the .gnupg directory and fuse.encfs a problem

-keys I obtained gpgsm: lock not made: link() failed: Operation not permitted So what is the problem? Thanks Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

gpgsm and expired certificates

Hello I use gpgsm, via gnus+Xemacs and I have installed a free certificate from Comodo. This certificate expires in a couple of weeks and I have to apply for a new one. However I need the old one to read old messages. Can gpgsm deal with this situation? thanks Uwe Brauer smime.p7s

Re: gpgsm and expired certificates

I only have to import it into gpgsm and gpgsm will know by the date of the certificate which certificate to use for which message? - old for old messages - the new for the new messages thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature __

Re: gpgsm and expired certificates

ted which gets signed again. But your comment above seems to indicate that the old pair gets a new signature. Is this correct? But what if I apply with a different browser I applied the last time. thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature __

Re: gpgsm and expired certificates

> If you generate a new keypair for the new certificate (which is > probably a good idea) then gpgsm (and presumably any other > certificate-using software) will figure out what private key will be > needed to decrypt a particular message and, so long as you still have > the private

Re: gpgsm and expired certificates

t would always embed the public key in the signature Then a think gpg would be as easy to use as smime, but till then Uwe Brauer Footnotes: [1] I tried to use gpg on a non jailbroken iPhone and it is honestly a hassle. smime.p7s Description: S/MIME cryptographic signature

Re: gpgsm and expired certificates

>> "MFPA" == MFPA writes: > Hi > On Sunday 27 October 2013 at 2:46:05 PM, in > , Uwe Brauer wrote: > Isn't the NSA "a government based organisation?" Surely > guilt-by-association renders every government based organisation just

Re: gpgsm and expired certificates

apparently I didn't see it when I first read your message. That was *precisely* my point, thanks for clarifying it Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: gpgsm and expired certificates

h as outlook, thunderbird or Apple mail to use them or to use public keys sent by such certificates. [4] Uwe Brauer Footnotes: [1] I must add that I don't share your general view about government based organisations. I still hope that abuse is the exception not the rule.. [2] alth

Re: gpgsm and expired certificates

>> "MFPA" == MFPA writes: Hi > Hi > On Monday 4 November 2013 at 10:43:43 PM, in > , Uwe Brauer wrote: >> - from my own experience I am convinced that smime >> is much easierthan gpg[2] for reasons I am not >> going

Re: gpgsm and expired certificates

ve to install openssl a part) However it is not necessary I just export our signature as a pem file and import in under authorities. Still this is very uncomfortable... regards Uwe Brauer BTW, I see you switched back to pgp, but why do you use old inline mode and not pgpmine? smime.p7s Descript

Re: gpgsm and expired certificates

>> "MFPA" == MFPA writes: > Hi > On Thursday 7 November 2013 at 11:16:36 AM, in > , Uwe Brauer wrote: > I had to search for and import some more root certificates from the > Comodo website before I could encrypt to you using my mailer's

gpgsm, certificate expired, different certificate, epa does not encrypt

pired. thanks Uwe Brauer gpgsm --no-tty --status-fd 1 --yes --output /tmp/oub/epg-outputR_HIIF --detach-sign -u F69E1EFB6147C786 gpgsm: note: non-critical certificate policy not allowed gpgsm: note: non-critical certificate policy not allowed gpgsm: note: non-critical certificate policy not al

Re: gpgsm, certificate expired, different certificate, epa does not encrypt

>> "Jens" == Jens Lechtenboerger >> writes: > On Mi, Dez 18 2013, Uwe Brauer wrote: >> I am using Xemacs, gnus the epa pkg for encrypting s/mime using gpgsm. >> > Hi Uwe, > if I understand you correctly, you fail to encrypt to you

Re: gpg-rsa-key decryption with a mobile

ell that is what I posted a few hours ago to this list ;-). Since you are mentioned in this webpage, do you know by any chance whether gpgsm is vulnerable in a similar way? Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-u

2.x (was: [Announce] [security fix] GnuPG 1.4.16 released)

ce 2.x is not affected by the problem mentioned I prefer to use it. However how can I be sure that gnupg2 is used for my email correspondence for which I use pgp-mime and not gnupg? (I am using Xemacs+gnus) thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature __

Re: 2.x

>> "Jens" == Jens Lechtenboerger >> writes: > On Sa, Dez 21 2013, Uwe Brauer wrote: >> I am on Kubuntu 10.04 and I have both gnupg and gnupg2 >> installed. Now since 2.x is not affected by the problem mentioned >> I prefer to use it. Ho

Re: 2.x

>> "K" == K Raven writes: > Hi, > I'm using Kubuntu (13.10) too and because many packets depend on gnupg, > i use the Alternatives system to leave gnupg1 installed and use gnupg2 > in parallel. You can see that on > (in German

Re: 2.x

>> "Tristan" == Tristan Santore writes: > On 22/12/13 17:24, Uwe Brauer wrote: >>>> "K" == K Raven writes: > You being German has nothing to do with the fact you can read it. I am > British, I can also read it. > ;-p Correct, b

Re: 2.x

>> "Jens" == Jens Lechtenboerger >> writes: > On So, Dez 22 2013, Uwe Brauer wrote: >> "Jens" == Jens Lechtenboerger >> > P.S. Do you know Mail-Followup-To (MFT)? >> Do you find this annoying? > MFT has benefi

Re: OT: MFT and posting via gmane

>> "Jens" == Jens Lechtenboerger >> writes: > (defun my-message-header-setup-hook () > (let ((group (or gnus-newsgroup-name ""))) > (when (or (message-fetch-field "newsgroups") > (gnus-group-find-parameter group 'to-address) > (gnus-group-find-p

time delay unlock private key.

p and smime keys are secured by a password, but there is no time delay, which makes a brute force attack possible. Could a time delay be implemented similar to the one I just mentioned? regards Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnup

RFC3156: "application/pgp-keys" support enigmail, gnus etc

t seems that enigmail does not recognise the key! Does anybody know whether other MUA support this format? thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

pgp export private key with password

> oub2.asc Did not really add a passphrase, since I could import oub2.asc as a different user, without being asked the password. Any advice is strongly appreciated. Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-us

Re: pgp export private key with password

>> "David" == David Shaw writes: > On Jan 27, 2014, at 3:02 PM, Uwe Brauer wrote: >> Hello >> >> I just tried out iPGmail a app for the iPhone which supports >> pgp. However I want to import my private key and here the trouble >&

Re: pgp export private key with password

>> "David" == David Shaw writes: >> >> However it seems that the application expects for some reason another a >> password during the import process. > Interesting. I wonder why it does that - perhaps it stores the key > unencrypted internally? What happens if you provide your r

Re: RFC3156: "application/pgp-keys" support enigmail, gnus etc

>> "Daniel" == Daniel Kahn Gillmor writes: > Hi Uwe-- >> >> I just implemented such a feature for gnus in Xemacs, but it seems that >> enigmail does not recognise the key! Does anybody know whether other MUA >> support this format? > This seems like a question you'd want to as

old pgp2.6x keys imported in gpg (compile pgp 2.6)

?? I just tried to compile old 2.62 on kubuntu 10.04 but failed, does anybody has a suggestion? thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/ma

default (secret) key for gpg

Hello Finally I decided to generate a new 4096 keypair. Now gpg --list-keys tells me I have sec 1024R/93B61FDD 1998-09-17 uid Uwe Brauer uid Uwe Brauer uid Uwe Brauer uid Uwe Brauer sec 4096R/65AD077A 2014-01-28 uid

Re: old pgp2.6x keys imported in gpg (compile pgp 2.6)

>> "Kristian" == Kristian Fiskerstrand >> writes: > http://www.kfwebs.net/articles/article/42/GnuPG-2.0---IDEA-support > <#secure method=smime mode=sign> cool, thanks! smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users maili

Re: default (secret) key for gpg

>> "Werner" == Werner Koch writes: > (setq mml2015-signer "0x65AD077A") The correct setting is (setq mml2015-signers (list "0x65AD077A")) Just in case smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnup

gpg vs smime, snowden etc

of the key for the symmetric encryption. Maybe there are others. Any comments? Thanks Uwe Brauer Footnotes: [1] and I presume the Guardian and the New York Times as well. [2] although the documents do not provide any information concerning the key length and the gpg version

gpgsm: smime, various secret keys, various email addresses how to configure

author referred to the gpgsm manual or the mailing list, however I can't find a relevant description Can somebody help me? Thanks very much in advance Uwe Brauer Footnotes: [1] I used gpg, but most of the people I correspondence considered it as to user unfri

embedded public key in signature as in smime.

Hello Are there any plans to modify the signature (backward compatible?) such that it contains the public key embedded as in smime? thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users

Re: embedded public key in signature as in smime.

>> "Daniel" == Daniel Kahn Gillmor writes: > On 01/08/2013 05:02 PM, Uwe Brauer wrote: >> Are there any plans to modify the signature (backward compatible?) such >> that it contains the public key embedded as in smime? > Not that i know of. Why

Re: Vulnerable clients

er, and I quote, , | If you allow a mail user agent to render HTML for you, you expose | yourself to various kinds of surveillance and swindles. Now, it seems, | one of those might be a decryption exploit. | | Does the exploit depend on Javascript code that the MUI will execute? ` Any c

gpgsm 2 valid certificates

list Thanks Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

can't encrypt with public key from sectigo (former comodo)

0xCC6EDB92': Missing issuer certificate How can I solve that issue? Thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: can't encrypt with public key from sectigo (former comodo)

Sent from my iPhone > On 6. Feb 2019, at 18:03, Ingo Klöcker wrote: > > Add the CA certifcate of Sectigo to ~/.gnupg/trustlist.txt My problem was I did not know where to find that CA certificate! Pointers are welcome. Finally I solved it as I described in a different message. smime.p7s De

missing root certificate, SMIME spanish government

#x27;t have I start to be desperate, what do I miss? Thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: missing root certificate, SMIME spanish government

>>> "WT" == Wolfgang Traylor writes: Hello > Hello Uwe Brauer, >> I installed all its root certificates in >> /usr/share/ca-certificates/Spain > I usually put the fingerprint of the root certificate in ~/.gnupg/trustlist.txt like this: >

Re: missing root certificate, SMIME spanish government

>>> "WT" == Wolfgang Traylor writes: >> However given a cer file, how can I find out its fingerprint? > This command will show you the details of the certificates from the website[1] > you mentioned including its fingerprint: > openssl x509 -noout -text -fingerprint -inform DER -in downloaded_ke

problems with the mailing list

behaviour. Thanks Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

pgp keys in gnupg: IDEA need for all recipients?

key since I will expect that most gnupgp users I know are not willing or able to do this compilation.) Thanks Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

same key: pgp 2.6 version and gpg version: keyserver

sks.keyserver.penguin.de. Is this possible, or would the same key in different flavours cause problems and confusions? Thanks Uwe Brauer pgpDX2lRrABVI.pgp Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman

Re: same key: pgp 2.6 version and gpg version: keyserver

>>>>> "David" == David Shaw <[EMAIL PROTECTED]> writes: David> On Thu, Jul 21, 2005 at 04:18:00PM +, Uwe Brauer David> wrote: There is only one version of the key whether it David> is in PGP or GPG. Go ahead and submit it to any

Re: same key: pgp 2.6 version and gpg version: keyserver

>>>>> "David" == David Shaw <[EMAIL PROTECTED]> writes: David> On Thu, Jul 21, 2005 at 05:21:13PM +, Uwe Brauer wrote: >> >>>>> "David" == David Shaw <[EMAIL PROTECTED]> writes: >> David> On Thu

Re: same key: pgp 2.6 version and gpg version: keyserver

> "Peter" == Peter Palfrader > <[EMAIL PROTECTED]> writes: Peter> It's still the same public key. Peter> [Tho really you should create a new version 4 key. Version 3 (old pgp Peter> 2.6 keys) are obsolete and support for them may eventually go away (the Peter> sooner t

a new free smime service, but...

certificate. But this time not, I just obtained a pfx file which I could import, but does somebody know whether there is a security breach, the way this certificate was generated? Thanks Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnupg.org http

a new free smime service, but...

certificate. But this time not, I just obtained a pfx file which I could import, but does somebody know whether there is a security breach, the way this certificate was generated? Thanks Uwe Brauer smime.p7s Description: S/MIME cryptographic signature

Re: a new free smime service, but...

> Hi > On Sunday 20 October 2019 at 3:20:41 PM, in > , Uwe Brauer via Gnupg-users wrote:- > [...] > I'm no expert but their Certificate Policy reads to me that the > private key is compromised right from the start. I think usually the > keys are generated on the su

Re: a new free smime service, but...

> MFPA via Gnupg-users wrote in <1171562612.20191022004056@my_localhost_AR>: > |On Sunday 20 October 2019 at 3:20:41 PM, in > |, Uwe Brauer via Gnupg-users wrote:- > | > |> I just found that > |> https://extrassl.actalis.it/portal/uapub/doProce

gmail smime, sends two messages one is not encrypted. Experience?

signed. Can somebody please confirm this strange behavior? Is this connected to the fact that my university enabled smime support? It seems to me a complete security breach. Regards Uwe Brauer Footnotes: [1] purely encrypted messages are rejected by the server

Re: gmail smime, sends two messages one is not encrypted. Experience?

>>> "UBvG" == Uwe Brauer via Gnupg-users writes: > Hi > It seems to me a complete security breach. I repeated the test with other gmail accounts, with emacs or thunderbird, always I receive messages which are on signed but not encrypted although I did enable

[gmx+gmail] (was: gmail smime, sends two messages one is not encrypted. Experience?)

>>> "UBvG" == Uwe Brauer via Gnupg-users writes: >>> "UBvG" == Uwe Brauer via Gnupg-users writes: >> Hi >> It seems to me a complete security breach. > I repeated the test with other gmail accounts, with emacs or > thunderbir

Re: gmail smime, sends two messages one is not encrypted. Experience?

> Uwe Brauer via Gnupg-users wrote: > Sorry, I can't help you but I do have a question, if you don't mind ... > Why are the Students at the University don't use OpenPGP with Gmail > via the free Mailvelope add-on for Firefox, Chrome? Wouldn't tha

[RESOLVED?] (was: [gmx+gmail])

>>> "JBvG" == Juergen Bruckner via Gnupg-users writes: Hell Juergen > Hello Uwe, > i use Gmail for business for a very long time and never had any issue > like that. You are not going to belive that. I deactivated the s/mime support of gmail's webinterface and even deleted the certificate. Then

Re: gmail smime, sends two messages one is not encrypted. Experience?

>>> "MHWvG" == Mark H Wood via Gnupg-users writes: > On Sun, Dec 08, 2019 at 10:38:43AM +0100, Uwe Brauer via Gnupg-users wrote: >> Now to the question s/mime versus gnupg. >> >> There are the following points which make s/mime easier. &g

root certificate for smime missing gpgconf --launch dirmngr

led (Ubuntu 16.06) and run gpgconf --launch dirmngr However the root certificate is still not found. Thunderbird provides this certificate so I could install it manually. However I would prefer an automated solution. Any hints? Thanks and regards Uwe Bra

root certificate for smime missing gpgconf --launch dirmngr

led (Ubuntu 16.06) and run gpgconf --launch dirmngr However the root certificate is still not found. Thunderbird provides this certificate so I could install it manually. However I would prefer an automated solution. Any hints? Thanks and regards Uwe Brauer smime.p7s Description: S/M

Re: root certificate for smime missing gpgconf --launch dirmngr

>>> "BM" == Brian Minton writes: > On Tue, Jun 09, 2020 at 09:40:25AM +0200, Bernhard Reiter wrote: >> If you trust a set of root certificates, like the ones shipped with your >> operating system or a different application, you could just import them all >> and mark them trusted. Of course you

gpgsm on mac (fink or ports)

method of last resort?) Regards Uwe Brauer ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

gpgsm "Encrypt failed" "Unusable public key: 53A51054BB68F7C3" root certificate missing?

onnected, but I do have old certificates of this user. Any help would be strongly appreciated. Regards Uwe Brauer smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

[SOLVED] (was: gpgsm "Encrypt failed" "Unusable public key: 53A51054BB68F7C3" root certificate missing?)

>>> "UBvG" == Uwe Brauer via Gnupg-users writes: > Hi > I am on Ubuntu 16.04 running > gpgsm (GnuPG) 2.1.11 > libgcrypt 1.6.5 > libksba 1.3.3-unknown > I am also a die hard user of emacs and use it for encrypting and > decrypting my mails. >

a bit off topic, how to find encrytped files (ransom attack)

entropy). However I should then study the distribution of each letter to be sure. So is there any other way to run find and some other script to find suspicious files? Google is not really helpful Regards Uwe Brauer -- I strongly condemn Putin's war of aggression against the Ukrai

Re: a bit off topic, how to find encrytped files (ransom attack)

Carlo value for Pi is 3.999888140 (error 27.32 percent) | candidate | So I am not sure what is the best line, but the question boils down to this, anybody know enough sed or awk or whatsoever to tell me how ot filter the ent output? thanks Uwe Brauer -- I strongly

Re: a bit off topic, how to find encrytped files (ransom attack)

>>> "JC" == Juergen Christoffel writes: > On Fri, Aug 05, 2022 at 05:45:53PM +0200, Uwe Brauer via Gnupg-users wrote: >> 1. just for the first very rough analysis what is a convenient command to >> get a list of files that have high entropy? > The first

passwords with UFT8 chars?

Hi Sorry for this elementary question, but I can't find an answer googling. Is it possible to have a password that contains UTF8 chars, like Arabic, Hebrew, Chinese or some IPA symbols??? That concerns also gpgsm Regards Uwe Brauer -- I strongly condemn Putin's war of aggressi

Re: passwords with UFT8 chars?

>>> "MA" == Matthias Apitz writes: > El día viernes, septiembre 02, 2022 a las 10:33:13a. m. +0200, Uwe Brauer via > Gnupg-users escribió: >> >> Hi >> >> Sorry for this elementary question, but I can't find an answer googling. >> &

gpgsm 2.4.4 cannot import my p12 certificate (but I could in earlier versions)

Hi I upgraded yesterday from Ubuntu 16 to 24 and have now gpgsm 2.4.4 installed. I imported an official p12 certificate without any probblems into firefox and google chrome However when I run , | gpgsm --import Brauer.p12 ` Type the password, I recive --8<---cut her

Re: gpgsm 2.4.4 cannot import my p12 certificate (but I could in earlier versions)

>>> "EB" == Eva Bolten writes: Hi > Hi, > try the following: > Export the certificate from firefox or chrome into a new file and try > to import the certificate from that file with gpgsm. Thanks. Meanwhile I found out the culprit might have been a somehow outdated (and maybe corrupted pubri