Re: gpg agent forwarding (via ssh) totally broken with 2.1 and NFS-mounted $HOME

2015-09-22 Thread Werner Koch
On Tue, 22 Sep 2015 20:06, n...@esperi.org.uk said: > btw, because I can't figure out how to add comments to bugs I didn't > open: I can confirm issue 2053. Without --disable-ccid, or with an Let me know your user name and I give you full access. We usually do this after the first bug report.

Re: MD5 BAD Expected : extended by two extra zeros

2015-09-22 Thread Werner Koch
On Tue, 22 Sep 2015 03:39, edivya.v...@gmail.com said: > root@host:~# rpm -K -v pth-2.0.7-r3.1.x86_64.rpm > pth-2.0.7-r3.1.x86_64.rpm: > Header V4 RSA/SHA1 signature: OK, key ID 8b5cccb3 > Header SHA1 digest: OK (c326a31810f026daac89aa4fd7928c3b574671ea) > MD5 digest: BAD

Re: gpg agent forwarding (via ssh) totally broken with 2.1 and NFS-mounted $HOME

2015-09-22 Thread Werner Koch
On Tue, 22 Sep 2015 06:33, ndk.cla...@gmail.com said: > Why isn't the hostname included in file name? This way shared > filesystems would have no problems.. To include the hostname, see my other reply or check out the wiki. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen

Re: gpg agent forwarding (via ssh) totally broken with 2.1 and NFS-mounted $HOME

2015-09-22 Thread Werner Koch
On Mon, 21 Sep 2015 18:49, n...@esperi.org.uk said: > (It's not that the fs doesn't allow for special files -- it's that it's > distributed, but the semantics of AF_UNIX socket creation assume that it > isn't.) Depends on the file system. At least some NFS versions don't allow special files at

Re: default-ttl not honoured

2015-09-22 Thread SGT. Garcia
forgot to include info! Linux 4.2.0 #1 SMP PREEMPT x86_64 GNU/Linux [Exherbo] sys-libs/glibc-2.22 sys-libs/ncurses-6.0 [ncurses-5 had the same problem] app-crypt/gnupg-2.1.7 sgt. ___ Gnupg-users mailing list Gnupg-users@gnupg.org

Re: default-ttl not honoured

2015-09-22 Thread SGT. Garcia
On Tue, Sep 22, 2015 at 07:39:53PM +0200, Neal H. Walfield wrote: > Hi, > > At Tue, 22 Sep 2015 11:07:22 -0400, > SGT. Garcia wrote: > > > > hello, > > this is my gpg-agent.conf: > > > > allow-preset-passphrase > > default-cache-ttl 31536000 > > > > this has stopped working! i'm getting asked

Re: default-ttl not honoured

2015-09-22 Thread Neal H. Walfield
Hi, At Tue, 22 Sep 2015 11:07:22 -0400, SGT. Garcia wrote: > > hello, > this is my gpg-agent.conf: > > allow-preset-passphrase > default-cache-ttl 31536000 > > this has stopped working! i'm getting asked for password every 20 minutes or > so. > anyone else hitting this bug? hopefully i don't

default-ttl not honoured

2015-09-22 Thread SGT. Garcia
hello, this is my gpg-agent.conf: allow-preset-passphrase default-cache-ttl 31536000 this has stopped working! i'm getting asked for password every 20 minutes or so. anyone else hitting this bug? hopefully i don't have to go: "Oh, shit! Swamp leeches. Everybody, check for swamp leeches, and

Keyserver lookup failure, redux

2015-09-22 Thread Robert J. Hansen
Back in February I reported a bug that was preventing GnuPG 2.1.2 from being able to look up certificates on the keyservers: https://lists.gnupg.org/pipermail/gnupg-users/2015-February/052567.html I just looked at it again. 2.1.8 still has the same bug. Is there an idea for how to fix this?

Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
Hello all, I've been using GnuPG for some time now and recently became the proud owner of a NitroKey hardware dongle which includes a SmartCard for key storage. This was straightforward to set up and I created separate subkeys (4096 bit) for encryption, signing and authentication and moved them

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Werner Koch
On Tue, 22 Sep 2015 08:51, marcus.ilg...@gmail.com said: > gpg: public key decryption failed: Missing item in object > gpg: decryption failed: No secret key This is probably in scdaemon. Thus you should add --8<---cut here---start->8--- log-file SOMEFILE

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
Hi Werner, thank you for the quick reply, it's much appreciated! On Tue, 22 Sep 2015 at 11:10 Werner Koch wrote: > On Tue, 22 Sep 2015 08:51, marcus.ilg...@gmail.com said: > > > gpg: public key decryption failed: Missing item in object > > gpg: decryption failed: No secret key

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
Thank you for the hint. I updated the gist at https://gist.github.com/milgner/b823685c8a5960f1f13b to include both the output of `gpg --card-status` (which works fine) as well as the log for trying to decrypt with CCID disabled in scdaemon.conf (which unfortunately it yields the same error as

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread NIIBE Yutaka
On 2015-09-22 at 09:30 +, Marcus Ilgner wrote: > Here you can find the full > log: https://gist.github.com/milgner/b823685c8a5960f1f13b Thank you for the dump. There are fingerprints and timestamps registered on the card. But, it failed decryption with "No Record". Usually, it means there

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Marcus Ilgner
On Tue, 22 Sep 2015 at 16:30 Kristian Fiskerstrand < kristian.fiskerstr...@sumptuouscapital.com> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 09/22/2015 03:26 PM, Marcus Ilgner wrote: > > > > > So, again, thanks for helping to investigate! I hope we can find a > > solution to

Problem with unix socket forwarding

2015-09-22 Thread Andrew Gallagher
Hi, all. I've been trying to get gpg-agent forwarding working between my laptop and a remote VM. Using the new unix socket forwarding in openssh 6.7, I have defined the following script: ssh -R /home/andrewg/.gnupg/S.gpg-agent:$( echo $GPG_AGENT_INFO | sed 's/:.*//g' ) -o "ControlMaster=no" -o

Re: Decryption fails with 4096bit key on SmartCard

2015-09-22 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 09/22/2015 03:26 PM, Marcus Ilgner wrote: > > So, again, thanks for helping to investigate! I hope we can find a > solution to this :) > Not following this thread too closely, but I couldn't see any debug output of the actual failed

Re: Enigmail and p≡p are together for developing Enigmail/p≡p

2015-09-22 Thread Andrew Gallagher
> For this purpose p≡p is offering the possibility to > encrypt without any user interaction needed like managing keys. So how do you perform out of band verification? Or is it just TOFU? Andrew. signature.asc Description: OpenPGP digital signature