Re: OpenLDAP schema to store OpenPGP keys?

2011-02-03 Thread Peter Palfrader
ve dug through my old mail and restored the file at http://www.palfrader.org/pgp/PGPKeyserverSchema.zip Cheers, -- | .''`. ** Debian GNU/Linux ** Peter Palfrader | : :' : The universal http://www.palfrader.org/ | `. `' Operatin

Re: [Sks-devel] Re: HTTP keyserver creation.

2005-07-04 Thread Peter Palfrader
On Tue, 28 Jun 2005, Jason Harris wrote: > On Tue, Jun 28, 2005 at 04:00:54PM +0500, Victor Harutyunyan wrote: > > > I have installed gnupg-1.4.1 and apache_1.3.3. > > How can I configure HTTP keyserver? > > Try SKS: > > http://www.nongnu.org/sks/ > > (Victor appears to be using Debian; ca

no-ask-cert-expire during sign-key

2005-07-20 Thread Peter Palfrader
Hi, gpg (1.4.1) always asks whether UID certifications should expire on the same day as the primary key: | [EMAIL PROTECTED]:~$ gpg --no-ask-cert-expire --sign-key 52C8180E | [..] | pub 1024D/52C8180E created: 2004-12-11 expires: 2012-12-10 usage: CS | trust: marginal

Re: same key: pgp 2.6 version and gpg version: keyserver

2005-07-21 Thread Peter Palfrader
On Thu, 21 Jul 2005, Uwe Brauer wrote: > Where Werner advice to empty the pass-phrase in pgp2.6 import it to gpg > and then introduce a pass-phrase. > > So I conclude from that that a pgp2.6 with IDEA protected pass-phrase > is NOT the same as the imported key into gpg, where the pass phrase is >

Re: UbuntuLinux GPG Still Doesn't Work With Remailers

2005-09-26 Thread Peter Palfrader
On Mon, 19 Sep 2005, Guitar Bench wrote: > I've been trying now for almost three months and I > still can't get the Cypherpunks remailers to accept > messages encrypted with Ubuntu Linux/GPG v1.2.5. I know that gpg 1.4 (and probably also 1.2 as well, tho I don't have any systems with that anymo

Re: UbuntuLinux GPG Still Doesn't Work With Remailers

2005-09-27 Thread Peter Palfrader
On Tue, 27 Sep 2005, Werner Koch wrote: > On Mon, 26 Sep 2005 13:28:20 -0700 (PDT), Guitar Bench said: > > > --- Peter Palfrader <[EMAIL PROTECTED]> wrote: > > >> gpg --textmode --cipher-algo 3DES > >> --recipient $foo --encrypt > >>

Re: --openpgp, MDC and similar flags

2005-12-01 Thread Peter Palfrader
On Tue, 29 Nov 2005, Christoph Anton Mitterer wrote: > ... as you can see, MDC is set. Referring to > http://lists.gnupg.org/pipermail/gnupg-users/2003-May/018442.html and > RFC2440 I assume that MDC is still not part of the standard. Why is it > activated in my key? (Of course this is a good t

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Peter Palfrader
Walter Haidinger schrieb am Samstag, dem 18. Feber 2006: > Now, I'd like to setup an OpenLDAP server to store the OpenPGP keys (for > use with GnuPG). Please note that I already have a working OpenLDAP > server, so I'd only need to add schema, acls and keys, of course. > > Btw, can GnuPG also sto

Re: OpenLDAP schema to store OpenPGP keys?

2006-02-20 Thread Peter Palfrader
Walter Haidinger schrieb am Sonntag, dem 19. Feber 2006: > Peter Palfrader schrieb: > > http://asteria.noreply.org/~weasel/PGPKeyserverSchema.zip > > Thanks! One question, though: Where is this schema from? > Is it the "new" one the GnuPG announcement was talki

add notation to self sig

2006-03-07 Thread Peter Palfrader
Hey, I wanted to add a notation to my self sig on my key by giving --cert-notation on the command line and then updating the cipher preferences (as a nice way to generate a new self sig): | gpg --cert-notation [EMAIL PROTECTED] --edit 94c09c7f | Command> setpref S9 S8 S7 S3 S2 H2 H8 Z2 Z3 Z1 mdc

Re: add notation to self sig

2006-03-08 Thread Peter Palfrader
On Wed, 08 Mar 2006, David Shaw wrote: > On Tue, Mar 07, 2006 at 11:12:12PM +0100, Peter Palfrader wrote: > > Hey, > > > > I wanted to add a notation to my self sig on my key by giving > > --cert-notation on the command line and then updating the cipher > > prefe

Re: add notation to self sig

2006-03-09 Thread Peter Palfrader
On Wed, 08 Mar 2006, David Shaw wrote: > > Thanks, that seems to work (as does --expert and sign). > > If you're tracking SVN, try the latest. I've added a notation command > under --edit-key. Great, thanks. Adding notations and removing all of them works just fine. According to the manual pa

Re: add notation to self sig

2006-03-09 Thread Peter Palfrader
On Thu, 09 Mar 2006, David Shaw wrote: > Let's make it simpler: I just added the ability to delete notations > directly by using a minus sign prefix like "[EMAIL PROTECTED]". > > Given these notations: > [EMAIL PROTECTED] > [EMAIL PROTECTED] > [EMAIL PROTECTED] > > if you use "[EMAIL PROTE

Re: add notation to self sig

2006-03-17 Thread Peter Palfrader
Malte Gell schrieb am Donnerstag, dem 16. März 2006: > On Tuesday 07 March 2006 23:12, Peter Palfrader wrote: > > > I wanted to add a notation to my self sig on my key by giving > > --cert-notation on the command line and then updating the cipher > > > > gpg --

segfault in gnupg14 (was: How to sign with non-subkey?)

2006-03-22 Thread Peter Palfrader
On Tue, 21 Mar 2006, Simon Josefsson wrote: > [EMAIL PROTECTED]:~$ echo foo |gpg -a -s -v -u b565716f > gpg: using subkey AABB1F7B instead of primary key B565716F > gpg: writing to stdout > gpg: using subkey AABB1F7B instead of primary key B565716F > gpg: RSA/SHA1 signature from: "AABB1F7B Simon J

dns cert support (was: GnuPG 1.4.3 released)

2006-04-04 Thread Peter Palfrader
On Mon, 03 Apr 2006, Werner Koch wrote: > * New auto-key-locate option that takes an ordered list of methods > to locate a key if it is not available at encryption time (-r or > --recipient). Possible methods include "cert" (use DNS CERT as > per RFC2538bis, "pka" (use DNS P

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Tue, 04 Apr 2006, David Shaw wrote: > > Also, is there a tool that produces a snippet which is ready for > > inclusion into a zone file anywhere? Something similar to ssh-keygen > > for SSHFP RRs: > > [EMAIL PROTECTED]:~$ ssh-keygen -r galaxy -f /etc/ssh/ssh_host_rsa_key -g > > galaxy IN T

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Wed, 05 Apr 2006, Werner Koch wrote: > On Wed, 5 Apr 2006 10:02:28 +0200, Peter Palfrader said: > > > + const char *tmp = fpr; > > + while (*tmp) > > + { > > + if (isxdigit(*tmp)) > > Will segv on many non-glibc systems if you pass non-a

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Tue, 04 Apr 2006, Peter Palfrader wrote: > On Mon, 03 Apr 2006, Werner Koch wrote: > > > * New auto-key-locate option that takes an ordered list of methods > > to locate a key if it is not available at encryption time (-r or > > --recipient). Possib

Re: dns cert support

2006-04-05 Thread Peter Palfrader
On Wed, 05 Apr 2006, David Shaw wrote: > On Wed, Apr 05, 2006 at 12:30:42PM +0200, Peter Palfrader wrote: > > > I notice that if I have both, a IPGP and a PGP CERT RR that GnuPG fails > > to import the key some of the time: > > [..] > > > } ;; ANSWER S

fetching DE415B0E from sks ([don't know]: invalid packet (ctb=2d))

2006-04-07 Thread Peter Palfrader
Hi, running 1.4.4-cvs, when I try to download DE415B0E I get the following error: | [EMAIL PROTECTED]:~$ gpg --keyserver random.sks.penguin.de --recv 94c09c7f DE415B0E | gpg: requesting key DE415B0E from hkp server random.sks.penguin.de | gpg: requesting key 94C09C7F from hkp server random.sks.

Re: fetching DE415B0E from sks ([don't know]: invalid packet (ctb=2d))

2006-04-07 Thread Peter Palfrader
On Fri, 07 Apr 2006, David Shaw wrote: > On Fri, Apr 07, 2006 at 03:40:43PM +0200, Peter Palfrader wrote: > > Hi, > > > > running 1.4.4-cvs, when I try to download DE415B0E I get the following > > error: > > > > | [EMAIL PROTECTED]:~$ gpg --keyserver ran

Re: Cipher Question

2006-05-22 Thread Peter Palfrader
Debian GNU/Linux ** Peter Palfrader | : :' : The universal http://www.palfrader.org/ | `. `' Operating System | `-http://www.debian.org/ ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

Re: Delete uid from keyserver

2006-05-22 Thread Peter Palfrader
for that matter, from keyservers. Peter -- | .''`. ** Debian GNU/Linux ** Peter Palfrader | : :' : The universal http://www.palfrader.org/ | `. `' Operating System | `-http://www.debian.org/ ___

Re: [Sks-devel] key too large?

2006-07-13 Thread Peter Palfrader
On Fri, 14 Jul 2006, Peter Palfrader wrote: > I wonder if my key is too large for SKS to like: > > [EMAIL PROTECTED]:~$ gpg --send 94c09c7f > gpg: sending key 94C09C7F to hkp server keyserver.noreply.org > gpgkeys: HTTP post error 22: url returned error 500 > gpgkeys: no KEY

Re: [Sks-devel] key too large?

2006-07-13 Thread Peter Palfrader
On Thu, 13 Jul 2006, David Shaw wrote: > On Fri, Jul 14, 2006 at 12:32:39AM +0200, Peter Palfrader wrote: > > On Fri, 14 Jul 2006, Peter Palfrader wrote: > > > > > I wonder if my key is too large for SKS to like: > > > > > > [EMAIL PROTECTED]:~$ g

Re: [Sks-devel] key too large?

2006-07-14 Thread Peter Palfrader
END | [EMAIL PROTECTED]:~/public_html/gpg-20061714$ cat tempout.txt | VERSION 1 | PROGRAM 1.4.4-cvs | | KEY 94c09c7f FAILED 8 HTH -- | .''`. ** Debian GNU/Linux ** Peter Palfrader | : :' : The universal http://www.palfrader.org/

Re: [Sks-devel] key too large?

2006-07-14 Thread Peter Palfrader
On Fri, 14 Jul 2006, David Shaw wrote: > On Fri, Jul 14, 2006 at 04:14:43PM +0200, Peter Palfrader wrote: > > On Thu, 13 Jul 2006, David Shaw wrote: > > > > > > gpg (GnuPG) 1.4.4-cvs, looks like a snapshot built around April 5th, > > > > probably r4114. &

Re: Keyserver Software Recommendations

2006-08-14 Thread Peter Palfrader
ian-sks/trunk/sks and then dpkg-buildpackage -rfakeroot -uc -us it after installing the build dependencies. The package is not really of the quality I'ld like it to be, but it's not all that bad either. Peter -- | .''`. ** Debian GNU/Linux *

minimize not cleaning up broken binding sigs

2006-09-04 Thread Peter Palfrader
I notice that gpg (1.4.6-svn4217) does only clean signatures from UIDs, not from subkeys: | Command> minimize | User ID "Peter Palfrader": 605 signatures removed | [..] | | [EMAIL PROTECTED]:~/tmp/g$ gpg --list-sigs | ./pubring.gpg | - | pub 1024D/94C09C7F 199

Printing Keys and using OCR (was: Proofreadable base64)

2007-09-20 Thread Peter Palfrader
?metadataSearch=ocr-a&metadataSearchSubmit=Search 1. http://packages.debian.org/gocr http://packages.debian.org/etch/gocr http://jocr.sourceforge.net/ 2. http://ronja.twibright.com/optar/ 3. http://www.par2.net/ -- | .''`. ** Debian GNU/Linux ** Pe

Re: Printing Keys and using OCR (was: Proofreadable base64)

2007-09-21 Thread Peter Palfrader
On Fri, 21 Sep 2007, Brian Smith wrote: > Peter Palfrader wrote: > > Nice idea. When trying to find decent backup methods for my > > new Tor identity key I cam accross this thread. > > > > I played all day with ocr and friends. In the course I wrote > >