Re: Feature request for future OpenPGP card: force PIN

2013-02-09 Thread Werner Koch
On Fri, 8 Feb 2013 15:18, pe...@digitalbrains.com said: I have an SCM SPR 532 reader with pinpad; I thought the host could not get at the PIN when entered on the pinpad? The way I understood it, the host sends a That is right. However, if for other reasons the PIN is known to the host (used

Re: Best way to catch INSECURE unverified sig status when shelling out to gpg?

2013-02-09 Thread Grant Olson
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 On 02/09/2013 06:09 PM, Grant Olson wrote: What is the best way to check for this? I presume something like stdout.include?(INSECURE) is not localization friendly. Sorry INSECURE was actually from my test key. The actual text is of

Best way to catch INSECURE unverified sig status when shelling out to gpg?

2013-02-09 Thread Grant Olson
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 I'm currently writing a plugin that allows you to OpenPGP sign/verify ruby software packages: https://github.com/grant-olson/rubygems-openpgp Right now I'm just shelling out to gpg and checking the status code to determine success or failure.

Re: Best way to catch INSECURE unverified sig status when shelling out to gpg?

2013-02-09 Thread David Shaw
On Feb 9, 2013, at 6:09 PM, Grant Olson k...@grant-olson.net wrote: I'm currently writing a plugin that allows you to OpenPGP sign/verify ruby software packages: https://github.com/grant-olson/rubygems-openpgp Right now I'm just shelling out to gpg and checking the status code to