About Problem of Error when making "libgcrypt" [rndgetentropy.c ]

2023-05-04 Thread WATANABE Takeo
Dear.  GnuPG-Users ML  members

When making "libgcrypt ver1.10.2" and "libgcrypt ver1.8.10",
I got the following problem of  error and the compilation could not proceed.
(Output is line-breaked where appropriate.)

---
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src 
-I/usr/local/include -g
 -O2 -fno-delete-null-pointer-checks -Wall -Wcast-align -Wshadow 
-Wstrict-prototypes -Wformat
 -Wno-format-y2k -Wformat-security -W -Wextra -Wbad-function-cast 
-Wwrite-strings
 -Wdeclaration-after-statement -Wno-missing-field-initializers 
-Wno-sign-compare -Wpointer-arith
 -MT rndgetentropy.lo -MD -MP -MF .deps/rndgetentropy.Tpo -c 
rndgetentropy.c  -fno-common
 -DPIC -o .libs/rndgetentropy.orndgetentropy.c:98:21:
   error: call to undeclared function 'getrandom'; ISO C99 and 
later do not support implicit
   function declarations [-Wimplicit-function-declaration]
   ret = getrandom (buffer, nbytes, GRND_RANDOM);
   ^
rndgetentropy.c:98:48: error: use of undeclared identifier 'GRND_RANDOM'
  ret = getrandom (buffer, nbytes, GRND_RANDOM);
  ^
2 errors generated.
make[2]: *** [rndgetentropy.lo] Error 1
make[2]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2/random'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2'
make: *** [all] Error 2
---

Unfortunately I don't know how to make this 'make' passable.

Could you please advise how to bypass this error?

My environment is as follows.
Also, ". /configure" output is attached.

OS :  macOS  13.3.1 (a) / Command Line Tools for Xcode 14.3
Platform :  Darwin (x86_64-apple-darwin22.4.0)

Sincerely yours.
---
WATANABE, Takeo
t...@kasaneiro.jp

C
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... build-aux/install-sh -c -d
checking for gawk... no
checking for mawk... no
checking for nawk... no
checking for awk... awk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking build system type... x86_64-apple-darwin22.4.0
checking host system type... x86_64-apple-darwin22.4.0
checking whether to enable maintainer-specific portions of Makefiles... yes
checking whether make supports nested variables... (cached) yes
checking whether make supports the include directive... yes (GNU style)
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking dependency style of gcc... gcc3
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking minix/config.h usability... no
checking minix/config.h presence... no
checking for minix/config.h... no
checking whether it is safe to define __EXTENSIONS__... yes
checking whether make sets $(MAKE)... (cached) yes
checking for gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ISO C89... (cached) none needed
checking whether gcc understands -c and -o together... (cached) yes
checking dependency style of gcc... (cached) gcc3
checking how to run the C preprocessor... gcc -E
checking dependency style of gcc... gcc3
checking for library containing strerror... none required
checking for gawk... (cached) awk
checking how to print strings... printf
checking for a sed that does not truncate output... /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by gcc... /Library/Developer/CommandLineTools/usr/bin/ld
checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU 
ld... no
checking for BSD- or MS-compatible name lister (nm)... /usr/local/bin/nm -B
checking the name lister (/usr/local/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 786432
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking how to convert x86_64-apple-darwin22.4.0 file 

Error when making "libgcrypt" [rndgetentropy.c ]

2023-05-04 Thread WATANABE Takeo
Dear. GnuPG-Users.

When making "libgcrypt ver1.10.2" and "libgcrypt ver1.8.10",
I got the following error and the compilation could not proceed.
(Output is line-breaked where appropriate.)

---
libtool: compile:  gcc -DHAVE_CONFIG_H -I. -I.. -I../src -I../src 
-I/usr/local/include -g
 -O2 -fno-delete-null-pointer-checks -Wall -Wcast-align -Wshadow 
-Wstrict-prototypes -Wformat
 -Wno-format-y2k -Wformat-security -W -Wextra -Wbad-function-cast 
-Wwrite-strings
 -Wdeclaration-after-statement -Wno-missing-field-initializers 
-Wno-sign-compare -Wpointer-arith
 -MT rndgetentropy.lo -MD -MP -MF .deps/rndgetentropy.Tpo -c 
rndgetentropy.c  -fno-common
 -DPIC -o .libs/rndgetentropy.orndgetentropy.c:98:21:
   error: call to undeclared function 'getrandom'; ISO C99 and 
later do not support implicit
   function declarations [-Wimplicit-function-declaration]
   ret = getrandom (buffer, nbytes, GRND_RANDOM);
   ^
rndgetentropy.c:98:48: error: use of undeclared identifier 'GRND_RANDOM'
  ret = getrandom (buffer, nbytes, GRND_RANDOM);
  ^
2 errors generated.
make[2]: *** [rndgetentropy.lo] Error 1
make[2]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2/random'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/Users/take/Downloads/GnuPG/libgcrypt-1.10.2'
make: *** [all] Error 2
---

Unfortunately I don't know how to make this 'make' passable.

I am very sorry that this is not about "GnuPG".
Could you please advise me how to avoid this error?

My environment is as follows.
Also, ". /configure" output is attached.

OS :  macOS  13.3.1 (a) / Command Line Tools for Xcode 14.3
Platform :  Darwin (x86_64-apple-darwin22.4.0)

Sincerely yours.
---
WATANABE, Takeo
t...@kasaneiro.jp

checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... build-aux/install-sh -c -d
checking for gawk... no
checking for mawk... no
checking for nawk... no
checking for awk... awk
checking whether make sets $(MAKE)... yes
checking whether make supports nested variables... yes
checking build system type... x86_64-apple-darwin22.4.0
checking host system type... x86_64-apple-darwin22.4.0
checking whether to enable maintainer-specific portions of Makefiles... yes
checking whether make supports nested variables... (cached) yes
checking whether make supports the include directive... yes (GNU style)
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executables... 
checking whether we are cross compiling... no
checking for suffix of object files... o
checking whether we are using the GNU C compiler... yes
checking whether gcc accepts -g... yes
checking for gcc option to accept ISO C89... none needed
checking whether gcc understands -c and -o together... yes
checking dependency style of gcc... gcc3
checking how to run the C preprocessor... gcc -E
checking for grep that handles long lines and -e... /usr/bin/grep
checking for egrep... /usr/bin/grep -E
checking for ANSI C header files... yes
checking for sys/types.h... yes
checking for sys/stat.h... yes
checking for stdlib.h... yes
checking for string.h... yes
checking for memory.h... yes
checking for strings.h... yes
checking for inttypes.h... yes
checking for stdint.h... yes
checking for unistd.h... yes
checking minix/config.h usability... no
checking minix/config.h presence... no
checking for minix/config.h... no
checking whether it is safe to define __EXTENSIONS__... yes
checking whether make sets $(MAKE)... (cached) yes
checking for gcc... (cached) gcc
checking whether we are using the GNU C compiler... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking for gcc option to accept ISO C89... (cached) none needed
checking whether gcc understands -c and -o together... (cached) yes
checking dependency style of gcc... (cached) gcc3
checking how to run the C preprocessor... gcc -E
checking dependency style of gcc... gcc3
checking for library containing strerror... none required
checking for gawk... (cached) awk
checking how to print strings... printf
checking for a sed that does not truncate output... /usr/bin/sed
checking for fgrep... /usr/bin/grep -F
checking for ld used by gcc... /Library/Developer/CommandLineTools/usr/bin/ld
checking if the linker (/Library/Developer/CommandLineTools/usr/bin/ld) is GNU 
ld... no
checking for BSD- or MS-compatible name lister (nm)... /usr/local/bin/nm -B
checking the name lister (/usr/local/bin/nm -B) interface... BSD nm
checking whether ln -s works... yes
checking the maximum length of command line arguments... 786432
checking whether the shell understands some XSI constructs... yes
checking whether the shell understands "+="... yes
checking how to convert 

Re: out-of-key UIDs [was: ADK's]

2023-05-04 Thread Werner Koch via Gnupg-users
On Thu,  4 May 2023 09:43, Ineiev said:

> This is another issue ADK might handle differently---if gpg skipped
> validation of the donor keys (where ADK subkeys come from),

The ADSK shall work very similar to --encrypt-to - that is it is only
used if there is already an encryption key.  That is why it is named
ADS(ub)K(ey) and not just ADK(ey) - the ADSK is always in your keyblock.

In gnupg/g10/pkclist.c:find_and_check_key at line 921 we got the regular
encryption key and add it to our list of keys.  Right after that we scan
that keyblock for an ADSK (i.e. PUBKEY_USAGE_RENC) and add that one too.


Shalom-Salam,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein


openpgp-digital-signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: out-of-key UIDs [was: ADK's]

2023-05-04 Thread Andrew Gallagher via Gnupg-users
On 4 May 2023, at 10:43, Ineiev  wrote:
> 
> On Thu, May 04, 2023 at 09:52:54AM +0100, Andrew Gallagher wrote:
>> 
>> andrewg@serenity % gpg --group 
>> fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A -r fn...@test.eu -e < 
>> /etc/shells > shells.gpg
>> gpg: 0x40F9B9601900E974: There is no assurance this key belongs to the named 
>> user
> 
> I tried something like this with my MUA, I believe that doesn't work:
> it first looks for appropriate keys, probably using --list-keys;
> in fact, it insists on choosing a single key when multiple ones
> are available.

Which MUA is this? I know that Thunderbird doesn’t support gnupg’s groups any 
more, but it has an equivalent inbuilt feature that you can configure 
separately.

A



signature.asc
Description: Message signed with OpenPGP
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: out-of-key UIDs [was: ADK's]

2023-05-04 Thread Ineiev via Gnupg-users
On Thu, May 04, 2023 at 09:52:54AM +0100, Andrew Gallagher wrote:
> > $ gpg --group fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A 
> > --list-keys fn...@test.eu
> > gpg: error reading key: No public key
...
> —list-keys doesn’t expand groups. Try this instead:
> 
> 
> andrewg@serenity % gpg --group 
> fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A -r fn...@test.eu -e < 
> /etc/shells > shells.gpg
> gpg: 0x40F9B9601900E974: There is no assurance this key belongs to the named 
> user

I tried something like this with my MUA, I believe that doesn't work:
it first looks for appropriate keys, probably using --list-keys;
in fact, it insists on choosing a single key when multiple ones
are available.

...
> It is NOT certain that the key belongs to the person named
> in the user ID.  If you *really* know what you are doing,
> you may answer the next question with yes.
> 
> Use this key anyway? (y/N) y

This is another issue ADK might handle differently---if gpg skipped
validation of the donor keys (where ADK subkeys come from),
I wouldn't have to certify any UIDs in it.


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: out-of-key UIDs [was: ADK's]

2023-05-04 Thread Andrew Gallagher via Gnupg-users
On 4 May 2023, at 06:46, Ineiev  wrote:
> 
> On Mon, May 01, 2023 at 03:16:12PM +0100, Andrew Gallagher wrote:
>> On 1 May 2023, at 12:40, Ineiev via Gnupg-users  
>> wrote:
>>> now, I generate a key
>>> for y...@guan.edu locally and add 0123456789ABCDEF as an ADK (BTW,
>>> will GnuPG complain if the only encryption-capable subkey is ADK?
>> 
>> Or you could just use an alias…?
> 
> I don't think I fully understand what you mean.
> 
> $ gpg --group fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A 
> --list-keys fn...@test.eu
> gpg: error reading key: No public key
> $ gpg --list-keys BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A | head -n1
> pub   rsa2048 2014-10-21 [SC] [expires: 2024-10-17]
> $ gpg --version | head -n2
> gpg (GnuPG) 2.2.41
> libgcrypt 1.8.10



—list-keys doesn’t expand groups. Try this instead:


andrewg@serenity % gpg --group 
fn...@test.eu=BD9D4DEE7B2FF1CBEF2EE0C4E0ACD3E0CBE7874A -r fn...@test.eu -e < 
/etc/shells > shells.gpg
gpg: 0x40F9B9601900E974: There is no assurance this key belongs to the named 
user

sub  rsa2048/0x40F9B9601900E974 2014-10-21 Ineiev (fencepost) 
 Primary key fingerprint: BD9D 4DEE 7B2F F1CB EF2E  E0C4 E0AC D3E0 CBE7 874A
  Subkey fingerprint: F495 D912 C380 C534 23CD  6B7C 40F9 B960 1900 E974

It is NOT certain that the key belongs to the person named
in the user ID.  If you *really* know what you are doing,
you may answer the next question with yes.

Use this key anyway? (y/N) y
andrewg@serenity % gpg --list-packets shells.gpg
gpg: encrypted with rsa2048 key, ID 0x40F9B9601900E974, created 2014-10-21
  "Ineiev (fencepost) "
gpg: problem with fast path key listing: IPC parameter error - ignored
gpg: public key decryption failed: No secret key
gpg: decryption failed: No secret key
# off=0 ctb=85 tag=1 hlen=3 plen=268
:pubkey enc packet: version 3, algo 1, keyid 40F9B9601900E974
data: [2047 bits]
# off=271 ctb=d2 tag=18 hlen=2 plen=187 new-ctb
:encrypted data packet:
length: 187
mdc_method: 2
andrewg@serenity %

A



signature.asc
Description: Message signed with OpenPGP
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users