Re: Office Outlook 2003 and GnuPG

2008-04-01 Thread Sven Radde
Hi!

Am Dienstag, den 01.04.2008, 17:29 -0600 schrieb Allen Schultz:
> What is the recommended frontend/plugin to Office Outlook 2003

I think the one coming with gpg4win is fine?
I am running Office 2007 at work in the meantime but AFAIR I used it
when we still had 2003. And I definitely did never have a "full auto"
mode enabled. 

cu, Sven


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: sign a public key ?

2008-04-01 Thread John Clizbe
Phibee Network Operation Center wrote:
> John Clizbe a écrit :
>> Phibee Network Operation Center wrote:
>>> Hi
>>>
>>> i use this for crypt a tar archives:
>>>
>>> /usr/bin/gpg --recipient Stefan --encrypt /tmp/backup.tgz
>>> can i write for all time a "Y" or what is the exact process ?
>>> 
>> /usr/bin/gpg --batch --yes --recipient Stefan --encrypt /tmp/backup.tgz
>>
> Thanks for your answer, but i have read the man and tested this solution ...
> 
> i have a :
> 
> [EMAIL PROTECTED] tmp]# /usr/bin/gpg --batch --yes --recipient Stefan 
> --encrypt 
> /tmp/backup.tgz
> gpg: DCC8B9Z4: Rien ne dit que la clé appartient vraiment à l'utilisateur
> nommé.
> gpg: /tmp/backup.tgz: encryption failed: clé publique inutilisable

Try signing his key with a local signature:

gpg --edit-key Stefan lsign

or adding the --always-trust option to the command-line

/usr/bin/gpg --batch --yes --always-trust --recipient Stefan \
--encrypt /tmp/backup.tgz

I think a local sig is the better option.

-- 
John P. Clizbe   Inet:   JPClizbe (a) tx DAWT rr DAHT con
Ginger Bear Networks hkp://keyserver.gingerbear.net
"Be who you are and say what you feel because those who mind don't matter
and those who matter don't mind." - Dr Seuss, "Oh the Places You'll Go"



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: sign a public key ?

2008-04-01 Thread Phibee Network Operation Center

John Clizbe a écrit :

Phibee Network Operation Center wrote:
  

Hi

i use this for crypt a tar archives:

/usr/bin/gpg --recipient Stefan --encrypt /tmp/backup.tgz




  

can i write for all time a "Y" or what is the exact process ?



/usr/bin/gpg --batch --yes --recipient Stefan --encrypt /tmp/backup.tgz



From the man page:

   --batch

   --no-batch
 Use  batch  mode.   Never  ask, do not allow interactive com-
 mands.  --no-batch disables this option.

   --yes Assume "yes" on most questions.

   --no  Assume "no" on most questions.



  



Thanks for your answer, but i have read the man and tested this solution ...

i have a :

[EMAIL PROTECTED] tmp]# /usr/bin/gpg --batch --yes --recipient Stefan --encrypt 
/tmp/backup.tgz

gpg: DCC8B9Z4: Rien ne dit que la clé appartient vraiment à l'utilisateur
nommé.
gpg: /tmp/backup.tgz: encryption failed: clé publique inutilisable



Failed :=<




___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Office Outlook 2003 and GnuPG

2008-04-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Allen Schultz wrote:
> What is the recommended frontend/plugin to Office Outlook 2003 for
> GnuPG that will allow the user (my friend in this case) to manually
> select Encrypt/Sign rather than have it automatically do that on all
> his messages. He wants that choice. I found one with it hiding in the
> Tools menu, but he wants it visible while writing/typing the message.

Why not try GPGshell:  http://www.jumaros.de/rsoft/index.html

This will provide both a Tray Tool, Key Management & the ability to
Encrypt/Decrypt Files.

JOHN ;)
Timestamp: Tuesday 01 Apr 2008, 22:07  --400 (Eastern Daylight Time)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.5.0-svn4732: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: https://www.gswot.org
Comment: Homepage:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJH8uqFAAoJEBCGy9eAtCsPXIkH/35ewbdZCfKIH5aBGOMp1yOV
+2SlKh0y3zPwjXwt4OtM8LFETMkHUsXbKlh9V18/cbaJmiPIJAjk33tW1jqJmmTi
Lhu8V9EbXjCBazMe0R36VBrEckLjfDRDLPEqUt0kTmSo42eniAa9jnMTAvcRjHZd
WeB1Z0hvoMv3VQzgOJ7cq/Aw48di94kjyNvPtsTco7625h9QdPkxWWbIVQ9ffJtu
WPyU/ig1NoYAah1GIiLkgSDEPkV39fWs5b0zvcYOFxZyUwkJBI/3r0tPOfzgR3JK
d29aI71DfPNsGEVgvuJhUwr5FwwZeZMznMf8UX/qyT5SvHJhANq4DcDXNUuA1BM=
=e3ly
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: sign a public key ?

2008-04-01 Thread John Clizbe
Phibee Network Operation Center wrote:
> Hi
> 
> i use this for crypt a tar archives:
> 
> /usr/bin/gpg --recipient Stefan --encrypt /tmp/backup.tgz


> can i write for all time a "Y" or what is the exact process ?

/usr/bin/gpg --batch --yes --recipient Stefan --encrypt /tmp/backup.tgz



From the man page:

   --batch

   --no-batch
 Use  batch  mode.   Never  ask, do not allow interactive com-
 mands.  --no-batch disables this option.

   --yes Assume "yes" on most questions.

   --no  Assume "no" on most questions.



-- 
John P. Clizbe   Inet:   JPClizbe (a) tx DAWT rr DAHT con
Ginger Bear Networks hkp://keyserver.gingerbear.net
"Be who you are and say what you feel because those who mind don't matter
and those who matter don't mind." - Dr Seuss, "Oh the Places You'll Go"



signature.asc
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Office Outlook 2003 and GnuPG

2008-04-01 Thread Allen Schultz
What is the recommended frontend/plugin to Office Outlook 2003 for
GnuPG that will allow the user (my friend in this case) to manually
select Encrypt/Sign rather than have it automatically do that on all
his messages. He wants that choice. I found one with it hiding in the
Tools menu, but he wants it visible while writing/typing the message.

Allen

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


sign a public key ?

2008-04-01 Thread Phibee Network Operation Center

Hi

i use this for crypt a tar archives:

/usr/bin/gpg --recipient Stefan --encrypt /tmp/backup.tgz

i use the public key of stefan for crypt, but when i start
he request all time a "o" (Yes) and say me (sorry in french) :

===
[EMAIL PROTECTED] tmp]# /usr/bin/gpg --recipient Stefan --encrypt 
/tmp/backup.tgz
gpg: DCC8B9Z4: Rien ne dit que la clé appartient vraiment à l'utilisateur
nommé.

pub  2048g/DCC8B9Z4 2008-03-25 Stefan <[EMAIL PROTECTED]>
Empreinte de la clé principale: XX
  Empreinte de la sous-clé: XX

Il n'est PAS certain que la clé appartient à la personne nomée dans
le nom d'utilisateur. Si vous savez *vraiment* ce que vous faites,
vous pouvez répondre oui à la prochaine question.


Utiliser cette clé quand même ? (o/N)


He said that it's not sure that th key are the key of Stefan .

can i write for all time a "Y" or what is the exact process ?

thanks for your help


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Whirlpool Hash

2008-04-01 Thread David Shaw
On Tue, Apr 01, 2008 at 09:47:58AM -0500, Kevin Hilton wrote:
> Has anyone written a patch that would allow whirlpool as an available
> hash algorithm for use with gnupg?

Not that I know of.  Note that Whirlpool is not specified for OpenPGP,
so that is a major barrier.

There is a project to add Whirlpool to OpenPGP going on at the moment
(also the Camellia cipher, by the way).  When that happens, Whirlpool
makes more sense than it does now.

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Whirlpool Hash

2008-04-01 Thread Werner Koch
On Tue,  1 Apr 2008 16:47, [EMAIL PROTECTED] said:

> Has anyone written a patch that would allow whirlpool as an available
> hash algorithm for use with gnupg?

Whirlpool is not specified by OpenPGP and thus not supported by gpg.

FWIW, Libgcrypt has support for Whirlpool and thus can be used by other
applications (e.g. S/MIME as supported by gpgsm)


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Whirlpool Hash

2008-04-01 Thread John W. Moore III
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Kevin Hilton wrote:
> Has anyone written a patch that would allow whirlpool as an available
> hash algorithm for use with gnupg?

The addition of Whirlpool would require the effective 'patching' of 11
Files.  I am fooling with it in My spare time but haven't completed it
as yet.

I haven't devoted much time to this as there would be very few instances
where it would be practical to implement. What would be accomplished by
using a Hash that would prevent anyone from verifying My Sig?

JOHN ;)
Timestamp: Tuesday 01 Apr 2008, 12:11  --400 (Eastern Daylight Time)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.5.0-svn4732: (MingW32)
Comment: Public Key at:  http://tinyurl.com/8cpho
Comment: Gossamer Spider Web of Trust: https://www.gswot.org
Comment: Homepage:  http://tinyurl.com/yzhbhx

iQEcBAEBCgAGBQJH8l8GAAoJEBCGy9eAtCsP6fgIAIVgRvdeMXSty+3/EFcMQBhs
2I3u3eVCeEeX4gxP+LZO6zJ+fiCOgRYJ3/Fq6bJ6HhUFQjTC3hBeTamdPbjlzQHC
xkvb90VBllqfP7cMN5kYJYZBEChfbsjn9IyZ+97+gyhlBpKMXVroRvykz9iSNRPe
OUYeFkcVIk9V3YilGoVGlWE9kjunQ8TZFmHGaK75ntpZAIkOdm2vgW+fE1xIYacu
3SYuxBS3VidcTvAOVtVILsmKnwr95+9aCOP8ymum7ZUa2CdDUgPVp0wgUeZDBQla
tCJPB9SkIesF0AwvdGVrBnuZWzbFa1ewOZON1r6eQtagdX2RiC9vPPLO0tXJcuI=
=qGpS
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Whirlpool Hash

2008-04-01 Thread Kevin Hilton
Let us know when you are done with the patch.  I'd be interested in
trying it out -- that would make one person who could verify your
signature!

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Whirlpool Hash

2008-04-01 Thread Kevin Hilton
Has anyone written a patch that would allow whirlpool as an available
hash algorithm for use with gnupg?

-- 
Kevin Hilton

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg-agent/ssh-add asking for passphrase at first usage

2008-04-01 Thread Axel Thimm
On Mon, Mar 31, 2008 at 12:17:59AM -0400, Todd Zullinger wrote:
> Axel Thimm wrote:
> > some years ago I did create a nice "gpg-agent --enable-ssh-support"
> > setup that would register ssh keys with the agent, but the agent
> > would only ask for the passphrase when ssh would try a connection.
> > 
> > Now I upgraded my system and this doesn't work anymore.
> 
> What exactly doesn't work?  You don't get any password prompt for
> either your ssh nor gpg keys?  Or you get the prompt for both now
> instead of having your ssh key automatically added?  Or something else
> entirely?

I tried to explain, but maybe the mail was too long: Previously, right
after logging in I would see the keys with ssh-add -l, but I would
only be asked for the passphrase on their first usage.

Now they are not listed and if I try to add them I'm asked for the
pssphrase immediately.

> > Now my questions are:
> [...]
> > - *why* did it break with the update? The old system has gnupg 2.0.8
> >  and the new one 2.0.9. But the Changelog doesn't indicate anything
> >  that would make these two behave differently.
> 
> Is the new system running another agent, like the seahorse agent?  I
> think that might be on by default now, and it provides similar
> functionlity to gpg-agent and ssh-agent.  Maybe it's causing problems?

I'm invoking gpg-agent directly in the ssh-agent replacment scrip (see
my OP).
-- 
Axel.Thimm at ATrpms.net


pgpOxSFEFMmqj.pgp
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Siemens card reader

2008-04-01 Thread Reinhard Müller
Hi,

I've tried a Siemens S26361-F1260-L801 internal USB card reader with an
OpenPGP card. Siemens claims the reader is CCID compatible.

After the usual fix of the permissions for the device, "gpg
--card-status" works perfectly, but with "gpg --clearsign foo" I get:

$ gpg --clearsign foo
gpg: Bisher erstellte Signaturen: 8307

Bitte geben Sie die PIN
 ein [Verarbeitete Signaturen: 8307]
gpg: ccid_transceive failed: (0x10009)
gpg: apdu_send_simple(0) failed: card inactive
gpg: Beglaubigung fehlgeschlagen: Allgemeiner Fehler
gpg: foo: clearsign failed: Allgemeiner Fehler

Any hint?

Thanks,
Reinhard


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


RDFAuth: a sketch of a simple authentication protol

2008-04-01 Thread Henry Story

Dear GNU-PG users and experts,

	I recently posted a proposal for a very simple HTTP based protocol to  
build on GPG web of trust concepts by combining these with the linked  
data network [1] effect of the semantic web, and simple REST  
architecture concepts. Here is the introduction


[[
Here is a proposal for an authentication scheme that is even simpler  
than OpenId, more secure, more RESTful, with fewer points of failure  
and fewer points of control, that is needed in order to make Open  
Distributed Social Networks with privacy controls possible.

]]
http://blogs.sun.com/bblfish/entry/rdfauth_sketch_of_a_buzzword

I am not a cryptography expert, but I make essential use of PGP in  
this sketch, so I was looking for feedback from this community, as  
well as REST and HTTP experts. I know there is something really  
powerful lying here to be discovered.


Please give us feedback and ideas for improvements. Or just let us  
know that we are wrong. Any feedback is welcome :-)


Henry

[1] http://en.wikipedia.org/wiki/Linked_Data

Home page: http://bblfish.net/


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users