SKS v. unknown HTTP headers (was: Re: IPv6 failover?)

2005-08-03 Thread Jason Harris
On Wed, Aug 03, 2005 at 08:44:18PM -0400, David Shaw wrote: > On Wed, Aug 03, 2005 at 08:18:35PM -0400, Jason Harris wrote: > > Looking at http://curl.haxx.se/libcurl/c/curl_easy_setopt.html , > > this might do the trick: > > > > curl_easy_setopt (..., CURLOPT_IPRESOLVE, CURL_IPRESOLVE_V4); >

Re: IPv6 failover?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 08:18:35PM -0400, Jason Harris wrote: > On Wed, Aug 03, 2005 at 07:25:41PM -0400, David Shaw wrote: > > > The thing is, if you have a --with-libcurl build, this failover would > > need to happen within curl itself. What happens if you do: > > curl http://keyserver.linux.

Re: IPv6 failover?

2005-08-03 Thread Jason Harris
On Wed, Aug 03, 2005 at 07:25:41PM -0400, David Shaw wrote: > The thing is, if you have a --with-libcurl build, this failover would > need to happen within curl itself. What happens if you do: > curl http://keyserver.linux.it:11371/pks/add > > on the command line. Obviously it won't do anythi

Re: IPv6 failover?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 06:32:46PM -0400, Jason Harris wrote: > On Wed, Aug 03, 2005 at 02:48:16PM -0400, David Shaw wrote: > > On Wed, Aug 03, 2005 at 02:32:16PM -0400, Jason Harris wrote: > > > > Here's one, on a box with IPv6 support but not connectivity: > > > > > > %gpg --keyserver keyserv

Re: IPv6 failover?

2005-08-03 Thread Jason Harris
On Wed, Aug 03, 2005 at 02:48:16PM -0400, David Shaw wrote: > On Wed, Aug 03, 2005 at 02:32:16PM -0400, Jason Harris wrote: > > Here's one, on a box with IPv6 support but not connectivity: > > > > %gpg --keyserver keyserver.linux.it --send 0xd39da0e3 > > gpg: sending key D39DA0E3 to hkp serve

Re: Leave clearsigned content encoding alone, how?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 08:57:07PM +, Michael Kjorling wrote: > I use gnupg-1.4.1 on GNU/Linux (up-to-date Gentoo, Linux 2.6.12 on > AMD64 if it matters) to sign and encrypt my mail, and everything is > fine as long as I stay with strictly us-ascii. However, when I use > other characters (mostl

Leave clearsigned content encoding alone, how?

2005-08-03 Thread Michael Kjorling
I use gnupg-1.4.1 on GNU/Linux (up-to-date Gentoo, Linux 2.6.12 on AMD64 if it matters) to sign and encrypt my mail, and everything is fine as long as I stay with strictly us-ascii. However, when I use other characters (mostly national characters covered by iso-8859-15), gnupg converts the input da

Re: Encrypting an e-mail to a Hushmail user

2005-08-03 Thread Len Sassaman
On Wed, 3 Aug 2005, JB wrote: > Now that I have my friends key on my keyring and have signed it, I find I > get an 'error' every time I try to encrypt a message to him. I have a feeling > it's because I'm using my key and it still has the photo, but I can't figure > out how to sign the e-mail to

Re: Encrypting an e-mail to a Hushmail user

2005-08-03 Thread Neil Williams
On Wednesday 03 August 2005 8:28 pm, JB wrote: > Hi gang, 1. Please send your key (with photo) to subkeys.pgp.net so that people on the list can verify your signatures. > Now that I have my friends key on my keyring and have signed it, I find I > get an 'error' every time I try to encrypt a

Re: Encrypting an e-mail to a Hushmail user

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 02:28:17PM -0500, JB wrote: > > Hi gang, > > Yesterday I tried valiantly to get a Hushmail user to install GPG or PGP > (6.5.8...still free and a good version) on his M$ system, but he said it was > too hard to work and Hushmail was nice and easy. > Anyway, after a

Encrypting an e-mail to a Hushmail user

2005-08-03 Thread JB
Hi gang, Yesterday I tried valiantly to get a Hushmail user to install GPG or PGP (6.5.8...still free and a good version) on his M$ system, but he said it was too hard to work and Hushmail was nice and easy. Anyway, after a few tries of trying to upload my public key to the Hush server,

Re: Primary certify-only key?

2005-08-03 Thread Werner Koch
On Wed, 03 Aug 2005 19:26:38 +0200, Thomas Kuehne said: > The problem is that I cant create the first key with only "C" the > capability. GnuPG does not yet distinguish between C and S. So it does not make much sense to have a way of selecting this. Salam-Shalom, Werner _

Re: Problem with gcry_pk_decrypt (libgcrypt)

2005-08-03 Thread Johan Wevers
Claudia Reuter wrote: >I like to encrypt and decrypt large files e.g. pdf files. I wrote some >code based on libgcrypt. I tested it with .txt files. Encryption seems >to work, but gcry_pk_decrypt works only, if there's a single line in the >txt file. That suggests your read operations assume text

Re: Primary certify-only key?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 07:26:38PM +0200, Thomas Kuehne wrote: > Is there a way to generate the following key collection with GnuPG? > > pub 4096R usage: C > sub 4096R usage: S > > The problem is that I cant create the first key with only "C" the > capability. > > Using the --expert option a

Re: IPv6 failover?

2005-08-03 Thread David Shaw
On Wed, Aug 03, 2005 at 02:32:16PM -0400, Jason Harris wrote: > On Sat, Jul 30, 2005 at 09:28:28PM -0400, David Shaw wrote: > > On Sat, Jul 30, 2005 at 02:20:35PM -0400, Jason Harris wrote: > > > Thought you'd get a kick out of that... > > :) > > > Note that in the next release of GnuPG, --with

Re: [Announce] GnuPG 1.4.2 released

2005-08-03 Thread Jason Harris
On Sat, Jul 30, 2005 at 09:28:28PM -0400, David Shaw wrote: > On Sat, Jul 30, 2005 at 02:20:35PM -0400, Jason Harris wrote: > Thought you'd get a kick out of that... :) > Note that in the next release of GnuPG, --with-libcurl will be the > default. (So the more people who try it now, and repor

Primary certify-only key?

2005-08-03 Thread Thomas Kuehne
Is there a way to generate the following key collection with GnuPG? pub 4096R usage: C sub 4096R usage: S The problem is that I cant create the first key with only "C" the capability. Using the --expert option and disabling "E", "S" and "A" results in "CSEA". Thomas __

Re: throughput of GnuPG symmetric ciphers

2005-08-03 Thread Ryan Malayter
On 8/3/05, Henry Hertz Hobbit <[EMAIL PROTECTED]> wrote: > Given the size of the files that you are encrypting, I would strongly > advise going with the Eden chip rather than a software based solution... I actually found an open-source tool, 7-zip, that includes AES-256 encryption functionality. F

Re: GnuPG ftp server

2005-08-03 Thread Werner Koch
On Wed, 3 Aug 2005 06:57:11 -0700 (PDT), S K said: > Is ths FTP server having problems? I can connect to > it, but can't log in. Sorry. Restarted. oftpd is still leaking file descriptors. Salam-Shalom, Werner ___ Gnupg-users mailing list Gnupg

Re: Problem with gcry_pk_decrypt (libgcrypt)

2005-08-03 Thread Werner Koch
On Wed, 03 Aug 2005 14:33:57 +0200, Claudia Reuter said: > I like to encrypt and decrypt large files e.g. pdf files. I wrote some > code based on libgcrypt. I tested it with .txt files. Encryption seems > to work, but gcry_pk_decrypt works only, if there's a single line in the > txt file. If the t

GnuPG ftp server

2005-08-03 Thread S K
Is ths FTP server having problems? I can connect to it, but can't log in. -- wget ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.tar.bz2 --15:57:40-- ftp://ftp.gnupg.org/gcrypt/gnupg/gnupg-1.4.2.tar.bz2 => `gnupg-1.4.2.tar.bz2' Resolving ftp.gnupg.org... 217.69.76.44 Connecting to ft

Problem with gcry_pk_decrypt (libgcrypt)

2005-08-03 Thread Claudia Reuter
Hi @ll. I like to encrypt and decrypt large files e.g. pdf files. I wrote some code based on libgcrypt. I tested it with .txt files. Encryption seems to work, but gcry_pk_decrypt works only, if there's a single line in the txt file. If the txt file contains more than one line of text, the result i

Re: Protecting signing key

2005-08-03 Thread Peter Pentchev
On Tue, Aug 02, 2005 at 05:48:39PM -0500, Ryan Malayter wrote: [snip] > That said, everything I've read indicates that the encrypting file > system (EFS) in Windows 2000+ is reasonably well implemented. However, > the user's password is still the weak link, as it is used to protect > the private ke

RE: Where's my private key?

2005-08-03 Thread Henry Hertz Hobbit
You wrote: >Date: Mon, 01 Aug 2005 09:56:44 -0300 >From: Eduardo <[EMAIL PROTECTED]> >Subject: Where's my private key? >To: gnupg-users@gnupg.org >Message-ID: <[EMAIL PROTECTED]> >Content-Type: text/plain; charset=ISO-8859-1 > >Hi folks. >Yesterday I needed to crypt one config file on my Linux box

Re: Protecting signing key]

2005-08-03 Thread Roscoe
loop-aes is not in the vanilla kernel sources. dm-crypt and cryptoloop are. cryptoloop is depreciated, use dm-crypt instead. dm-crypt'd main advantage is that it's already in the kernel, whereas loop-aes is a add-on. Look at the different modes of encryption supported and make a decision from ther