > > David> On Thu, Jul 21, 2005 at 04:18:00PM +, Uwe Brauer > David> wrote: There is only one version of the key

Re: same key: pgp 2.6 version and gpg version: keyserver

2005-07-21 Thread David Shaw
On Thu, Jul 21, 2005 at 07:46:44PM +, Uwe Brauer wrote: > >>>>> "David" == David Shaw <[EMAIL PROTECTED]> writes: > > David> On Thu, Jul 21, 2005 at 05:21:13PM +, Uwe Brauer wrote: > >> >>>>> "David" ==

Re: no-ask-cert-expire during sign-key

2005-07-22 Thread David Shaw
On Wed, Jul 20, 2005 at 03:11:51PM +0200, Peter Palfrader wrote: > Hi, > > gpg (1.4.1) always asks whether UID certifications should expire on the > same day as the primary key: > > | [EMAIL PROTECTED]:~$ gpg --no-ask-cert-expire --sign-key 52C8180E > | [..] > | pub 1024D/52C8180E created: 2004

Re: Filename for digests

2005-07-22 Thread David Shaw
On Sat, Jul 16, 2005 at 10:44:52PM -, Greg Sabino Mullane wrote: > > > > Yes, I agree that the standard format is the best one to use, but I was > > asking about the name of the file, not it's format. For example, if I'm > > going to share a directory with 1000 files, it would be inconvenient

Re: Filename for digests

2005-07-22 Thread David Shaw
On Sat, Jul 23, 2005 at 03:33:53AM +, Oskar L. wrote: > > Red Hat and others use a filename of "MD5SUM", which is a clearsigned > > file containing the human readable MD5 hashes. I like your CHECKSUMS > > idea better since MD5 isn't the way to go any longer. > > Naming a file containing hashe

Re: Changing the email address on an existing key...how? Should I?

2005-07-22 Thread David Shaw
On Fri, Jul 22, 2005 at 05:52:07PM -0700, [EMAIL PROTECTED] wrote: > Is it possible (or advisable) to change the email address on an existing pgp > key? > > I'm using GnuPG 1.4.1 on Linux. The man pages do not show how to change or > edit the mail address of an existing key. > > I've had the ke

Re: gpg doesn't know

2005-07-24 Thread David Shaw
On Sun, Jul 24, 2005 at 11:58:13PM +0400, Vladimir N. Kutinsky wrote: > Does anyone know what it means? > > "gpg: CRC error; 92501E - 300D6B > gpg: [don't know]: invalid packet (ctb=2b)" Corrupted message. In this particular case, corrupted ascii armor. David __

Re: zlib inflate problem

2005-07-24 Thread David Shaw
On Sun, Jul 24, 2005 at 08:00:48PM +0400, Vladimir N. Kutinsky wrote: > Hi, > I am decrypting files sent to me by another user through my HTTP server. > Quite often I get errors that look like the following snippet: >"gpg: fatal: zlib inflate problem: oversubscribed dynamic bit lengths > tree >

Re: Best/correct way to back up keys and configuration?

2005-07-28 Thread David Shaw
On Thu, Jul 28, 2005 at 02:31:44PM +0100, Adam Funk wrote: > What's the best way to back up my GnuPG keyrings -- just a tar.gz of the > ~/.gnupg directory? > > Or is there any advantage to producing additional files with the > "--export" and "--export-secret-keys" commands? > > (I know that the

Re: Entropy in ascii-armored output?

2005-07-29 Thread David Shaw
On Fri, Jul 29, 2005 at 03:59:16PM -0700, Chris De Young wrote: > Hi, > > Some people have started to suggest that actually writing down > passwords, if they're kept in a secure place, might not be a bad > idea; the rationale is that passwords which can be considered "good" > are reaching the poin

Re: [Announce] GnuPG 1.4.2 released

2005-07-30 Thread David Shaw
On Sat, Jul 30, 2005 at 02:20:35PM -0400, Jason Harris wrote: > On Wed, Jul 27, 2005 at 09:53:27AM +0200, Werner Koch wrote: > > > We are pleased to announce the availability of a new stable GnuPG > > release: Version 1.4.2 > > > What's New > > === > > > * New experimental HKP keyse

Re: IPv6 failover?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 02:32:16PM -0400, Jason Harris wrote: > On Sat, Jul 30, 2005 at 09:28:28PM -0400, David Shaw wrote: > > On Sat, Jul 30, 2005 at 02:20:35PM -0400, Jason Harris wrote: > > > Thought you'd get a kick out of that... > > :) > > >

Re: Primary certify-only key?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 07:26:38PM +0200, Thomas Kuehne wrote: > Is there a way to generate the following key collection with GnuPG? > > pub 4096R usage: C > sub 4096R usage: S > > The problem is that I cant create the first key with only "C" the > capability. > > Using the --expert option a

Re: Encrypting an e-mail to a Hushmail user

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 02:28:17PM -0500, JB wrote: > > Hi gang, > > Yesterday I tried valiantly to get a Hushmail user to install GPG or PGP > (6.5.8...still free and a good version) on his M$ system, but he said it was > too hard to work and Hushmail was nice and easy. > Anyway, after a

Re: Leave clearsigned content encoding alone, how?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 08:57:07PM +, Michael Kjorling wrote: > I use gnupg-1.4.1 on GNU/Linux (up-to-date Gentoo, Linux 2.6.12 on > AMD64 if it matters) to sign and encrypt my mail, and everything is > fine as long as I stay with strictly us-ascii. However, when I use > other characters (mostl

Re: IPv6 failover?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 06:32:46PM -0400, Jason Harris wrote: > On Wed, Aug 03, 2005 at 02:48:16PM -0400, David Shaw wrote: > > On Wed, Aug 03, 2005 at 02:32:16PM -0400, Jason Harris wrote: > > > > Here's one, on a box with IPv6 support but not connectivity: >

Re: IPv6 failover?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 08:18:35PM -0400, Jason Harris wrote: > On Wed, Aug 03, 2005 at 07:25:41PM -0400, David Shaw wrote: > > > The thing is, if you have a --with-libcurl build, this failover would > > need to happen within curl itself. What happens if you d

Re: SKS v. unknown HTTP headers (was: Re: IPv6 failover?)

2005-08-04 Thread David Shaw
On Thu, Aug 04, 2005 at 12:24:27AM -0400, Jason Harris wrote: > > Also, going back to the original problem, can you send me the output > > when you try fetching a key with "--keyserver-options debug" set? > > OK, with --recv I see it falls back from v6 to v4, which is good, but it > fails with --

Re: SKS v. unknown HTTP headers (was: Re: IPv6 failover?)

2005-08-05 Thread David Shaw
On Fri, Aug 05, 2005 at 06:33:25AM -0400, Jason Harris wrote: > On Thu, Aug 04, 2005 at 07:54:09AM -0400, David Shaw wrote: > > On Thu, Aug 04, 2005 at 12:24:27AM -0400, Jason Harris wrote: > > > > Thus, in reality, the "Expect: 100-continue" header appears t

<    3   4   5   6   7   8   9   10   11   12   >