GnuPG User ID expiry

2015-09-25 Thread Jens Lechtenboerger
Hi there, I tried to generate test keys with expired user IDs (under faked system time), but I failed, with gpg 1.4 as well as 2.1.8. I tried to use the options default-sig-expire and default-cert-expire as well as ask-sig-expire and ask-cert-expire when adding user IDs via --edit-key. However,

Re: GnuPG User ID expiry

2015-10-02 Thread Jens Lechtenboerger
Hi Daniel! On 2015-09-29, Daniel Kahn Gillmor wrote: > On Fri 2015-09-25 00:49:48 -0700, Jens Lechtenboerger wrote: > >> I tried to generate test keys with expired user IDs (under faked >> system time), but I failed, with gpg 1.4 as well as 2.1.8. > > with 2.1.8, i get

gpgsm with empty passphrase?

2015-10-15 Thread Jens Lechtenboerger
Hi there, I fail to use gpgsm from 2.1.9 with empty passphrases for test keys. (2.0.x works with the workaround described there: https://bugs.gnupg.org/gnupg/issue2126) I’m using gpgsm compiled via “make -f build-aux/speedo.mk native” with exported PATH and LD_LIBRARY_PATH. In the directory wit

gpgsm and dirmngr

2013-12-15 Thread Jens Lechtenboerger
Dear reader, I’m experimenting with gpgsm and dirmngr. Please redirect me to a more appropriate mailing list, if it exists. Does dirmngr only speak LDAPv2? If I configure a LDAPv3 server, it complains about the “historical protocol” upon bind from dirmngr. This appears to indicate use of v2 by

gpgsm and encrypt-to

2013-12-17 Thread Jens Lechtenboerger
Hi there, gpgsm has the option encrypt-to, which is not mentioned in the man page. Is that option stable or might it disappear in the future? Thanks Jens ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-

gpgsm and trusted keys

2013-12-17 Thread Jens Lechtenboerger
Hi there, after I imported my private key into gpgsm, it was not trusted for signatures by gpgsm, because the root CA was not trusted. After enabling allow-mark-trusted in gpg-agent.conf, gpg-agent asks whether I trust the root CA. Saying "yes" creates ~/.gnupg/trustlist.txt with the root certif

Re: gpgsm, certificate expired, different certificate, epa does not encrypt

2013-12-18 Thread Jens Lechtenboerger
On Mi, Dez 18 2013, Uwe Brauer wrote: > I am using Xemacs, gnus the epa pkg for encrypting s/mime using gpgsm. > > I have several email accounts with different (comodo certificates). > Now one certificate for the address addre...@gmail.com has expired. > > However I want to send an email from add

Re: gpgsm and dirmngr

2013-12-20 Thread Jens Lechtenboerger
On So, Dez 15 2013, Jens Lechtenboerger wrote: > Does dirmngr only speak LDAPv2? If I configure a LDAPv3 server, it > complains about the “historical protocol” upon bind from dirmngr. > This appears to indicate use of v2 by dirmngr. As a workaround I retrieve certificates with l

Re: 2.x

2013-12-22 Thread Jens Lechtenboerger
On Sa, Dez 21 2013, Uwe Brauer wrote: > I am on Kubuntu 10.04 and I have both gnupg and gnupg2 installed. Now > since 2.x is not affected by the problem mentioned I prefer to use > it. However how can I be sure that gnupg2 is used for my email > correspondence for which I use pgp-mime and not gnup

Re: 2.x

2013-12-22 Thread Jens Lechtenboerger
On So, Dez 22 2013, Uwe Brauer wrote: > "Jens" == Jens Lechtenboerger >> P.S. Do you know Mail-Followup-To (MFT)? > > hm, I am reading this group via gmane (and news) I use simply > gnus-summary-followup-with-original which results in a mail > to Newsgroups:

OT: MFT and posting via gmane (was: Re: 2.x)

2013-12-27 Thread Jens Lechtenboerger
Hi there, I’m posting this via gmane with header “Mail-Copies-To: never”, which should be translated to an MFT header by Gmane (see http://gmane.org/post.php). From the Message manual: For instance, if you're running Gnus and wish to insert a `Mail-Copies-To' header in all your news articles and

Re: New beta

2014-09-23 Thread Jens Lechtenboerger
On 2014-09-18, Werner Koch wrote: > To quickly build all required software without installing it, the > Speedo method may be used: > > make -f build-aux/speedo.mk native I get this: --8<---cut here---start->8--- autogen.sh: cross compiler kit not installed a

Re: New beta

2014-09-24 Thread Jens Lechtenboerger
On 2014-09-23, Werner Koch wrote: > On Tue, 23 Sep 2014 17:29, lech...@wi.uni-muenster.de said: > >>> make -f build-aux/speedo.mk native >> >> I get this: >> autogen.sh: cross compiler kit not installed > > You seem to be building for Windows but I wonder how you did this given that > > TARGET

Re: New beta

2014-09-26 Thread Jens Lechtenboerger
On 2014-09-25, Werner Koch wrote: > On Wed, 24 Sep 2014 17:56, lech...@wi.uni-muenster.de said: > >> This is what happens if I extract gnupg-2.1.0-beta834.tar.bz2 and >> execute that command on Ubuntu 10.04.4 LTS. > > Hmmm. The first call to gnupg's autogen.sh is > > ./autogen.sh --silent --prin

Re: smart card under linux

2014-10-22 Thread Jens Lechtenboerger
On 2014-10-21, Philip Jackson wrote: > It then treats the other protocol, PC/SC, but all it says is "TODO > - To use PC/SC make sure you disable CCID by passing the > --disable-ccid option to GnuPG." > > From this I assumed that CCID was perhaps either preferred / more > important / more useful /

gpgsm signatures fail starting with 2.1.0-beta864

2014-10-29 Thread Jens Lechtenboerger
Hi there, I cannot sign messages with gpgsm any more. beta834 was (and is) still working, with beta864 and beta895 invalid signatures are created: --8<---cut here---start->8--- echo "Hi" > test.txt gnupg-2.1.0-beta864/sm/gpgsm -o test.txt.sig --sign test.txt gp

Re: gpgsm signatures fail starting with 2.1.0-beta864

2014-10-31 Thread Jens Lechtenboerger
On 2014-10-29, Werner Koch wrote: > The only changes for gpgsm since beta834 are related to the key > storage. Without any log output I can't help very much. Please > check that the correct gpg-agent is used and not some older > version - has it been started and is still running after the test >

Re: how vulnerable is "hidden-encrypt-to"

2012-08-20 Thread Jens Lechtenboerger
On Sa, Aug 18 2012, Daniel Kahn Gillmor wrote: > On 08/17/2012 11:16 AM, Hauke Laging wrote: >> Am Fr 17.08.2012, 09:56:56 schrieb auto15963931: >>> or what key ID >>> had been used in conjunction with that option? Thanks. >> >> You need the private recipient key in order to find out that key >>

Re: how vulnerable is "hidden-encrypt-to"

2012-08-20 Thread Jens Lechtenboerger
On Mo, Aug 20 2012, ved...@nym.hush.com wrote: > On Mon, 20 Aug 2012 09:38:49 -0400 Jens Lechtenboerger > wrote: > >> if a message M is encrypted to you and other >>recipients using RSA, then you are of course able to obtain the >>session key K. Now, if you suspect A

Re: how vulnerable is "hidden-encrypt-to"

2012-08-21 Thread Jens Lechtenboerger
On Mo, Aug 20 2012, ved...@nym.hush.com wrote: > On Mon, 20 Aug 2012 13:57:41 -0400 Jens Lechtenboerger > wrote: > >>In contrast, I interpreted the original question in terms of >>recipient anonymity: Bob wants to encrypt a message to some >>undisclosed list of recip

Re: A safe text editor

2012-09-07 Thread Jens Lechtenboerger
On Mi, Sep 05 2012, notizblock wrote: > Am 2012-09-05 09:39, schrieb antispa...@sent.at: > >> Could you recommend a safe text editor, in the sense it does protect the >> edited contents in memory, but, most important, on the disk (temp files >> and such). Having functions to interact with gnupg wo

Re: A safe text editor // why??

2012-09-11 Thread Jens Lechtenboerger
On Di, Sep 11 2012, Peter Lebbing wrote: > I think people want it because editing a text file *now* might > expose the data *far into the future*. Temp files and swap pages > have the potential to live on your hard disk for a very long time. > [...] > The only sure-fire remedy against a temp file

Re: Smart card works with GPG v1 but not with GPG v2 on Ubuntu

2013-06-30 Thread Jens Lechtenboerger
On Sa, Jun 29 2013, Pete Stephenson wrote: > Ok, but isn't pcscd the scdaemon? No. Actually, I don’t know anything about the Crypto Stick but I’m using an OpenPGP smartcard. I don’t need pcscd at all. In fact, on one of my machines pcscd was installed and interfered with scdaemon. I wrote abou

Re: Practical use of gpgsm for verifying emails

2018-04-30 Thread Jens Lechtenboerger
On 2018-04-28, Teemu Likonen wrote: > When verifying an S/MIME message gpgsm (I think) asks whether I > ultimately trust some certificate authority to certify others and then > asks me to verify that a displayed fingerprint belongs to the authority. > How do I know? (So far I have pressed the "Can