Re: GnuPG 2.1.0 Merging secret key

2014-11-14 Thread Werner Koch
On Thu, 13 Nov 2014 21:00, must...@mustrum.net said:

 I'm wondering : what is the planned usage for that feature ?

--try-secret-keys is used to specify keys to be used in addition to the
default secret key when it comes to decrypt messages with anonymous
recipients.

I have often the case that I receive a messages encrypted to a bunch of
keys where many of them use an anonymous recipient (e.g. for private
backup keys).  By using this option I can define which of my secret keys
are to be used for trial decryption.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Help needed

2014-11-14 Thread da...@gbenet.com
On 14/11/14 04:11, Daniel Kahn Gillmor wrote:
 Hi David--
 
 You sound frustrated.  hopefully we can help you figure things out.
 
 Some of the details of what's happened on your machine(s) sound unclear
 to me, and we'll be able to help you better with more precise information.
 
 On 11/13/2014 04:31 PM, da...@gbenet.com wrote:
 Even when I use a backup programme and restore I still get the same error 
 message.
 
 What backup program did you use?  What version of gnupg were you using
 on your old computer?  what platform was your old machine?  what
 platform is your new machine?
 
 If you feel comfortable sharing any of this information, i'd be curious
 to see the outcome (on both old and new machines) of any of the
 following series of commands:
 
  uname -a
  ls -la ~/.gnupg
  gpg --version
  gpg --list-secret-keys 0xAAD8C47D
  echo test | gpg --clearsign -u 0xAAD8C47D
 
 If it looks like this information is too sensitive to post to the list,
 but you feel ok sending it to me privately, you're welcome to send it to
 me privately (my OpenPGP fingerprint is at the bottom of this mail if
 you wish to encrypt it).
 
 So no-one
 has ever copied their .gnupg folder to another laptop. No one has ever done 
 this with any
 success.
 
 I can say based on personal experience that this is not the case.  I
 have done several such transfers, for myself and for other people.
 
 You have all failed. Clearly there's something wrong with gnupg that does 
 not like
 being backed up copied whatever. If it were another programme say 
 Thunderbird no one would
 use Thunderbird. They would say Thunderbird was crap.
 
 I'm going to treat this paragraph as you expressing your frustration,
 instead of reading it as an attack on the developers of GnuPG.  Other
 people might read it differently, and may find it demotivating in terms
 of helping you with your current situation.
 
 Please remember that there are human beings on the other side of your
 e-mail, people who are remarkably committed to helping others, but who
 also have their own feelings.
 
 Regards,
 
   --dkg
 
 OpenPGP Fingerprint: 0EE5BE979282D80B9F7540F1CCD2ED94D21739E9
 
 
Hi Daniel,

Firstly I can neither encrypt or sign. I have two laptops (1) 32 bit LXD (2) 64 
bit LXD my
64 bit machine crashed and went off for repairs. It came back I reinstalled the 
operating
system and all programmes - now a mirror image of my 32 bit LXD. Then I did the 
following:

(1) david@laptop-1:~$ gpg
gpg: directory `/home/david/.gnupg' created
gpg: new configuration file `/home/david/.gnupg/gpg.conf' created
gpg: WARNING: options in `/home/david/.gnupg/gpg.conf' are not yet active 
during this run
gpg: keyring `/home/david/.gnupg/secring.gpg' created
gpg: keyring `/home/david/.gnupg/pubring.gpg' created
gpg: Go ahead and type your message ...

(2) Run ALL your GUIs eg Kgpg Kleopatra GPA - but do not create a new set of 
keys! Kgpg will
complain and not run.

(3) Reboot your system - very important!

(4) Type david@laptop-1:~$ gpg-agent
gpg-agent: gpg-agent running and available
david@laptop-1:~$

Then I copied ALL .gnupg files from the 32 bit laptop to the 64 bit laptop - on 
the 32 bit
laptop I exported my keys saving them to a file - I did this twice. Then I 
imported my keys
into the 64 bit laptop. All programmes see my key - even gpg but I always get 
the same error
message: Key 0xAAd8C47D not found or not valid. The (sub-)key might have 
expired when I
try to sign or encrypt a message.

Now insted of copying ALL the files from one .gnupg to another am just going to 
copy
secring.gpg and trustdb.gpg - then import my keys - if this works then you will 
know how to
do it in the future - if it does not work - hmmm...

David






-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Fermi estimates

2014-11-14 Thread Pete Stephenson
On Fri, Nov 14, 2014 at 10:25 AM, Johan Wevers joh...@vulcan.xs4all.nl wrote:
 On 14-11-2014 3:15, Robert J. Hansen wrote:

 10**38 attempts at 10**6 bitflips per attempt equals 10**44 bitflips
 total.  At carpet-scuffing power, that's about 10**15 joules of energy,
 [...]
 But to make our brute-forcer 10**30 times faster (so it
 can run in one year), our brute-forcer also has to release 10**30 times
 as much heat.

 I'm not an astrophysicist, but that's the kind of energy levels one
 normally associates with phrases like perturb the false vacuum and
 unmake the universe at the speed of light.  Look at the time, I must
 be going.

 Fortunately there's no false vacuum left to perturb. :-)

 Anyway, compared to the Sun's output of 3.82*10**26W that's still quite
 large.

 10 billion is 10**10,

 PLEASE don't do that in a FAQ. The definitions of bilion, biljard etc.
 differ wether one uses imperial or SI units, and thuis makes it very
 confusing. For me, a bilion is 10**12. It wouldn't be the first estimate
 that was off by some factors 10**6 due to mixing these up. Better to
 avoid those terms completely.

Minor nitpick: the difference between the long and short scales
are a bit more involved than just imperial vs. SI.

More details are at https://en.wikipedia.org/wiki/Long_and_short_scales

But yes, avoiding ambiguous words like billion is a good idea. Using
notation like 10^9, 10^12, etc. would make things more clear to
readers regardless of what words they use to describe those numbers.

Cheers!
-Pete

-- 
Pete Stephenson

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg4usb: Portable GUI for GnuPG

2014-11-14 Thread Johan Wevers
On 13-11-2014 23:23, Robert J. Hansen wrote:

 I mean no offense, but this seems like a really bad idea.  Putting it on
 CD-ROM might be a pretty cool idea, but USB is just ... scary.

There exist USB sticks with a write-protection jumper (I have 2 so I'm
sure). If those cannot be found, use a SD memory card (they all have
such a jumper) in a SD to USB conversion unit.

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


My Conclusions

2014-11-14 Thread da...@gbenet.com
Hi All,

After spending 62 hours on what I thought would be a simple task namely to get 
a fully
functioning gnupg mirror on my 64 bit Linux system - I realise this is an 
impossible task to
do. In the past I've ended up creating a new set of certificates - but this 
time round I
thought that I would apply some effort.

My conclusion is It IS Impossible To Transfer Your Keys From The Same O/S To 
Another Machine.

There is no one in the entire universe that has ever attempted it. And if they 
have THEY
HAVE FAILED. Not one person on this list knows how to do it successfully. No 
one. NOT ONE OF
YOU can transfer a mirror image of your .gnupg folder and expect it to work.

This tells me what I have long suspected - yes it's good at encryption and 
signing but the
programme is fundamentally flawed as to make it utter crap. My keys are PERFECT 
but the
software is CRAP. Werner Koch knows it's crap. Every one knows it's crap.

So, If I want to go on signing and encrypting my emails I HAVE TO CREATE 
ANOTHER SET A
BLOODY KEYS

I am not a happy bunny!!!

David




-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg4usb: Portable GUI for GnuPG

2014-11-14 Thread flapflap
Johan Wevers wrote:
 On 13-11-2014 23:23, Robert J. Hansen wrote:
 
 I mean no offense, but this seems like a really bad idea.  Putting it on
 CD-ROM might be a pretty cool idea, but USB is just ... scary.
 
 There exist USB sticks with a write-protection jumper (I have 2 so I'm
 sure). If those cannot be found, use a SD memory card (they all have
 such a jumper) in a SD to USB conversion unit.

if you refer to the Lock switch of SD memory cards, then please note
that this Lock switch is only evaluated in OS software and no
physical/electrical protection of the flash IC.  Normally, the mechanic
Lock switch only pushes away a contact on the SD card socket, so the
OS can evaluate whether the contacts are conncted or not.  On GNU/Linux
I think it is sufficient to just mount -o remount,rw a previously
read-only mounted SD card.
USB sticks with real physical (i.e. electrically routed to the
write-protect pin of the flash IC) write protection are rare, but they
exist (as you said).

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 2.1.0 Merging secret key

2014-11-14 Thread Mustrum
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

I was wondering about merging secret keys.

Le 14 novembre 2014 08:58:45 CET, Werner Koch w...@gnupg.org a écrit :
On Thu, 13 Nov 2014 21:00, must...@mustrum.net said:

 I'm wondering : what is the planned usage for that feature ?

--try-secret-keys is used to specify keys to be used in addition to the
default secret key when it comes to decrypt messages with anonymous
recipients.

I have often the case that I receive a messages encrypted to a bunch of
keys where many of them use an anonymous recipient (e.g. for private
backup keys).  By using this option I can define which of my secret
keys
are to be used for trial decryption.


Shalom-Salam,

   Werner

--
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-BEGIN PGP SIGNATURE-
Version: APG v1.1.1
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==
=2uLE
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Nicholas Cole
David,

I'm sorry you are having problems, but I think this is just nonsense.
Of course people move keys between machines all the time.  I have done
it myself often.  I don't think that anyone deserves that level of
abuse -- certainly not someone who has put years of work into a
program that is an industry standard and released it for free.

Nicholas

On Fri, Nov 14, 2014 at 10:42 AM, da...@gbenet.com da...@gbenet.com wrote:
 Hi All,

 After spending 62 hours on what I thought would be a simple task namely to 
 get a fully
 functioning gnupg mirror on my 64 bit Linux system - I realise this is an 
 impossible task to
 do. In the past I've ended up creating a new set of certificates - but this 
 time round I
 thought that I would apply some effort.

 My conclusion is It IS Impossible To Transfer Your Keys From The Same O/S To 
 Another Machine.

 There is no one in the entire universe that has ever attempted it. And if 
 they have THEY
 HAVE FAILED. Not one person on this list knows how to do it successfully. No 
 one. NOT ONE OF
 YOU can transfer a mirror image of your .gnupg folder and expect it to work.

 This tells me what I have long suspected - yes it's good at encryption and 
 signing but the
 programme is fundamentally flawed as to make it utter crap. My keys are 
 PERFECT but the
 software is CRAP. Werner Koch knows it's crap. Every one knows it's crap.

 So, If I want to go on signing and encrypting my emails I HAVE TO CREATE 
 ANOTHER SET A
 BLOODY KEYS

 I am not a happy bunny!!!

 David




 --
 “See the sanity of the man! No gods, no angels, no demons, no body. Nothing 
 of the
 kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
 death. No
 delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Why the software is crap

2014-11-14 Thread da...@gbenet.com
Hello All,

I even tried exporting my private and public key from the command line and then 
tried
importing. The same error message as before. I have checked on the internet - 
most of the
suggestions are crap - the authors have never ever tried to do what they 
suggest others to
do. If they had done so then they would have known just how crappy their 
supposed expertise was.

I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and found 
this to be a
useless pile of crap also.

I am faced with two options:

(1) Create yet another set of keys
(2) Give up using gnupg after some 20 years

I think I will unsubscribe from this list and give up on gnupg as a pile of 
crap.

David

-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread da...@gbenet.com
On 14/11/14 11:34, Nicholas Cole wrote:
 David,
 
 I'm sorry you are having problems, but I think this is just nonsense.
 Of course people move keys between machines all the time.  I have done
 it myself often.  I don't think that anyone deserves that level of
 abuse -- certainly not someone who has put years of work into a
 program that is an industry standard and released it for free.
 
 Nicholas
 
 On Fri, Nov 14, 2014 at 10:42 AM, da...@gbenet.com da...@gbenet.com wrote:
 Hi All,

 After spending 62 hours on what I thought would be a simple task namely to 
 get a fully
 functioning gnupg mirror on my 64 bit Linux system - I realise this is an 
 impossible task to
 do. In the past I've ended up creating a new set of certificates - but this 
 time round I
 thought that I would apply some effort.

 My conclusion is It IS Impossible To Transfer Your Keys From The Same O/S To 
 Another Machine.

 There is no one in the entire universe that has ever attempted it. And if 
 they have THEY
 HAVE FAILED. Not one person on this list knows how to do it successfully. No 
 one. NOT ONE OF
 YOU can transfer a mirror image of your .gnupg folder and expect it to work.

 This tells me what I have long suspected - yes it's good at encryption and 
 signing but the
 programme is fundamentally flawed as to make it utter crap. My keys are 
 PERFECT but the
 software is CRAP. Werner Koch knows it's crap. Every one knows it's crap.

 So, If I want to go on signing and encrypting my emails I HAVE TO CREATE 
 ANOTHER SET A
 BLOODY KEYS

 I am not a happy bunny!!!

 David




 --
 “See the sanity of the man! No gods, no angels, no demons, no body. Nothing 
 of the
 kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
 death. No
 delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
I have done everything correctly - and my conclusions are still the same NO ONE 
HAS EVER
SUCCESSFULLY MADE A MIRROR COPY OF THEIR .GNUPG AND HAD A FULLY 100 PER CENT 
WORKING SIGNING
AND ENCRYPTION PROGRAMME THAT WORKS.

THERE IS NO CLEAR INSTRUCTIONS FROM ANYONE - SIMPLY BECAUSE YOU HAVE NEVER EVER 
DONE IT.

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Martin Behrendt
Am 14.11.2014 um 12:41 schrieb da...@gbenet.com:
 Hello All,
 
 I even tried exporting my private and public key from the command line and 
 then tried
 importing. The same error message as before. I have checked on the internet - 
 most of the
 suggestions are crap - the authors have never ever tried to do what they 
 suggest others to
 do. If they had done so then they would have known just how crappy their 
 supposed expertise was.
 
 I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and 
 found this to be a
 useless pile of crap also.
 
 I am faced with two options:
 
 (1) Create yet another set of keys
 (2) Give up using gnupg after some 20 years
 
 I think I will unsubscribe from this list and give up on gnupg as a pile of 
 crap.
 
 David
 

I think unsubscribing is the best thing you can do. Because you probably
successfully destroyed the good intension and motivation of anyone
helping you, with the offending nonsense you wrote in your last mails.

If you are angry just shut up and write again after you cooled yourself
down. The problem is more likely with you because there are not many
people reporting such problems.
And I can tell from my own experience that it is not even a problem
copying the content of the gnupg directory between windows and linux.
Tried that successfully.
Maybe you should read the FAQ again (and try to understand what is
written). Maybe there is a difference between exporting the public part
of a key and the private part.

Anyway, enjoy your life.
Martin

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 11:55, Martin Behrendt wrote:
 Am 14.11.2014 um 12:41 schrieb da...@gbenet.com:
 Hello All,

 I even tried exporting my private and public key from the command line and 
 then tried
 importing. The same error message as before. I have checked on the internet 
 - most of the
 suggestions are crap - the authors have never ever tried to do what they 
 suggest others to
 do. If they had done so then they would have known just how crappy their 
 supposed expertise was.

 I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and 
 found this to be a
 useless pile of crap also.

 I am faced with two options:

 (1) Create yet another set of keys
 (2) Give up using gnupg after some 20 years

 I think I will unsubscribe from this list and give up on gnupg as a pile of 
 crap.

 David

 
 I think unsubscribing is the best thing you can do. Because you probably
 successfully destroyed the good intension and motivation of anyone
 helping you, with the offending nonsense you wrote in your last mails.
 
 If you are angry just shut up and write again after you cooled yourself
 down. The problem is more likely with you because there are not many
 people reporting such problems.
 And I can tell from my own experience that it is not even a problem
 copying the content of the gnupg directory between windows and linux.
 Tried that successfully.
 Maybe you should read the FAQ again (and try to understand what is
 written). Maybe there is a difference between exporting the public part
 of a key and the private part.
 
 Anyway, enjoy your life.
 Martin
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
Martin,

I have cooled. You can export your private key - you can export your public 
key. You can
import your private key you can import your public key. In 20 years I have 
always had the
same problem - the same error message and have each time created a new set of 
keys. I have
done this 4 times.

I notice that no one on this list - for all the talk of oh I've done it can 
offer no
practical information has to HOW. No one. No one. No one knows how to do this 
simple task.
In all my 20 years I have never found out how. Perhaps things are different 
under a Windows
O/S but on Linux there is NO SOLUTION.

Perhaps the only solution is to import ones private and public keys and lose 
all your
contacts - ie a brand new installation. But I repeat BUT no one has ever 
created a mirror
image of a .gnupg and had a fully 100 per cent working signing and encryption 
functionality.
No one. There are no real practical solutions written anywhere on the internet.

There is nothing of any value in  https://www.gnupg.org/faq/GnuPG-FAQ.html - 
there never was
in all the 20 years of reading it.

Sure you can moan criticise me for my getting frustrated - and you can all moan 
and cringe
and all withdraw your support - BUT NO ONE HAS EVER OFFERED ANY PRACTICAL 
USEFUL ADVICE THAT
WILL ENABLE ME TO TRANSFER MY KEYS AND HAVE THEM WORKING CORRECTLY. NO ONE. NOT 
EVEN YOU.

You are offended? Why? It is an easy thing to do is it not to moan about what 
and how people
express themselves - yet you completely ignore the real issue. You ignore is 
because you can
offer no real meaningful solution. As I have said no one has ever successfully 
transferred
their public and private keys between machines and got them to successfully 
work. That's a
real fact. And no one on this list as any practical solutions that work in the 
real world.
That's a fact. The fact is no one on this list has ever done it with 100 per 
cent success.
That's a fact. There is no practical advice on the internet. That's a fact.

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Tristan Santore

On 14/11/14 13:24, da...@gbenet.com wrote:

On 14/11/14 11:55, Martin Behrendt wrote:

Am 14.11.2014 um 12:41 schrieb da...@gbenet.com:

Hello All,

I even tried exporting my private and public key from the command line and then 
tried
importing. The same error message as before. I have checked on the internet - 
most of the
suggestions are crap - the authors have never ever tried to do what they 
suggest others to
do. If they had done so then they would have known just how crappy their 
supposed expertise was.

I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and found 
this to be a
useless pile of crap also.

I am faced with two options:

(1) Create yet another set of keys
(2) Give up using gnupg after some 20 years

I think I will unsubscribe from this list and give up on gnupg as a pile of 
crap.

David



I think unsubscribing is the best thing you can do. Because you probably
successfully destroyed the good intension and motivation of anyone
helping you, with the offending nonsense you wrote in your last mails.

If you are angry just shut up and write again after you cooled yourself
down. The problem is more likely with you because there are not many
people reporting such problems.
And I can tell from my own experience that it is not even a problem
copying the content of the gnupg directory between windows and linux.
Tried that successfully.
Maybe you should read the FAQ again (and try to understand what is
written). Maybe there is a difference between exporting the public part
of a key and the private part.

Anyway, enjoy your life.
Martin

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Martin,

I have cooled. You can export your private key - you can export your public 
key. You can
import your private key you can import your public key. In 20 years I have 
always had the
same problem - the same error message and have each time created a new set of 
keys. I have
done this 4 times.

I notice that no one on this list - for all the talk of oh I've done it can 
offer no
practical information has to HOW. No one. No one. No one knows how to do this 
simple task.
In all my 20 years I have never found out how. Perhaps things are different 
under a Windows
O/S but on Linux there is NO SOLUTION.

Perhaps the only solution is to import ones private and public keys and lose 
all your
contacts - ie a brand new installation. But I repeat BUT no one has ever 
created a mirror
image of a .gnupg and had a fully 100 per cent working signing and encryption 
functionality.
No one. There are no real practical solutions written anywhere on the internet.

There is nothing of any value in  https://www.gnupg.org/faq/GnuPG-FAQ.html - 
there never was
in all the 20 years of reading it.

Sure you can moan criticise me for my getting frustrated - and you can all moan 
and cringe
and all withdraw your support - BUT NO ONE HAS EVER OFFERED ANY PRACTICAL 
USEFUL ADVICE THAT
WILL ENABLE ME TO TRANSFER MY KEYS AND HAVE THEM WORKING CORRECTLY. NO ONE. NOT 
EVEN YOU.

You are offended? Why? It is an easy thing to do is it not to moan about what 
and how people
express themselves - yet you completely ignore the real issue. You ignore is 
because you can
offer no real meaningful solution. As I have said no one has ever successfully 
transferred
their public and private keys between machines and got them to successfully 
work. That's a
real fact. And no one on this list as any practical solutions that work in the 
real world.
That's a fact. The fact is no one on this list has ever done it with 100 per 
cent success.
That's a fact. There is no practical advice on the internet. That's a fact.

David



David,

I am pretty sure I have seen advice on how to backup and restore your 
keys, if not on this list, in the countless smartcard how to.


I must admit I have not followed previous threads from you, but you must 
admit and be fair, that generally most people here are friendly and 
supportive. But I have seen the topic come up a few times, so maybe this 
is a security versus usability issue ? But again, I have not followed 
exactly what your problem is. Just wanted to point out that most people 
are reasonably helpful and friendly. Labelling gnupg as crap is, not 
exactly a fair assessment I think, and falls within the lines of 
labelling selinux crap, because people do not understand it/are confused 
by what is going on.


Anyway. I hope you work it out in the end and I am sure, somebody will 
be willing yo nudge you in the right direction.


Regards,

Tristan

--
Tristan Santore BSc MBCS
TS4523-RIPE
Network and Infrastructure Operations
InterNexusConnect
Mobile +44-78-55069812
tristan.sant...@internexusconnect.net

Former Thawte Notary
(Please note: Thawte has closed its WoT programme down,
and I am therefore no longer able to accredit trust)

For Fedora related issues, please email me at:

Re: Why the software is crap

2014-11-14 Thread NdK

Il 14/11/2014 12:41, da...@gbenet.com ha scritto:

I usually just lurk, but that's too much...


I even tried exporting my private and public key from the command line and then 
tried
importing. The same error message as before. I have checked on the internet - 
most of the
suggestions are crap - the authors have never ever tried to do what they 
suggest others to
do. If they had done so then they would have known just how crappy their 
supposed expertise was.
I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and found 
this to be a
useless pile of crap also.
Surely you're doing it wrong, overlooking some passage. So don't blame 
others for something *you* are doing wrong.



I am faced with two options:
(1) Create yet another set of keys
(2) Give up using gnupg after some 20 years
(3) Do it the right way as everyone else and admit you were doing 
something wrong.



I think I will unsubscribe from this list and give up on gnupg as a pile of 
crap.

And that will be better for the whole community.

BYtE,
 Diego.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Werner Koch
On Fri, 14 Nov 2014 12:34, nicholas.c...@gmail.com said:

 I'm sorry you are having problems, but I think this is just nonsense.
 Of course people move keys between machines all the time.  I have done

Right.  And you may even copy it from one OS to an entirely different
one.  The files are fully platform independent.

Yet another of these gnome-keyring-daemon problems?


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Samir Nassar
David,

It might not be clear, but many of us have easily and simply migrated our 
.gnupg directories from computer to computer.

I've even deleted my .gnupg directory and restored it from backups. I've 
intentionally messed up my private key and restored my private key to working 
status from backups.

I guess I don't understand why you can't copy .gnupg from one system to 
another system.

Yelling on the mailing list is extremely rude. It is now very clear, and 
archived, how you feel about the topic. Repeating yourself further in the 
manner you have been using will only alienate people and will not move you to 
a resolution.

You've registered your complaint, it has been discussed, and now your behavior 
is counter-productive.

Samir

-- 
Samir Nassar
sa...@samirnassar.com
https://samirnassar.com
PGP Fingerprint: EE76 B39E 0778 8F95 F796 B044 FE67 9A90 8E99 7AB2

signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Nicole Faerber
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Oh please, I am using gnupg with the same keys on at least five
machines with no issue.

I simply copied the .gnupg directory, end of story.

Cheers
  nicole


Am 14.11.2014 um 12:45 schrieb da...@gbenet.com:
 On 14/11/14 11:34, Nicholas Cole wrote:
 David,
 
 I'm sorry you are having problems, but I think this is just
 nonsense. Of course people move keys between machines all the
 time.  I have done it myself often.  I don't think that anyone
 deserves that level of abuse -- certainly not someone who has put
 years of work into a program that is an industry standard and
 released it for free.
 
 Nicholas
 
 On Fri, Nov 14, 2014 at 10:42 AM, da...@gbenet.com
 da...@gbenet.com wrote:
 Hi All,
 
 After spending 62 hours on what I thought would be a simple
 task namely to get a fully functioning gnupg mirror on my 64
 bit Linux system - I realise this is an impossible task to do.
 In the past I've ended up creating a new set of certificates -
 but this time round I thought that I would apply some effort.
 
 My conclusion is It IS Impossible To Transfer Your Keys From
 The Same O/S To Another Machine.
 
 There is no one in the entire universe that has ever attempted
 it. And if they have THEY HAVE FAILED. Not one person on this
 list knows how to do it successfully. No one. NOT ONE OF YOU
 can transfer a mirror image of your .gnupg folder and expect it
 to work.
 
 This tells me what I have long suspected - yes it's good at
 encryption and signing but the programme is fundamentally
 flawed as to make it utter crap. My keys are PERFECT but the 
 software is CRAP. Werner Koch knows it's crap. Every one knows
 it's crap.
 
 So, If I want to go on signing and encrypting my emails I HAVE
 TO CREATE ANOTHER SET A BLOODY KEYS
 
 I am not a happy bunny!!!
 
 David
 
 
 
 
 -- “See the sanity of the man! No gods, no angels, no demons,
 no body. Nothing of the kind.Stern, sane,every brain-cell
 perfect and complete even at the moment of death. No delusion.”
 https://linuxcounter.net/user/512854.html - http://gbenet.com
 
 ___ Gnupg-users
 mailing list Gnupg-users@gnupg.org 
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
 ___ Gnupg-users
 mailing list Gnupg-users@gnupg.org 
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
 I have done everything correctly - and my conclusions are still the
 same NO ONE HAS EVER SUCCESSFULLY MADE A MIRROR COPY OF THEIR
 .GNUPG AND HAD A FULLY 100 PER CENT WORKING SIGNING AND ENCRYPTION
 PROGRAMME THAT WORKS.
 
 THERE IS NO CLEAR INSTRUCTIONS FROM ANYONE - SIMPLY BECAUSE YOU
 HAVE NEVER EVER DONE IT.
 
 David
 
 


Viele Grüße
  nicole faerber

- -- 
kernel concepts GmbH   Tel: +49-271-771091-12
Sieghuetter Hauptweg 48
D-57072 Siegen
http://www.kernelconcepts.de/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQGcBAEBAgAGBQJUZe37AAoJEEKL5ZUtJ7x40m0L/AloGvm6i8cD4vktRtVsE2/n
n289qTf6WbCaDxOPi5Z3N53/3AMTVrsshTx1eWMkqWynp5eGBYL8qY+o+OKfKe+t
+NjkX2v5qWHJqZobFRc8umYzobCA73lqVyAqQdmmOb47Dcogw/6iO36mVVTgqjTm
WPQasquaa8oBY+U+Rnb+H+kzM0nNGt5ucYNfMyez2cJpyVHcHSJVGl9gkXyh9UzA
GBc8UHg5XHR0WsMj0aetsEmeD8zJrM4zV5bCiwe5R5zthKfbM6yvS0qyJ+x1UEOJ
9JfiQh+TdUBnZMzBZrmDVOECso6/SsMvLaixmYKeGozzcRnzgvSGLQter0Ykoye5
63pr0b8yd8AeHdYUpJ1P8/Zk9BPlPqK812pMfhE95FnOStIkMH8tQDf5k/PAV9Xp
tpOEsdiiXG6jytpqaTR88T2wDbBfG0pMEOHaQdNddO8KXPfK9H0rg8DDvLCqtAYx
TeWAKId8DCH0mMiadIns72ItnXB/Zkhe2MTtjY5AvQ==
=Ze+M
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Jason Antony
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2014-11-14 22:45, da...@gbenet.com wrote:

 I have done everything correctly - and my conclusions are still
 the same NO ONE HAS EVER SUCCESSFULLY MADE A MIRROR COPY OF THEIR 
 .GNUPG AND HAD A FULLY 100 PER CENT WORKING SIGNING AND ENCRYPTION 
 PROGRAMME THAT WORKS.

But many have succeeded in it. Add myself to the list of people who
have successfully backed up and re-used my GPG data files for over ten
years, across various operating systems.

It would be best to re-visit the problem when you're in a clear, calm
frame of mind.

All the best,

Jason

-BEGIN PGP SIGNATURE-
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=aqZV
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread NdK

Il 14/11/2014 13:24, da...@gbenet.com ha scritto:


I have cooled. You can export your private key - you can export your public 
key. You can
import your private key you can import your public key. In 20 years I have 
always had the
same problem - the same error message and have each time created a new set of 
keys. I have
done this 4 times.
If all four times you did the same wrong thing, then it's obvious that 
you got the same wrong result.


Just to prove it's your error, I copied my .gnupg from one system 
(str957-142) to another (str957-004), with the most basic method I ould 
think of. I'm not an expert (probably I transferred more than what was 
needed!), but as you can see I succeeded at the first try!


diego@str957-142:~$ gpg --list-secret-keys
/home/diego/.gnupg/secring.gpg

sec   2048R/F9B9D307 2014-11-14
uid  Diego t...@example.com
ssb   2048R/3A4AD1C0 2014-11-14

diego@str957-142:~$ tar cvfz GnuPG-backup.tar.gz --exclude random_seed 
.gnupg

diego@str957-142:~$ gpg --clearsign GnuPG-backup.tar.gz

È necessaria una passphrase per sbloccare la chiave segreta
dell'utente: Diego t...@example.com
2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14

diego@str957-142:~$ ls GnuPG-backup.tar.gz*
GnuPG-backup.tar.gz  GnuPG-backup.tar.gz.asc
diego@str957-142:~$ scp GnuPG-backup.tar.gz diego@str957-004:/home/diego

Then on the other PC:

diego@str957-004:~$ tar xvfz GnuPG-backup.tar.gz
.gnupg/
.gnupg/gpg-agent-info
.gnupg/pubring.kbx
.gnupg/gpg.conf
.gnupg/private-keys-v1.d/
.gnupg/reader_0.status
.gnupg/pubring.gpg~
.gnupg/secring.gpg
.gnupg/scdaemon.conf
.gnupg/gpa.conf
.gnupg/trustdb.gpg
.gnupg/pubring.gpg
diego@str957-004:~$ gpg --clearsign GnuPG-backup.tar.gz

È necessaria una passphrase per sbloccare la chiave segreta
dell'utente: Diego t...@example.com
2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14

diego@str957-004:~$ gpg --verify GnuPG-backup.tar.gz.asc
gpg: Firma eseguita in data ven 14 nov 2014 14:07:57 CET usando RSA, ID 
chiave F9B9D307

gpg: Firma valida da Diego t...@example.com


I notice that no one on this list - for all the talk of oh I've done it can 
offer no
practical information has to HOW. No one. No one. No one knows how to do this 
simple task.
In all my 20 years I have never found out how. Perhaps things are different 
under a Windows
O/S but on Linux there is NO SOLUTION.

Done just now in Ubuntu. So there's an error on your side.

BYtE,
 Diego.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Johan Wevers
On 14-11-2014 12:45, da...@gbenet.com wrote:

 I have done everything correctly

Apparently not. Or maybe the files are corrupted? Do they still work on
the original computer?

 - and my conclusions are still the same NO ONE HAS EVER
 SUCCESSFULLY MADE A MIRROR COPY OF THEIR .GNUPG AND HAD A FULLY 100 PER CENT 
 WORKING SIGNING
 AND ENCRYPTION PROGRAMME THAT WORKS.

I did. Switched even between Linux and Windows, no problems. In the
latter case, I did make a few changes to gnupg.conf since Windows has a
different directory structure but that's all.

 THERE IS NO CLEAR INSTRUCTIONS FROM ANYONE - SIMPLY BECAUSE YOU HAVE NEVER 
 EVER DONE IT.

Stop shouting, we're neither deaf nor blind.

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg4usb: Portable GUI for GnuPG

2014-11-14 Thread Johan Wevers
On 14-11-2014 12:16, flapflap wrote:

 if you refer to the Lock switch of SD memory cards, then please note
 that this Lock switch is only evaluated in OS software and no
 physical/electrical protection of the flash IC.
[...]
 USB sticks with real physical (i.e. electrically routed to the
 write-protect pin of the flash IC) write protection are rare, but they
 exist (as you said).

I didn't know that, and I'm not sure if the sticks I have do the former
or the later. I should try to remount them rw on a Linux box and then
try to write something to them to test it.

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 2.1.0: --refresh-keys regression

2014-11-14 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 11/12/2014 10:34 AM, Werner Koch wrote:
 On Tue, 11 Nov 2014 23:49, ara...@aixah.de said:
 
 One of the changes introduced with GnuPG 2.1 -- namely, using
 dirmngr for key retrieval -- has caused some problems for me.
 First of all, I'm
 
 Thanks for reporting.  I am already aware of it asdkg already
 reported that a few days ago.

Thank you for fixing this issue, I just confirmed it working nicely
again in gpg (GnuPG) 2.1.1-beta17.

 
 dirmngr also seems to have problems with hkps certificate
 checking for keyserver addresses with round-robin DNS, but I need
 to examine this further before I can provide details.
 

Seems we have the SNI issue back[0,1,2]. Another thing that also
strike me is the number of attempts in the log for verification of
this server rather than continuing to another one (see dirmngr snippet
below).

$ dig sks.karotte.org +short
176.9.51.79

At this point it goes the roundtrip via PTR again as we discussed
earlier:

$ dig -x 176.9.51.79 +short
alita.karotte.org.

And tries to use this as host for keyserver... but this host is not
defined for SKS services and as such we get (i) a connection failure
(CA cert is used rather than sks-keyservers.net CA) (ii) if accepting
(i) a 404 as no virtualhost is set up for this offering SKS

Sorry if the debug info part is a bit messy, but it shows the various
scenarios when testing with curl to show the differences here.

References:

[0] http://lists.gnupg.org/pipermail/gnupg-devel/2014-May/028458.html
[1] http://lists.gnupg.org/pipermail/gnupg-devel/2014-May/028460.html
[2] http://lists.gnupg.org/pipermail/gnupg-devel/2014-May/028465.html

Debug info:

using hkps.pool.sks-keyservers.net as SNI (works using pool CA):

 ---snip---
$ curl -vv --cacert $HOME/.gnupg/sks-keyservers.netCA.pem -
- -resolve 'hkps.pool.sks-keyservers.net:443:176.9.51.79'
https://hkps.pool.sks-k
eyservers.net/pks/lookup?op=stats
* Added hkps.pool.sks-keyservers.net:443:176.9.51.79 to DNS cache
* Hostname was found in DNS cache
*   Trying 176.9.51.79...
* Connected to hkps.pool.sks-keyservers.net (176.9.51.79) port 443 (#0)
* Initializing NSS with certpath: none
*   CAfile: /home/kristianf/.gnupg/sks-keyservers.netCA.pem
  CApath: none
* SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
* Server certificate:
*   subject:
E=ad...@sks.karotte.org,CN=sks.karotte.org,O=sks.karotte.org,C=
DE
*   start date: Nov 07 12:35:30 2014 GMT
*   expire date: Nov 07 12:35:30 2015 GMT
*   common name: sks.karotte.org
*   issuer: CN=sks-keyservers.net CA,O=sks-keyservers.net
CA,ST=Oslo,C=NO
 GET /pks/lookup?op=stats HTTP/1.1 User-Agent: curl/7.39.0 Host:
 hkps.pool.sks-keyservers.net Accept: */* 
 ---snip---

using sks.karotte.org (works using CA Cert)
$ curl -vv https://sks.karotte.org/pks/lookup?op=stats;
* Hostname was NOT found in DNS cache
*   Trying 176.9.51.79...
* Connected to sks.karotte.org (176.9.51.79) port 443 (#0)
* Initializing NSS with certpath: none
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: none
* SSL connection using TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
* Server certificate:
*   subject: CN=*.karotte.org
*   start date: Apr 18 10:59:40 2014 GMT
*   expire date: Apr 17 10:59:40 2016 GMT
*   common name: *.karotte.org
*   issuer: CN=CAcert Class 3
Root,OU=http://www.CAcert.org,O=CAcert Inc.
 GET /pks/lookup?op=stats HTTP/1.1 User-Agent: curl/7.39.0 Host:
 sks.karotte.org Accept: */* ---snip---

using alita.karotte.org (connects using CAcert, no sks service so
returns 404):

 ---snip---
title404 Not Found/title
/headbody
h1Not Found/h1
pThe requested URL /pks/lookup was not found on this server./p
 ---snip---

And dirmngr log:

 ---snip---

2014-11-14 13:59:19 dirmngr[5952.0] DBG: chan_0 - KEYSERVER --clear
hkps://hkps.pool.sks-keyservers.net

...
2014-11-14 13:59:23 dirmngr[5952.0] DBG: expected hostname:
alita.karotte.org
2014-11-14 13:59:23 dirmngr[5952.0] DBG: BEGIN Certificate 'server[0]':
2014-11-14 13:59:23 dirmngr[5952.0] DBG:  serial: 02326A
2014-11-14 13:59:23 dirmngr[5952.0] DBG:   notBefore: 2014-04-18 10:59:40
2014-11-14 13:59:23 dirmngr[5952.0] DBG:notAfter: 2016-04-17 10:59:40
2014-11-14 13:59:23 dirmngr[5952.0] DBG:  issuer: CN=CAcert Class
3 Root,OU=http://www.CAcert.org,O=CAcert Inc.
2014-11-14 13:59:23 dirmngr[5952.0] DBG: subject: CN=*.karotte.org
2014-11-14 13:59:23 dirmngr[5952.0] DBG:   hash algo:
1.2.840.113549.1.1.13
2014-11-14 13:59:23 dirmngr[5952.0] DBG:   SHA1 fingerprint:
7B587956C292593511947904CD88937BC4B610BB
2014-11-14 13:59:23 dirmngr[5952.0] DBG: END Certificate
2014-11-14 13:59:23 dirmngr[5952.0] DBG: BEGIN Certificate 'server[1]':
2014-11-14 13:59:23 dirmngr[5952.0] DBG:  serial: 00
2014-11-14 13:59:23 dirmngr[5952.0] DBG:   notBefore: 2003-03-30 12:29:49
2014-11-14 

Re: Why the software is crap

2014-11-14 Thread Johan Wevers
On 14-11-2014 13:24, da...@gbenet.com wrote:

 I have cooled. You can export your private key - you can export your public 
 key.

I've never done that, except when I imported my old pgp 2.x keys in
GnuPG a long time ago (sometime when GnuPG became really usable on
windows, with 1.0.4 or so). Exporting and  re-importing keys can often
lead to warnings about thrust issues.

I just copied pubring.gpg, secring.gpg, trustdb.gpg and gpg.conf. The
last one sometimes required manual editing, especially in the time when
IDEA and RSA were loadable modules, but that's long over.

Sometimes the owner/group and properties need to be set but my
experience is that GnuPG complains clearly when you do that wrong
(importing a key while pubring is not writable will fail of course).

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Fermi estimates

2014-11-14 Thread Philip Jackson
On 14/11/14 03:36, Robert J. Hansen wrote:
 Whoops!
 so 10**30 years.  The universe is about 10 billion years old, or
 10**13 years, so ... our brute-force key cracker takes 10**17 times
 longer than the age of the universe in order to brute-force a 128-bit
 key.
 
 10 billion is 10**10, so it takes 10**20 times the age of the universe.
 But at some point, who's counting?
 
 Admittedly, that energy gets released over 10**13 times the age of
 the universe...
 
 10**20.
 

Thanks for that (and the previous) It makes the brain hurt but raises a few
questions in my mind.

Does anything prevent the key breaker getting lucky and cracking it first try?
It seems to me that all discussions on key breaking with their very large
numbers always assume that the last try is THE ONE.

And how does the cracker know he has succeeded ?  Does he have to pause between
each iteration to see if he has 'something good' ?  And in the 10**38 key
attempts, what's the chance of having multiple apparently 'GOOD ONES' ?

Perhaps a double bluff is needed :  send the message in plain text with just a
hint that it might be encrypted ?

Philip


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Fermi estimates

2014-11-14 Thread Robert J. Hansen

Thanks for that (and the previous) It makes the brain hurt but
raises a few questions in my mind.


The real purpose of a Fermi estimate isn't to give you solid answers:
it's to give you an appreciation of the problem.  If it does that, it's
done its job.

(Also, a listmember named Ineiev points out that I *may* be misapplying
the Margolus-Levitin theorem.  It's ... interesting.  I need to think on
it for a while.  The objection is basically, that much energy has to be
present, but not necessarily released as heat: Landauer still applies.
You need something really energetic, but that energy might not be
world-ending.  I don't know: I need to think about that.  :) )


Does anything prevent the key breaker getting lucky and cracking it
first try?


Nope.  The odds are considerably worse than the lottery, though.


It seems to me that all discussions on key breaking with their very
large numbers always assume that the last try is THE ONE.


The assumption is the key is broken after exhausting 50% of the keyspace.


And how does the cracker know he has succeeded ?


We're assuming the cracker has a crib -- a known message header or
something similar.  This is usually a safe assumption to make.


Does he have to pause between each iteration to see if he has
'something good' ?


Checking takes time, yes.


And in the 10**38 key attempts, what's the chance of having multiple
apparently 'GOOD ONES' ?


Infinitesimal.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Gabriel Niebler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear David, dear fellow GnuPG users,

this conversation made me curious, so I tried to do it myself. Here's
what I did on my work laptop, just now, five minutes ago (in my home dir):

$ rm -rf .gnupg
$ scp -r ${myfileserver}:${pathtobackupsfromOTHERlaptop}/.gnupg/ .
(...)
$ rm .gnupg/random_seed
$ echo My hovercraft is full of fish, but I tell everyone they're
eels.  my_big_secret.txt
$ gpg --encrypt --recipient 0x65A3F1CC8303C0EC my_big_secret.txt
$ rm my_big_secret.txt
$ gpg --decrypt my_big_secret.txt.gpg

You need a passphrase to unlock the secret key for
user: Gabriel Niebler gabriel.nieb...@gmail.com
2048-bit RSA key, ID 0x65A3F1CC8303C0EC, created 2014-03-16
 (subkey on main key ID 0xD05AF6C786CB34F4)

gpg: encrypted with 2048-bit RSA key, ID 0x65A3F1CC8303C0EC, created
2014-03-16
  Gabriel Niebler gabriel.nieb...@gmail.com
My hovercraft is full of fish, but I tell everyone they're eels.


So this all worked and the fact that this message is signed (using
Enigmail/Thunderbird) is further proof that the method worked for me.

Now that we have established that simply copying over your .gnupg
directory from one machine to another and deleting random_seed does
indeed produce the desired result for some people, maybe you can walk
us through exactly what you did and we'll see if we can't figure out
what the problem is. I suggest copying and pasting shell commands and
their output verbatim.

If you do not want to bother the rest of the list with this you are
welcome to send mails directly to me. I am not an expert, but I'm
willing to help you.

Best
gabe

-BEGIN PGP SIGNATURE-
Version: GnuPG v1

iQEcBAEBCgAGBQJUZgXnAAoJEO7XEikU4kSz93IH/19F+c4ED9L+XesojRuD0Svs
OEwcm6GJHpc3QvTfIbhpwbJdOzcrAX49SD/bqw9stBYY+CO3Zf6oo0ANbqtTwZUd
0kMbxz9gtjNqFW7xfVZOpRpNqhUZ/Rob1msTZT2pmw3Jl2iqVIT3VgYIA5hGsy30
LFsH8ROg3ksMTcyukLoN/Ihe/j0W/zz96xy53lDyb8ASuX1xf6oFSVWpqmWrz4xK
9UO2EV1WNZyl8BGwPMbcmqCjResi7l0zZ5bnQ7YUxs0wb9yj/Dke/Erl75wFPezK
GQcjUT4d9fJ56sgDQ2V8AUJ0LMMt/FoeFIF7d0DKxANUjS1EBNHhEWnwmQVDZjo=
=IuI2
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Robert J. Hansen

No one. No one. No one knows how to do this simple task.


(a) delete random_seed
(b) copy your .gnupg directory over

I don't see the problem.  I've done this at least fifty different times
in the last year as I've stood up virtual machines.  If you'd like a
copy of the Python script I use to do this quickly, say the word.  It
probably won't be useful for you unless you stand up a lot of virtual
machines, but...


As I have said no one has ever successfully transferred their public
and private keys between machines and got them to successfully work.
That's a real fact. And no one on this list as any practical
solutions that work in the real world. That's a fact. The fact is no
one on this list has ever done it with 100 per cent success. That's a
fact.


These are not facts.

Take a deep breath.  There are people here who want to help you, people 
who have successfully done what you want to do.  Keep a cool head and 
work the problem.  Let's not make matters worse with harsh words, okay?


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Fermi estimates

2014-11-14 Thread Johan Wevers
On 14-11-2014 16:01, Philip Jackson wrote:

 Does anything prevent the key breaker getting lucky and cracking it first try?

No. It's just extremely unlikely.

 It seems to me that all discussions on key breaking with their very large
 numbers always assume that the last try is THE ONE.

Nu, usually one assumes that brute forcing requires, on average,
scanning half the keyspace.

 And how does the cracker know he has succeeded ?

That's the tricky part. If the output of the encryption program is just
encrypted text, the only way is to see if there's something recognizable
in the decrypted stuff. But most software includes some kind of CRC
check or a hash so that can be checked. GnuPG does this.

 Does he have to pause between
 each iteration to see if he has 'something good' ?

Yes.

-- 
ir. J.C.A. Wevers
PGP/GPG public keys at http://www.xs4all.nl/~johanw/pgpkeys.html


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Help needed

2014-11-14 Thread Jason Antony
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2014-11-14 09:33, da...@gbenet.com wrote:

 But I get the following error when signing my mail: Key 0xAAd8C47D
 not found or not valid. The (sub-)key might have expired. The key
 is visible in Enigmail Kgpg Kleopatra GPA I'm not able to edit my
 key I can't enter my passphrase.

The solution may be to re-install pinentry, as described here:

http://baitisj.blogspot.com.au/2014/07/enigmail-key-not-found-or-not-valid.html

Let us know how you go.

Cheers,

Jason

-BEGIN PGP SIGNATURE-
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=hUx5
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: gpg4usb: Portable GUI for GnuPG

2014-11-14 Thread vedaal


On 11/13/2014 at 5:23 PM, Robert J. Hansen r...@sixdemonbag.org wrote:

Putting it on CD-ROM might be a pretty cool idea

=

It's already been done by UPR.
https://www.privacy-cd.org/en

It uses Ubuntu 12.04 with  GnuPG  and pre-7.2 Truecrypt already installed. 
(open source roll-your-own available).

I've tried it a few times and found it interesting, in that I couldn't access 
anything on the host computer's hard disc, or go online,  
features instituted to protect the UPR user, but also protects the host 
computer, 
(and makes it easier to get permission to *borrow* a frend's laptop to do some 
work on files on my usb  ;-)  )

Anyone here have any experience with it?


TIA,

vedaal


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Help needed

2014-11-14 Thread da...@gbenet.com
On 14/11/14 15:28, Jason Antony wrote:
 On 2014-11-14 09:33, da...@gbenet.com wrote:
 
 But I get the following error when signing my mail: Key 0xAAd8C47D
 not found or not valid. The (sub-)key might have expired. The key
 is visible in Enigmail Kgpg Kleopatra GPA I'm not able to edit my
 key I can't enter my passphrase.
 
 The solution may be to re-install pinentry, as described here:
 
 http://baitisj.blogspot.com.au/2014/07/enigmail-key-not-found-or-not-valid.html
 
 Let us know how you go.
 
 Cheers,
 
 Jason
 
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
I get:

david@laptop-1:~$  sudo pkg install pinentry-gtk2
[sudo] password for david:
sudo: pkg: command not found
david@laptop-1:~$ sudo apt-get install pinentry-gtk2
Reading package lists... Done
Building dependency tree
Reading state information... Done
pinentry-gtk2 is already the newest version.
pinentry-gtk2 set to manually installed.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
david@laptop-1:~$

So that's a complete failure

David

-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 11:47, NdK wrote:
 Il 14/11/2014 12:41, da...@gbenet.com ha scritto:
 
 I usually just lurk, but that's too much...
 
 I even tried exporting my private and public key from the command line and 
 then tried
 importing. The same error message as before. I have checked on the internet 
 - most of the
 suggestions are crap - the authors have never ever tried to do what they 
 suggest others to
 do. If they had done so then they would have known just how crappy their 
 supposed
 expertise was.
 I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and 
 found this to be a
 useless pile of crap also.
 Surely you're doing it wrong, overlooking some passage. So don't blame others 
 for something
 *you* are doing wrong.
 
 I am faced with two options:
 (1) Create yet another set of keys
 (2) Give up using gnupg after some 20 years
 (3) Do it the right way as everyone else and admit you were doing something 
 wrong.
 
 I think I will unsubscribe from this list and give up on gnupg as a pile of 
 crap.
 And that will be better for the whole community.
 
 BYtE,
  Diego.
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
Another completely pointless response

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread da...@gbenet.com
On 14/11/14 12:15, Jason Antony wrote:
 On 2014-11-14 22:45, da...@gbenet.com wrote:
 
 I have done everything correctly - and my conclusions are still
 the same NO ONE HAS EVER SUCCESSFULLY MADE A MIRROR COPY OF THEIR
 .GNUPG AND HAD A FULLY 100 PER CENT WORKING SIGNING AND ENCRYPTION
 PROGRAMME THAT WORKS.
 
 But many have succeeded in it. Add myself to the list of people who
 have successfully backed up and re-used my GPG data files for over ten
 years, across various operating systems.
 
 It would be best to re-visit the problem when you're in a clear, calm
 frame of mind.
 
 All the best,
 
 Jason
 
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
Another pointless answer - no practical data - so there's no validity in what 
you say

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 12:37, Samir Nassar wrote:
 David,
 
 It might not be clear, but many of us have easily and simply migrated our 
 .gnupg directories from computer to computer.
 
 I've even deleted my .gnupg directory and restored it from backups. I've 
 intentionally messed up my private key and restored my private key to working 
 status from backups.
 
 I guess I don't understand why you can't copy .gnupg from one system to 
 another system.
 
 Yelling on the mailing list is extremely rude. It is now very clear, and 
 archived, how you feel about the topic. Repeating yourself further in the 
 manner you have been using will only alienate people and will not move you to 
 a resolution.
 
 You've registered your complaint, it has been discussed, and now your 
 behavior 
 is counter-productive.
 
 Samir
 
 
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
Backups don't work there are no practical solutions and therefor what you say 
haS NO VALIDITY

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 12:41, Tristan Santore wrote:
 On 14/11/14 13:24, da...@gbenet.com wrote:
 On 14/11/14 11:55, Martin Behrendt wrote:
 Am 14.11.2014 um 12:41 schrieb da...@gbenet.com:
 Hello All,

 I even tried exporting my private and public key from the command line and 
 then tried
 importing. The same error message as before. I have checked on the 
 internet - most of the
 suggestions are crap - the authors have never ever tried to do what they 
 suggest others to
 do. If they had done so then they would have known just how crappy their 
 supposed
 expertise was.

 I have even looked through https://www.gnupg.org/faq/GnuPG-FAQ.html  and 
 found this to be a
 useless pile of crap also.

 I am faced with two options:

 (1) Create yet another set of keys
 (2) Give up using gnupg after some 20 years

 I think I will unsubscribe from this list and give up on gnupg as a pile 
 of crap.

 David


 I think unsubscribing is the best thing you can do. Because you probably
 successfully destroyed the good intension and motivation of anyone
 helping you, with the offending nonsense you wrote in your last mails.

 If you are angry just shut up and write again after you cooled yourself
 down. The problem is more likely with you because there are not many
 people reporting such problems.
 And I can tell from my own experience that it is not even a problem
 copying the content of the gnupg directory between windows and linux.
 Tried that successfully.
 Maybe you should read the FAQ again (and try to understand what is
 written). Maybe there is a difference between exporting the public part
 of a key and the private part.

 Anyway, enjoy your life.
 Martin

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

 Martin,

 I have cooled. You can export your private key - you can export your public 
 key. You can
 import your private key you can import your public key. In 20 years I have 
 always had the
 same problem - the same error message and have each time created a new set 
 of keys. I have
 done this 4 times.

 I notice that no one on this list - for all the talk of oh I've done it 
 can offer no
 practical information has to HOW. No one. No one. No one knows how to do 
 this simple task.
 In all my 20 years I have never found out how. Perhaps things are different 
 under a Windows
 O/S but on Linux there is NO SOLUTION.

 Perhaps the only solution is to import ones private and public keys and 
 lose all your
 contacts - ie a brand new installation. But I repeat BUT no one has ever 
 created a mirror
 image of a .gnupg and had a fully 100 per cent working signing and 
 encryption functionality.
 No one. There are no real practical solutions written anywhere on the 
 internet.

 There is nothing of any value in  https://www.gnupg.org/faq/GnuPG-FAQ.html - 
 there never was
 in all the 20 years of reading it.

 Sure you can moan criticise me for my getting frustrated - and you can all 
 moan and cringe
 and all withdraw your support - BUT NO ONE HAS EVER OFFERED ANY PRACTICAL 
 USEFUL ADVICE THAT
 WILL ENABLE ME TO TRANSFER MY KEYS AND HAVE THEM WORKING CORRECTLY. NO ONE. 
 NOT EVEN YOU.

 You are offended? Why? It is an easy thing to do is it not to moan about 
 what and how people
 express themselves - yet you completely ignore the real issue. You ignore is 
 because you can
 offer no real meaningful solution. As I have said no one has ever 
 successfully transferred
 their public and private keys between machines and got them to successfully 
 work. That's a
 real fact. And no one on this list as any practical solutions that work in 
 the real world.
 That's a fact. The fact is no one on this list has ever done it with 100 per 
 cent success.
 That's a fact. There is no practical advice on the internet. That's a fact.

 David


 David,
 
 I am pretty sure I have seen advice on how to backup and restore your keys, 
 if not on this
 list, in the countless smartcard how to.
 
 I must admit I have not followed previous threads from you, but you must 
 admit and be fair,
 that generally most people here are friendly and supportive. But I have seen 
 the topic come
 up a few times, so maybe this is a security versus usability issue ? But 
 again, I have not
 followed exactly what your problem is. Just wanted to point out that most 
 people are
 reasonably helpful and friendly. Labelling gnupg as crap is, not exactly a 
 fair assessment I
 think, and falls within the lines of labelling selinux crap, because people 
 do not
 understand it/are confused by what is going on.
 
 Anyway. I hope you work it out in the end and I am sure, somebody will be 
 willing yo nudge
 you in the right direction.
 
 Regards,
 
 Tristan
 
Another pointless response

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No

Re: My Conclusions

2014-11-14 Thread da...@gbenet.com
On 14/11/14 12:46, Werner Koch wrote:
 On Fri, 14 Nov 2014 12:34, nicholas.c...@gmail.com said:
 
 I'm sorry you are having problems, but I think this is just nonsense.
 Of course people move keys between machines all the time.  I have done
 
 Right.  And you may even copy it from one OS to an entirely different
 one.  The files are fully platform independent.
 
 Yet another of these gnome-keyring-daemon problems?
 
 
 Salam-Shalom,
 
Werner
 

Werner,

I have done everything - but have a complete and absolute failure. Nothing 
works - I get the
same error time and time again.

David



-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread da...@gbenet.com
On 14/11/14 13:14, Johan Wevers wrote:
 On 14-11-2014 12:45, da...@gbenet.com wrote:
 
 I have done everything correctly
 
 Apparently not. Or maybe the files are corrupted? Do they still work on
 the original computer?
 
 - and my conclusions are still the same NO ONE HAS EVER
 SUCCESSFULLY MADE A MIRROR COPY OF THEIR .GNUPG AND HAD A FULLY 100 PER CENT 
 WORKING SIGNING
 AND ENCRYPTION PROGRAMME THAT WORKS.
 
 I did. Switched even between Linux and Windows, no problems. In the
 latter case, I did make a few changes to gnupg.conf since Windows has a
 different directory structure but that's all.
 
 THERE IS NO CLEAR INSTRUCTIONS FROM ANYONE - SIMPLY BECAUSE YOU HAVE NEVER 
 EVER DONE IT.
 
 Stop shouting, we're neither deaf nor blind.
 

Everything works 100 per cent fine on the other laptop

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 13:11, NdK wrote:
 Il 14/11/2014 13:24, da...@gbenet.com ha scritto:
 
 I have cooled. You can export your private key - you can export your public 
 key. You can
 import your private key you can import your public key. In 20 years I have 
 always had the
 same problem - the same error message and have each time created a new set 
 of keys. I have
 done this 4 times.
 If all four times you did the same wrong thing, then it's obvious that you 
 got the same
 wrong result.
 
 Just to prove it's your error, I copied my .gnupg from one system 
 (str957-142) to another
 (str957-004), with the most basic method I ould think of. I'm not an expert 
 (probably I
 transferred more than what was needed!), but as you can see I succeeded at 
 the first try!
 
 diego@str957-142:~$ gpg --list-secret-keys
 /home/diego/.gnupg/secring.gpg
 
 sec   2048R/F9B9D307 2014-11-14
 uid  Diego t...@example.com
 ssb   2048R/3A4AD1C0 2014-11-14
 
 diego@str957-142:~$ tar cvfz GnuPG-backup.tar.gz --exclude random_seed .gnupg
 diego@str957-142:~$ gpg --clearsign GnuPG-backup.tar.gz
 
 È necessaria una passphrase per sbloccare la chiave segreta
 dell'utente: Diego t...@example.com
 2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14
 
 diego@str957-142:~$ ls GnuPG-backup.tar.gz*
 GnuPG-backup.tar.gz  GnuPG-backup.tar.gz.asc
 diego@str957-142:~$ scp GnuPG-backup.tar.gz diego@str957-004:/home/diego
 
 Then on the other PC:
 
 diego@str957-004:~$ tar xvfz GnuPG-backup.tar.gz
 .gnupg/
 .gnupg/gpg-agent-info
 .gnupg/pubring.kbx
 .gnupg/gpg.conf
 .gnupg/private-keys-v1.d/
 .gnupg/reader_0.status
 .gnupg/pubring.gpg~
 .gnupg/secring.gpg
 .gnupg/scdaemon.conf
 .gnupg/gpa.conf
 .gnupg/trustdb.gpg
 .gnupg/pubring.gpg
 diego@str957-004:~$ gpg --clearsign GnuPG-backup.tar.gz
 
 È necessaria una passphrase per sbloccare la chiave segreta
 dell'utente: Diego t...@example.com
 2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14
 
 diego@str957-004:~$ gpg --verify GnuPG-backup.tar.gz.asc
 gpg: Firma eseguita in data ven 14 nov 2014 14:07:57 CET usando RSA, ID 
 chiave F9B9D307
 gpg: Firma valida da Diego t...@example.com
 
 I notice that no one on this list - for all the talk of oh I've done it 
 can offer no
 practical information has to HOW. No one. No one. No one knows how to do 
 this simple task.
 In all my 20 years I have never found out how. Perhaps things are different 
 under a Windows
 O/S but on Linux there is NO SOLUTION.
 Done just now in Ubuntu. So there's an error on your side.
 
 BYtE,
  Diego.
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
I have a clean install of 64 bit LXD - all programmes are working 100 per cent. 
My keys get
imported perfectly - every programme including Enigmail knows they are there. 
But when I try
to sign or sign and encrypt I get the error referred too. No amount of copying 
no amount of
backups no amount of anything will change that fact.

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 13:31, Johan Wevers wrote:
 On 14-11-2014 13:24, da...@gbenet.com wrote:
 
 I have cooled. You can export your private key - you can export your public 
 key.
 
 I've never done that, except when I imported my old pgp 2.x keys in
 GnuPG a long time ago (sometime when GnuPG became really usable on
 windows, with 1.0.4 or so). Exporting and  re-importing keys can often
 lead to warnings about thrust issues.
 
 I just copied pubring.gpg, secring.gpg, trustdb.gpg and gpg.conf. The
 last one sometimes required manual editing, especially in the time when
 IDEA and RSA were loadable modules, but that's long over.
 
 Sometimes the owner/group and properties need to be set but my
 experience is that GnuPG complains clearly when you do that wrong
 (importing a key while pubring is not writable will fail of course).
 

That fails

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread da...@gbenet.com
On 14/11/14 13:38, Gabriel Niebler wrote:
 Dear David, dear fellow GnuPG users,
 
 this conversation made me curious, so I tried to do it myself. Here's
 what I did on my work laptop, just now, five minutes ago (in my home dir):
 
 $ rm -rf .gnupg
 $ scp -r ${myfileserver}:${pathtobackupsfromOTHERlaptop}/.gnupg/ .
 (...)
 $ rm .gnupg/random_seed
 $ echo My hovercraft is full of fish, but I tell everyone they're
 eels.  my_big_secret.txt
 $ gpg --encrypt --recipient 0x65A3F1CC8303C0EC my_big_secret.txt
 $ rm my_big_secret.txt
 $ gpg --decrypt my_big_secret.txt.gpg
 
 You need a passphrase to unlock the secret key for
 user: Gabriel Niebler gabriel.nieb...@gmail.com
 2048-bit RSA key, ID 0x65A3F1CC8303C0EC, created 2014-03-16
  (subkey on main key ID 0xD05AF6C786CB34F4)
 
 gpg: encrypted with 2048-bit RSA key, ID 0x65A3F1CC8303C0EC, created
 2014-03-16
   Gabriel Niebler gabriel.nieb...@gmail.com
 My hovercraft is full of fish, but I tell everyone they're eels.
 
 
 So this all worked and the fact that this message is signed (using
 Enigmail/Thunderbird) is further proof that the method worked for me.
 
 Now that we have established that simply copying over your .gnupg
 directory from one machine to another and deleting random_seed does
 indeed produce the desired result for some people, maybe you can walk
 us through exactly what you did and we'll see if we can't figure out
 what the problem is. I suggest copying and pasting shell commands and
 their output verbatim.
 
 If you do not want to bother the rest of the list with this you are
 welcome to send mails directly to me. I am not an expert, but I'm
 willing to help you.
 
 Best
 gabe
 
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 

I tried this with my keys - it was successful - I even imported my keys 
successfully but I
get the same error as before.

David


-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Nicholas Cole
David,

I've read most of your emails about this, and I don't see any
description of the command you have entered or the error you are
getting.

Trying to diagnose it doesn't work error reports is a little like
trying to type blind: you might get it right, but you'll probably just
frustrate anyone trying to read what you've written.  The standard way
to report errors is:

1. What are you trying to do?

2. What command(s) did you enter exactly?

3. What did you expect to see?

4. What did you actually see?

So far, I can only see the answer to question 1.

N.


On Fri, Nov 14, 2014 at 5:11 PM, da...@gbenet.com da...@gbenet.com wrote:
 On 14/11/14 11:56, Nicole Faerber wrote:
 Oh please, I am using gnupg with the same keys on at least five
 machines with no issue.

 I simply copied the .gnupg directory, end of story.

 Cheers
   nicole


 Am 14.11.2014 um 12:45 schrieb da...@gbenet.com:
 On 14/11/14 11:34, Nicholas Cole wrote:
 David,

 I'm sorry you are having problems, but I think this is just
 nonsense. Of course people move keys between machines all the
 time.  I have done it myself often.  I don't think that anyone
 deserves that level of abuse -- certainly not someone who has put
 years of work into a program that is an industry standard and
 released it for free.

 Nicholas

 On Fri, Nov 14, 2014 at 10:42 AM, da...@gbenet.com
 da...@gbenet.com wrote:
 Hi All,

 After spending 62 hours on what I thought would be a simple
 task namely to get a fully functioning gnupg mirror on my 64
 bit Linux system - I realise this is an impossible task to do.
 In the past I've ended up creating a new set of certificates -
 but this time round I thought that I would apply some effort.

 My conclusion is It IS Impossible To Transfer Your Keys From
 The Same O/S To Another Machine.

 There is no one in the entire universe that has ever attempted
 it. And if they have THEY HAVE FAILED. Not one person on this
 list knows how to do it successfully. No one. NOT ONE OF YOU
 can transfer a mirror image of your .gnupg folder and expect it
 to work.

 This tells me what I have long suspected - yes it's good at
 encryption and signing but the programme is fundamentally
 flawed as to make it utter crap. My keys are PERFECT but the
 software is CRAP. Werner Koch knows it's crap. Every one knows
 it's crap.

 So, If I want to go on signing and encrypting my emails I HAVE
 TO CREATE ANOTHER SET A BLOODY KEYS

 I am not a happy bunny!!!

 David




 -- “See the sanity of the man! No gods, no angels, no demons,
 no body. Nothing of the kind.Stern, sane,every brain-cell
 perfect and complete even at the moment of death. No delusion.”
 https://linuxcounter.net/user/512854.html - http://gbenet.com

 ___ Gnupg-users
 mailing list Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

 ___ Gnupg-users
 mailing list Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

 I have done everything correctly - and my conclusions are still the
 same NO ONE HAS EVER SUCCESSFULLY MADE A MIRROR COPY OF THEIR
 .GNUPG AND HAD A FULLY 100 PER CENT WORKING SIGNING AND ENCRYPTION
 PROGRAMME THAT WORKS.

 THERE IS NO CLEAR INSTRUCTIONS FROM ANYONE - SIMPLY BECAUSE YOU
 HAVE NEVER EVER DONE IT.

 David




 Viele Grüße
   nicole faerber


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

 That does not work

 David

 --
 “See the sanity of the man! No gods, no angels, no demons, no body. Nothing 
 of the
 kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
 death. No
 delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread da...@gbenet.com
On 14/11/14 11:56, Nicole Faerber wrote:
 Oh please, I am using gnupg with the same keys on at least five
 machines with no issue.
 
 I simply copied the .gnupg directory, end of story.
 
 Cheers
   nicole
 
 
 Am 14.11.2014 um 12:45 schrieb da...@gbenet.com:
 On 14/11/14 11:34, Nicholas Cole wrote:
 David,

 I'm sorry you are having problems, but I think this is just
 nonsense. Of course people move keys between machines all the
 time.  I have done it myself often.  I don't think that anyone
 deserves that level of abuse -- certainly not someone who has put
 years of work into a program that is an industry standard and
 released it for free.

 Nicholas

 On Fri, Nov 14, 2014 at 10:42 AM, da...@gbenet.com
 da...@gbenet.com wrote:
 Hi All,

 After spending 62 hours on what I thought would be a simple
 task namely to get a fully functioning gnupg mirror on my 64
 bit Linux system - I realise this is an impossible task to do.
 In the past I've ended up creating a new set of certificates -
 but this time round I thought that I would apply some effort.

 My conclusion is It IS Impossible To Transfer Your Keys From
 The Same O/S To Another Machine.

 There is no one in the entire universe that has ever attempted
 it. And if they have THEY HAVE FAILED. Not one person on this
 list knows how to do it successfully. No one. NOT ONE OF YOU
 can transfer a mirror image of your .gnupg folder and expect it
 to work.

 This tells me what I have long suspected - yes it's good at
 encryption and signing but the programme is fundamentally
 flawed as to make it utter crap. My keys are PERFECT but the 
 software is CRAP. Werner Koch knows it's crap. Every one knows
 it's crap.

 So, If I want to go on signing and encrypting my emails I HAVE
 TO CREATE ANOTHER SET A BLOODY KEYS

 I am not a happy bunny!!!

 David




 -- “See the sanity of the man! No gods, no angels, no demons,
 no body. Nothing of the kind.Stern, sane,every brain-cell
 perfect and complete even at the moment of death. No delusion.”
 https://linuxcounter.net/user/512854.html - http://gbenet.com

 ___ Gnupg-users
 mailing list Gnupg-users@gnupg.org 
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

 ___ Gnupg-users
 mailing list Gnupg-users@gnupg.org 
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

 I have done everything correctly - and my conclusions are still the
 same NO ONE HAS EVER SUCCESSFULLY MADE A MIRROR COPY OF THEIR
 .GNUPG AND HAD A FULLY 100 PER CENT WORKING SIGNING AND ENCRYPTION
 PROGRAMME THAT WORKS.
 
 THERE IS NO CLEAR INSTRUCTIONS FROM ANYONE - SIMPLY BECAUSE YOU
 HAVE NEVER EVER DONE IT.
 
 David
 
 
 
 
 Viele Grüße
   nicole faerber
 
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 
That does not work

David

-- 
“See the sanity of the man! No gods, no angels, no demons, no body. Nothing of 
the
kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
death. No
delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Gabriel Niebler
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Dear David,

On 14. November 2014 18:30:19 MEZ, da...@gbenet.com da...@gbenet.com wrote:
On 14/11/14 13:38, Gabriel Niebler wrote:
 (...)
 (...) maybe you can walk
 us through exactly what you did and we'll see if we can't figure out
 what the problem is. I suggest copying and pasting shell commands and
 their output verbatim.

 If you do not want to bother the rest of the list with this you are
 welcome to send mails directly to me. I am not an expert, but I'm
 willing to help you.
(...)
I tried this with my keys - it was successful - I even imported my keys
successfully but I
get the same error as before.

Could you please show me exactly what you did, i.e. copy and paste the shell 
session(s),
commands and output. Also, please make it clear which session was run on the 
origin (where
everything works) and which was run on the target (where things don't work).
(Feel free to censor whatever you feel is sensisitive info, of course.)
I really don't believe I can help you without a clear picture what commands you 
ran and the
output they produced.

Don't despair, we'll get it working yet!

Best
gabe
-BEGIN PGP SIGNATURE-
Version: APG v1.1.1

iQFJBAEBCgAzBQJUZkjmLBxHYWJyaWVsIE5pZWJsZXIgPGdhYnJpZWwubmllYmxl
ckBnbWFpbC5jb20+AAoJEO7XEikU4kSzeE4H+wXeFGYeazka0Ck3Cy0xch2nX9Xm
ySGS8N+/1DrGwotHbQfmnEPqhQzK914897G3p8QCuU8enbaYmq27Kig21iqsGRIW
AZNxe9M8aB+WR7oP0YaqmgnM8P/9HykKWCNvNaCLjVZUDSg2JQS1h8WwjYQhTCPe
NQY6YYjtK98XewVQKkKR3+HKYYFPMF9cmFvTTihl4fBDfGZUkcBu+u3nZesfX899
ARBXAeHGSNAras13FDkhfydGTq6eQPK14SQ6jhnfQ7S3BnADRegl/szMe4PlLmc5
5A+TQhWvmCt5neWEJYuLKTiHd1H8OaSGkjPimr4XkpGesGHKQJixFvdO+8k=
=0lWi
-END PGP SIGNATURE-


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Charles Spitzer
Speaking as someone who has worked in a computer support organization for over 
40 years, I must say you make it extremely hard for someone to help you.

You have been asked to provide a list of commands and their output numerous 
times. You have been provided with some command lines to run, with the 
expectation that you'd provide the output from those commands. Simply stating 
That does not work. does not help anyone help you, and the abuse you have 
heaped upon people trying to tell you that make them not want to help further. 

Can you, or can you not, provide a cut/paste of what you are trying to do, 
which includes the actual command lines you are executing, and the output from 
the commands that are being executed?

Regards,
Charlie
-Original Message-
From: Gnupg-users [mailto:gnupg-users-bounces+cspitzer=godaddy@gnupg.org] 
On Behalf Of da...@gbenet.com
Sent: Friday, November 14, 2014 10:12 AM
To: Nicole Faerber; gnupg-users@gnupg.org
Subject: Re: My Conclusions
[Charles Spitzer] 
snip
That does not work

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Help needed

2014-11-14 Thread Johannes Zarl
On Friday 14 November 2014 17:05:12 da...@gbenet.com wrote:
 david@laptop-1:~$  sudo pkg install pinentry-gtk2
 [sudo] password for david:
 sudo: pkg: command not found
 david@laptop-1:~$ sudo apt-get install pinentry-gtk2
 Reading package lists... Done
 Building dependency tree
 Reading state information... Done
 pinentry-gtk2 is already the newest version.
 pinentry-gtk2 set to manually installed.
 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 david@laptop-1:~$
 
 So that's a complete failure

That seems a little harsh, doesn't it? ;-)

After all, you now know that you do indeed have the pinentry-gtk2 installed, 
and we know that you use a Debian-based distro.

Now, you could try to verify that pinentry-gtk2 is the pinentry program that 
you normally use:

$ grep pinentry-program ~/.gnupg/gpg-agent.conf
pinentry-program /usr/bin/pinentry-qt4

If not, you should ensure that the right pinentry program for your environment 
is installed (like you did before with pinentry-gtk2):

$ sudo apt-get install pinentry-qt4

If you don't find the cause of the problem in this way, then there's still 
enough time left to despair if you so wish…

Cheers,
  Johannes

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread NdK
Il 14/11/2014 18:24, da...@gbenet.com ha scritto:

 I have a clean install of 64 bit LXD - all programmes are working 100 per 
 cent. My keys get
 imported perfectly - every programme including Enigmail knows they are there. 
 But when I try
 to sign or sign and encrypt I get the error referred too. No amount of 
 copying no amount of
 backups no amount of anything will change that fact.
Then do what we've already done to try to help you: open a terminal on
the source machine, type the commands and cutpaste to the list.
Unless you do that, showing *exactly* what you've done, I doubt anybody
can help you: all our crystal balls are broken...

And I'm *not* going to try to help you again unless I see that
cutpaste. Wasted time.

BYtE,
 Diego.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Jay Sulzberger



On Fri, 14 Nov 2014, da...@gbenet.com wrote:


Hello All,

I even tried exporting my private and public key from the
command line and then tried importing. The same error message
as before. I have checked on the internet - most of the
suggestions are crap - the authors have never ever tried to do
what they suggest others to do. If they had done so then they
would have known just how crappy their supposed expertise was.

I have even looked through
https://www.gnupg.org/faq/GnuPG-FAQ.html and found this to be a
useless pile of crap also.

I am faced with two options:

(1) Create yet another set of keys
(2) Give up using gnupg after some 20 years

I think I will unsubscribe from this list and give up on gnupg as a pile of 
crap.

David


Of course you are, in part, right.  GnuPG should be easier to set
up and use.  The GnuPG team is well aware of this and work to
make GnuPG easier to use.  But your claims as to the difficulty
of moving keys are not true.  Yesterday at a large organization,
I explained to a cow-orker how to create and distribute keys.
The meeting did not take two hours.  We are now testing the
sub-system, and so far, it seems to work, that is, it does the
job of encryption and decryption.

You claim that you cannot just copy over .gnupg from machine A to
machine B and get a working set of keys on machine B.  But I have
done this successfully more than a few times.  I do not have a
page of instructions, but if you wish, I will meet with you and
we can try to find and/or write such a page.  I think there
already exists such a page, published on the Net, and published
in paper and ink book form, but I will not look for it now.

oo--JS.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Jay Sulzberger


On Fri, 14 Nov 2014, NdK ndk.cla...@gmail.com wrote:


Il 14/11/2014 13:24, da...@gbenet.com ha scritto:

I have cooled. You can export your private key - you can export your public 

key. You can
import your private key you can import your public key. In 20 years I have 

always had the
same problem - the same error message and have each time created a new set 

of keys. I have

done this 4 times.
If all four times you did the same wrong thing, then it's obvious that 
you got the same wrong result.


Just to prove it's your error, I copied my .gnupg from one system 
(str957-142) to another (str957-004), with the most basic method I ould 
think of. I'm not an expert (probably I transferred more than what was 
needed!), but as you can see I succeeded at the first try!


diego@str957-142:~$ gpg --list-secret-keys
/home/diego/.gnupg/secring.gpg

sec   2048R/F9B9D307 2014-11-14
uid  Diego t...@example.com
ssb   2048R/3A4AD1C0 2014-11-14

diego@str957-142:~$ tar cvfz GnuPG-backup.tar.gz --exclude random_seed 
.gnupg

diego@str957-142:~$ gpg --clearsign GnuPG-backup.tar.gz

?? necessaria una passphrase per sbloccare la chiave segreta
dell'utente: Diego t...@example.com
2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14

diego@str957-142:~$ ls GnuPG-backup.tar.gz*
GnuPG-backup.tar.gz  GnuPG-backup.tar.gz.asc
diego@str957-142:~$ scp GnuPG-backup.tar.gz diego@str957-004:/home/diego

Then on the other PC:

diego@str957-004:~$ tar xvfz GnuPG-backup.tar.gz
.gnupg/
.gnupg/gpg-agent-info
.gnupg/pubring.kbx
.gnupg/gpg.conf
.gnupg/private-keys-v1.d/
.gnupg/reader_0.status
.gnupg/pubring.gpg~
.gnupg/secring.gpg
.gnupg/scdaemon.conf
.gnupg/gpa.conf
.gnupg/trustdb.gpg
.gnupg/pubring.gpg
diego@str957-004:~$ gpg --clearsign GnuPG-backup.tar.gz

?? necessaria una passphrase per sbloccare la chiave segreta
dell'utente: Diego t...@example.com
2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14

diego@str957-004:~$ gpg --verify GnuPG-backup.tar.gz.asc
gpg: Firma eseguita in data ven 14 nov 2014 14:07:57 CET usando RSA, ID 
chiave F9B9D307

gpg: Firma valida da Diego t...@example.com

I notice that no one on this list - for all the talk of oh I've done it 

can offer no
practical information has to HOW. No one. No one. No one knows how to do 

this simple task.
In all my 20 years I have never found out how. Perhaps things are different 

under a Windows

O/S but on Linux there is NO SOLUTION.

Done just now in Ubuntu. So there's an error on your side.

BYtE,
 Diego.


Thank you, Diego!

One failure of the culture of Usenet and many mailing lists is an
unreasonable reluctance to publish exact specific code, in answer
to a question about how to do something.  Often an answer of this
form is given:

  Ah, you just have to frobniculate the upper side parser, then
  reduce the dimension of the third homotopy group by killing all
  high pressure *reverse* constraints forced by the file which
  specifies the Lipschitz spectrum, at level 2.  Then just restart
  the daemon.  It may take a minute or two, if the network checks
  are fully enabled, but that is the only trouble I have ever
  had, doing it this way.  Some vora114 administrators recommend
  re-compiling all of the Lipschitz spectrum, some even suggest
  regenerating the Sobolev softmax pragmata, but I have never
  found that necessary.

which is correct, and easily understood by anyone who already
knows how to do the task, but difficult to understand, if you do
not already know how to do the task.  A more useful answer is:

  Become root on the machine.  Then do

  root@example:~# cd /etc/vora114
  root@example:~# cp -a lipschitz.conf lipschitz.conf.bak
  root@example:~# echo frob upper 2 safe  side-parse.conf
  root@example:~# echo :l2 v.. greater-than  l2.l.rev.remove
  root@example:~# grep -v -f l2.l.rev.remove lipschitz.conf  
lipschitz.conf.temp
  root@example:~# mv lipschitz.conf.temp lipschitz.conf
  root@example:~# /etc/init.d/vora114 force-reload

  You may, if vora114 checks all network connections, have to
  wait a few minutes for vora114 to fully start.  So wait five
  minutes and then do

  root@example:~# /etc/init.d/vora114 status

  and send us a copy of the first sixty lines of output.

oo--JS.


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: My Conclusions

2014-11-14 Thread Jason Antony
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 2014-11-15 04:13, da...@gbenet.com wrote:

 Another pointless answer - no practical data - so there's no
 validity in what you say

You are squandering the goodwill of those trying to help you with such
responses, of which you have sent many more. No one has an obligation
to assist you, especially when their requests for terminal output are
ignored, instead met with childish tantrums and hissy fits.

If you want results, learn to behave in a mature manner. Be polite,
and work with us. Else, feel free to leave the list. We do not need
belligerent ingrates.

Regards,

Jason

-BEGIN PGP SIGNATURE-
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=3TmU
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Heinz Diehl
___
   /|  /|  |  |
   ||__||  |   Please don't   |
  /   O O\__   feed   |
 /  \   the troll |
/  \ \|
   /   _\ \ -- 
  /|\\ \ ||
 / | | | |\/ ||
/   \|_|_|/   |__||
   /  /  \|| ||
  /   |   | /||  --|   
  |   |   |// |  --|   
   * _|  |_|_|_|  | \-/
*-- _--\ _ \ //   |
  /  _ \\ _ //   |/
*  /   \_ /- | - |   | 
  *  ___ c_c_c_C/ \C_c_c_c 



___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Mick Crane
Something is strange, I don't know much about this stuff but it seems important 
to you to have encryption working. It is so easy these days to install an OS 
automagically I would, in your case, make a fresh installation on some other 
machine and do what it is you want to do to prove a point. Then once you see it 
working you have confidence.
Cheers
Mick

--
Key ID: 0x4BFEBB31

 On 14 Nov 2014, at 17:24, da...@gbenet.com da...@gbenet.com wrote:
 
 On 14/11/14 13:11, NdK wrote:
 Il 14/11/2014 13:24, da...@gbenet.com ha scritto:
 
 I have cooled. You can export your private key - you can export your public 
 key. You can
 import your private key you can import your public key. In 20 years I have 
 always had the
 same problem - the same error message and have each time created a new set 
 of keys. I have
 done this 4 times.
 If all four times you did the same wrong thing, then it's obvious that you 
 got the same
 wrong result.
 
 Just to prove it's your error, I copied my .gnupg from one system 
 (str957-142) to another
 (str957-004), with the most basic method I ould think of. I'm not an expert 
 (probably I
 transferred more than what was needed!), but as you can see I succeeded at 
 the first try!
 
 diego@str957-142:~$ gpg --list-secret-keys
 /home/diego/.gnupg/secring.gpg
 
 sec   2048R/F9B9D307 2014-11-14
 uid  Diego t...@example.com
 ssb   2048R/3A4AD1C0 2014-11-14
 
 diego@str957-142:~$ tar cvfz GnuPG-backup.tar.gz --exclude random_seed .gnupg
 diego@str957-142:~$ gpg --clearsign GnuPG-backup.tar.gz
 
 È necessaria una passphrase per sbloccare la chiave segreta
 dell'utente: Diego t...@example.com
 2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14
 
 diego@str957-142:~$ ls GnuPG-backup.tar.gz*
 GnuPG-backup.tar.gz  GnuPG-backup.tar.gz.asc
 diego@str957-142:~$ scp GnuPG-backup.tar.gz diego@str957-004:/home/diego
 
 Then on the other PC:
 
 diego@str957-004:~$ tar xvfz GnuPG-backup.tar.gz
 .gnupg/
 .gnupg/gpg-agent-info
 .gnupg/pubring.kbx
 .gnupg/gpg.conf
 .gnupg/private-keys-v1.d/
 .gnupg/reader_0.status
 .gnupg/pubring.gpg~
 .gnupg/secring.gpg
 .gnupg/scdaemon.conf
 .gnupg/gpa.conf
 .gnupg/trustdb.gpg
 .gnupg/pubring.gpg
 diego@str957-004:~$ gpg --clearsign GnuPG-backup.tar.gz
 
 È necessaria una passphrase per sbloccare la chiave segreta
 dell'utente: Diego t...@example.com
 2048-bit chiave RSA, ID F9B9D307, creata 2014-11-14
 
 diego@str957-004:~$ gpg --verify GnuPG-backup.tar.gz.asc
 gpg: Firma eseguita in data ven 14 nov 2014 14:07:57 CET usando RSA, ID 
 chiave F9B9D307
 gpg: Firma valida da Diego t...@example.com
 
 I notice that no one on this list - for all the talk of oh I've done it 
 can offer no
 practical information has to HOW. No one. No one. No one knows how to do 
 this simple task.
 In all my 20 years I have never found out how. Perhaps things are different 
 under a Windows
 O/S but on Linux there is NO SOLUTION.
 Done just now in Ubuntu. So there's an error on your side.
 
 BYtE,
 Diego.
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users
 I have a clean install of 64 bit LXD - all programmes are working 100 per 
 cent. My keys get
 imported perfectly - every programme including Enigmail knows they are there. 
 But when I try
 to sign or sign and encrypt I get the error referred too. No amount of 
 copying no amount of
 backups no amount of anything will change that fact.
 
 David
 
 
 -- 
 “See the sanity of the man! No gods, no angels, no demons, no body. Nothing 
 of the
 kind.Stern, sane,every brain-cell perfect and complete even at the moment of 
 death. No
 delusion.” https://linuxcounter.net/user/512854.html - http://gbenet.com
 
 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Michael A. Yetto
On Fri, 14 Nov 2014 23:28:49 +0100
Heinz Diehl htd...@fritha.org wrote:

___
   /|  /|  |  |
   ||__||  |   Please don't   |
  /   O O\__   feed   |
 /  \   the troll |
/  \ \|
   /   _\ \ -- 
  /|\\ \ ||
 / | | | |\/ ||
/   \|_|_|/   |__||
   /  /  \|| ||
  /   |   | /||  --|   
  |   |   |// |  --|   
   * _|  |_|_|_|  | \-/
*-- _--\ _ \ //   |
  /  _ \\ _ //   |/
*  /   \_ /- | - |   | 
  *  ___ c_c_c_C/ \C_c_c_c 



It was starting to look like Usenet in here. On a group that I
frequent we (TINW - There Is No We) had a nearly three year
campaign by a troll end recently. His technique was to ask for
help on multiple problems and then claim that the solutions
offered didn't work on Linux, but weren't even needed on Windows.

-- 
Mike yes he did get abusive and insulting quickly Yetto
That which can be destroyed by the truth, should be.
 - P. C. Hodgell



pgpVVLFdpTIx4.pgp
Description: OpenPGP digital signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Tristan Santore

On 15/11/14 00:11, Michael A. Yetto wrote:

On Fri, 14 Nov 2014 23:28:49 +0100
Heinz Diehl htd...@fritha.org wrote:


___
   /|  /|  |  |
   ||__||  |   Please don't   |
  /   O O\__   feed   |
 /  \   the troll |
/  \ \|
   /   _\ \ --
  /|\\ \ ||
 / | | | |\/ ||
/   \|_|_|/   |__||
   /  /  \|| ||
  /   |   | /||  --|
  |   |   |// |  --|
   * _|  |_|_|_|  | \-/
*-- _--\ _ \ //   |
  /  _ \\ _ //   |/
*  /   \_ /- | - |   |
  *  ___ c_c_c_C/ \C_c_c_c




It was starting to look like Usenet in here. On a group that I
frequent we (TINW - There Is No We) had a nearly three year
campaign by a troll end recently. His technique was to ask for
help on multiple problems and then claim that the solutions
offered didn't work on Linux, but weren't even needed on Windows.



___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


We call those people, time waster trolls in IRC land.

Regards,
Tristan

--
Tristan Santore BSc MBCS
TS4523-RIPE
Network and Infrastructure Operations
InterNexusConnect
Mobile +44-78-55069812
tristan.sant...@internexusconnect.net

Former Thawte Notary
(Please note: Thawte has closed its WoT programme down,
and I am therefore no longer able to accredit trust)

For Fedora related issues, please email me at:
tsant...@fedoraproject.org

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Why the software is crap

2014-11-14 Thread Julian H. Stacey
Heinz Diehl wrote:
||__||  |   Please don't   |
   /   O O\__   feed   |
  /  \   the troll |

Best forcibly un-subscribe da...@gbenet.com. 

Cheers,
Julian
-- 
Julian Stacey, BSD Linux Unix C Sys Eng Consultant Munich http://berklix.com
 Indent previous with  .  Interleave reply paragraphs like a play script.
 Send plain text, not quoted-printable, HTML, base64, or multipart/alternative.

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users