About Problem of Error when making "libgcrypt" [rndgetentropy.c ]
Dear. GnuPG-Users ML members When making "libgcrypt ver1.10.2" and "libgcrypt ver1.8.10", I got the following problem of error and the compilation could not proceed. (Output is line-breaked where appropriate.) --- libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src -I/usr/local/include -g -O2 -fno-delete-null-pointer-checks -Wall -Wcast-align -Wshadow -Wstrict-prototypes -Wformat -Wno-format-y2k -Wformat-security -W -Wextra -Wbad-function-cast -Wwrite-strings -Wdeclaration-after-statement -Wno-missing-field-initializers -Wno-sign-compare -Wpointer-arith -MT rndgetentropy.lo -MD -MP -MF .deps/rndgetentropy.Tpo -c rndgetentropy.c -fno-common -DPIC -o .libs/rndgetentropy.orndgetentropy.c:98:21: error: call to undeclared function 'getrandom'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] ret = getrandom (buffer, nbytes, GRND_RANDOM); ^ rndgetentropy.c:98:48: error: use of undeclared identifier 'GRND_RANDOM' ret = getrandom (buffer, nbytes, GRND_RANDOM); ^ 2 errors generated. make[2]: *** [rndgetentropy.lo] Error 1 make[2]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2/random' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2' make: *** [all] Error 2 --- Unfortunately I don't know how to make this 'make' passable. Could you please advise how to bypass this error? My environment is as follows. Also, ". /configure" output is attached. OS : macOS 13.3.1 (a) / Command Line Tools for Xcode 14.3 Platform : Darwin (x86_64-apple-darwin22.4.0) Sincerely yours. --- WATANABE, Takeo t...@kasaneiro.jp C checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... build-aux/install-sh -c -d checking for gawk... no checking for mawk... no checking for nawk... no checking for awk... awk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking build system type... x86_64-apple-darwin22.4.0 checking host system type... x86_64-apple-darwin22.4.0 checking whether to enable maintainer-specific portions of Makefiles... yes checking whether make supports nested variables... (cached) yes checking whether make supports the include directive... yes (GNU style) checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking dependency style of gcc... gcc3 checking how to run the C preprocessor... gcc -E checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking minix/config.h usability... no checking minix/config.h presence... no checking for minix/config.h... no checking whether it is safe to define __EXTENSIONS__... yes checking whether make sets $(MAKE)... (cached) yes checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking whether gcc understands -c and -o together... (cached) yes checking dependency style of gcc... (cached) gcc3 checking how to run the C preprocessor... gcc -E checking dependency style of gcc... gcc3 checking for library containing strerror... none required checking for gawk... (cached) awk checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /Library/Developer/CommandLineTools/usr/bin/ld checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU ld... no checking for BSD- or MS-compatible name lister (nm)... /usr/local/bin/nm -B checking the name lister (/usr/local/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 786432 checking whether the shell understands some XSI constructs... yes checking whether the shell understands "+="... yes checking how to convert x86_64-apple-darwin22.4.0 file
Error when making "libgcrypt" [rndgetentropy.c ]
Dear. GnuPG-Users. When making "libgcrypt ver1.10.2" and "libgcrypt ver1.8.10", I got the following error and the compilation could not proceed. (Output is line-breaked where appropriate.) --- libtool: compile: gcc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src -I/usr/local/include -g -O2 -fno-delete-null-pointer-checks -Wall -Wcast-align -Wshadow -Wstrict-prototypes -Wformat -Wno-format-y2k -Wformat-security -W -Wextra -Wbad-function-cast -Wwrite-strings -Wdeclaration-after-statement -Wno-missing-field-initializers -Wno-sign-compare -Wpointer-arith -MT rndgetentropy.lo -MD -MP -MF .deps/rndgetentropy.Tpo -c rndgetentropy.c -fno-common -DPIC -o .libs/rndgetentropy.orndgetentropy.c:98:21: error: call to undeclared function 'getrandom'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration] ret = getrandom (buffer, nbytes, GRND_RANDOM); ^ rndgetentropy.c:98:48: error: use of undeclared identifier 'GRND_RANDOM' ret = getrandom (buffer, nbytes, GRND_RANDOM); ^ 2 errors generated. make[2]: *** [rndgetentropy.lo] Error 1 make[2]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2/random' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2' make: *** [all] Error 2 --- Unfortunately I don't know how to make this 'make' passable. I am very sorry that this is not about "GnuPG". Could you please advise me how to avoid this error? My environment is as follows. Also, ". /configure" output is attached. OS : macOS 13.3.1 (a) / Command Line Tools for Xcode 14.3 Platform : Darwin (x86_64-apple-darwin22.4.0) Sincerely yours. --- WATANABE, Takeo t...@kasaneiro.jp checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for a thread-safe mkdir -p... build-aux/install-sh -c -d checking for gawk... no checking for mawk... no checking for nawk... no checking for awk... awk checking whether make sets $(MAKE)... yes checking whether make supports nested variables... yes checking build system type... x86_64-apple-darwin22.4.0 checking host system type... x86_64-apple-darwin22.4.0 checking whether to enable maintainer-specific portions of Makefiles... yes checking whether make supports nested variables... (cached) yes checking whether make supports the include directive... yes (GNU style) checking for gcc... gcc checking whether the C compiler works... yes checking for C compiler default output file name... a.out checking for suffix of executables... checking whether we are cross compiling... no checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking whether gcc understands -c and -o together... yes checking dependency style of gcc... gcc3 checking how to run the C preprocessor... gcc -E checking for grep that handles long lines and -e... /usr/bin/grep checking for egrep... /usr/bin/grep -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking minix/config.h usability... no checking minix/config.h presence... no checking for minix/config.h... no checking whether it is safe to define __EXTENSIONS__... yes checking whether make sets $(MAKE)... (cached) yes checking for gcc... (cached) gcc checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking whether gcc understands -c and -o together... (cached) yes checking dependency style of gcc... (cached) gcc3 checking how to run the C preprocessor... gcc -E checking dependency style of gcc... gcc3 checking for library containing strerror... none required checking for gawk... (cached) awk checking how to print strings... printf checking for a sed that does not truncate output... /usr/bin/sed checking for fgrep... /usr/bin/grep -F checking for ld used by gcc... /Library/Developer/CommandLineTools/usr/bin/ld checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU ld... no checking for BSD- or MS-compatible name lister (nm)... /usr/local/bin/nm -B checking the name lister (/usr/local/bin/nm -B) interface... BSD nm checking whether ln -s works... yes checking the maximum length of command line arguments... 786432 checking whether the shell understands some XSI constructs... yes checking whether the shell understands "+="... yes checking how to convert
Re: out-of-key UIDs [was: ADK's]
On Thu, 4 May 2023 09:43, Ineiev said: > This is another issue ADK might handle differently---if gpg skipped > validation of the donor keys (where ADK subkeys come from), The ADSK shall work very similar to --encrypt-to - that is it is only used if there is already an encryption key. That is why it is named ADS(ub)K(ey) and not just ADK(ey) - the ADSK is always in your keyblock. In gnupg/g10/pkclist.c:find_and_check_key at line 921 we got the regular encryption key and add it to our list of keys. Right after that we scan that keyblock for an ADSK (i.e. PUBKEY_USAGE_RENC) and add that one too. Shalom-Salam, Werner -- The pioneers of a warless world are the youth that refuse military service. - A. Einstein openpgp-digital-signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: out-of-key UIDs [was: ADK's]
On 4 May 2023, at 10:43, Ineiev wrote: > > On Thu, May 04, 2023 at 09:52:54AM +0100, Andrew Gallagher wrote: >> >> andrewg@serenity % gpg --group >> fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A -r fn...@test.eu -e < >> /etc/shells > shells.gpg >> gpg: 0x40F9B9601900E974: There is no assurance this key belongs to the named >> user > > I tried something like this with my MUA, I believe that doesn't work: > it first looks for appropriate keys, probably using --list-keys; > in fact, it insists on choosing a single key when multiple ones > are available. Which MUA is this? I know that Thunderbird doesn’t support gnupg’s groups any more, but it has an equivalent inbuilt feature that you can configure separately. A signature.asc Description: Message signed with OpenPGP ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: out-of-key UIDs [was: ADK's]
On Thu, May 04, 2023 at 09:52:54AM +0100, Andrew Gallagher wrote: > > $ gpg --group fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A > > --list-keys fn...@test.eu > > gpg: error reading key: No public key ... > —list-keys doesn’t expand groups. Try this instead: > > > andrewg@serenity % gpg --group > fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A -r fn...@test.eu -e < > /etc/shells > shells.gpg > gpg: 0x40F9B9601900E974: There is no assurance this key belongs to the named > user I tried something like this with my MUA, I believe that doesn't work: it first looks for appropriate keys, probably using --list-keys; in fact, it insists on choosing a single key when multiple ones are available. ... > It is NOT certain that the key belongs to the person named > in the user ID. If you *really* know what you are doing, > you may answer the next question with yes. > > Use this key anyway? (y/N) y This is another issue ADK might handle differently---if gpg skipped validation of the donor keys (where ADK subkeys come from), I wouldn't have to certify any UIDs in it. signature.asc Description: PGP signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: out-of-key UIDs [was: ADK's]
On 4 May 2023, at 06:46, Ineiev wrote: > > On Mon, May 01, 2023 at 03:16:12PM +0100, Andrew Gallagher wrote: >> On 1 May 2023, at 12:40, Ineiev via Gnupg-users >> wrote: >>> now, I generate a key >>> for y...@guan.edu locally and add 0123456789ABCDEF as an ADK (BTW, >>> will GnuPG complain if the only encryption-capable subkey is ADK? >> >> Or you could just use an alias…? > > I don't think I fully understand what you mean. > > $ gpg --group fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A > --list-keys fn...@test.eu > gpg: error reading key: No public key > $ gpg --list-keys BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A | head -n1 > pub rsa2048 2014-10-21 [SC] [expires: 2024-10-17] > $ gpg --version | head -n2 > gpg (GnuPG) 2.2.41 > libgcrypt 1.8.10 —list-keys doesn’t expand groups. Try this instead: andrewg@serenity % gpg --group fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A -r fn...@test.eu -e < /etc/shells > shells.gpg gpg: 0x40F9B9601900E974: There is no assurance this key belongs to the named user sub rsa2048/0x40F9B9601900E974 2014-10-21 Ineiev (fencepost) Primary key fingerprint: BD9D 4DEE 7B2F F1CB EF2E E0C4 E0AC D3E0 CBE7 874A Subkey fingerprint: F495 D912 C380 C534 23CD 6B7C 40F9 B960 1900 E974 It is NOT certain that the key belongs to the person named in the user ID. If you *really* know what you are doing, you may answer the next question with yes. Use this key anyway? (y/N) y andrewg@serenity % gpg --list-packets shells.gpg gpg: encrypted with rsa2048 key, ID 0x40F9B9601900E974, created 2014-10-21 "Ineiev (fencepost) " gpg: problem with fast path key listing: IPC parameter error - ignored gpg: public key decryption failed: No secret key gpg: decryption failed: No secret key # off=0 ctb=85 tag=1 hlen=3 plen=268 :pubkey enc packet: version 3, algo 1, keyid 40F9B9601900E974 data: [2047 bits] # off=271 ctb=d2 tag=18 hlen=2 plen=187 new-ctb :encrypted data packet: length: 187 mdc_method: 2 andrewg@serenity % A signature.asc Description: Message signed with OpenPGP ___ Gnupg-users mailing list Gnupg-users@gnupg.org https://lists.gnupg.org/mailman/listinfo/gnupg-users