Re: New beta

2014-09-28 Thread Werner Koch
On Sat, 27 Sep 2014 18:03, 2014-667rhzu3dc-lists-gro...@riseup.net said: But it would not import the ECC subkey, and the output simply told me skipped subkey. I suppose this would be because, as you said, the subkey binding signature could not be verified. Correct. Salam-Shalom, Werner

Re: New beta

2014-09-27 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 25 September 2014 at 7:12:12 PM, in mid:54245afc.3030...@gmail.com, Murphy wrote: On 09/25/2014 01:06 PM, MFPA wrote: Other than whether GnuPG 1.x locks up on encountering the unrecognised key type when trying to encrypt, or

Re: New beta

2014-09-27 Thread Werner Koch
On Sat, 27 Sep 2014 16:21, 2014-667rhzu3dc-lists-gro...@riseup.net said: And I wonder whether 1.4.x could cope with RSA subkeys on an ECC main key. No, it won't be able to handle such a key. It is not possible to verify the user-id and subkey binding signatures which are done by the primary

Re: New beta

2014-09-27 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 27 September 2014 at 3:31:38 PM, in mid:87k34pi185@vigenere.g10code.de, Werner Koch wrote: On Sat, 27 Sep 2014 16:21, 2014-667rhzu3dc-lists-gro...@riseup.net said: And I wonder whether 1.4.x could cope with RSA subkeys on

Re: New beta

2014-09-26 Thread Jens Lechtenboerger
On 2014-09-25, Werner Koch wrote: On Wed, 24 Sep 2014 17:56, lech...@wi.uni-muenster.de said: This is what happens if I extract gnupg-2.1.0-beta834.tar.bz2 and execute that command on Ubuntu 10.04.4 LTS. Hmmm. The first call to gnupg's autogen.sh is ./autogen.sh --silent --print-build

Re: New beta

2014-09-25 Thread Werner Koch
On Wed, 24 Sep 2014 17:56, lech...@wi.uni-muenster.de said: This is what happens if I extract gnupg-2.1.0-beta834.tar.bz2 and execute that command on Ubuntu 10.04.4 LTS. Hmmm. The first call to gnupg's autogen.sh is ./autogen.sh --silent --print-build can you please run it to see whether

Re: New beta

2014-09-23 Thread Werner Koch
On Mon, 22 Sep 2014 21:12, robe...@broadcom.com said: This might be off topic, but the thread mentions Fedora. Can you please tell me how easy it would be to produce a GPG2 stable RPM for Fedora? Currently they only supply GPG1 as an option from Yum. I would really like to get them to produce

Re: New beta

2014-09-23 Thread Jens Lechtenboerger
On 2014-09-18, Werner Koch wrote: To quickly build all required software without installing it, the Speedo method may be used: make -f build-aux/speedo.mk native I get this: --8---cut here---start-8--- autogen.sh: cross compiler kit not installed

RE: New beta

2014-09-23 Thread Bob (Robert) Cavanaugh
:858-361-2068 -Original Message- From: Werner Koch [mailto:w...@gnupg.org] Sent: Tuesday, September 23, 2014 12:23 AM To: Bob (Robert) Cavanaugh Cc: Murphy; gnupg-users@gnupg.org Subject: Re: New beta On Mon, 22 Sep 2014 21:12, robe...@broadcom.com said: This might be off topic

Re: New beta

2014-09-23 Thread Werner Koch
On Tue, 23 Sep 2014 17:29, lech...@wi.uni-muenster.de said: make -f build-aux/speedo.mk native I get this: autogen.sh: cross compiler kit not installed You seem to be building for Windows but I wonder how you did this given that TARGETOS=native WHAT=release WITH_GUI=0 all TARGETOS is

Re: New beta

2014-09-22 Thread Werner Koch
On Sun, 21 Sep 2014 11:59, pe...@digitalbrains.com said: What is the net effect when GnuPG 1.4 encounters, for example, such a key: RSA pubkey with Certify and Sign capabilities RSA subkey with Encrypt capability, created 2014-04-01 ECC subkey with Encrypt capability, created 2014-09-21

Re: New beta

2014-09-22 Thread Peter Lebbing
Thank you for this clear example! Luckily, it behaves as you would hope, picking the valid subkey it can use and ignoring the one it can't. Cheers, Peter. -- I use the GNU Privacy Guard (GnuPG) in combination with Enigmail. You can send me encrypted mail if you want some privacy. My key is

Re: New beta

2014-09-22 Thread Werner Koch
On Sun, 21 Sep 2014 03:47, mac3...@gmail.com said: for me I cannot then get it to perform its duty. I execute the suggested command LD_LIBRARY_PATH=$(pwd)/PLAY/inst/lib typed exactly as written above, and then nothing happens. gpg2 continues to execute as the previously installed version.

RE: New beta

2014-09-22 Thread Bob (Robert) Cavanaugh
: gnupg-users@gnupg.org Subject: Re: New beta On Sun, 21 Sep 2014 03:47, mac3...@gmail.com said: for me I cannot then get it to perform its duty. I execute the suggested command LD_LIBRARY_PATH=$(pwd)/PLAY/inst/lib typed exactly as written above, and then nothing happens. gpg2 continues

Re: New beta

2014-09-21 Thread Peter Lebbing
On 20/09/14 17:06, Werner Koch wrote: But given that 1.4 is not able to parse ECC keys the selection process can't consider an ECC key in the first place. What is the net effect when GnuPG 1.4 encounters, for example, such a key: RSA pubkey with Certify and Sign capabilities RSA subkey with

Re: New beta

2014-09-21 Thread Philip Jackson
On 20/09/14 16:23, Murphy wrote: What, please, is the reason for the step no. 2 in the above list ? This is a command to prevent gnome from hijacking pinentry. Without it or something like it error messages are generated during execution of the gpg2 command. I forget who suggested it but I

Re: New beta

2014-09-21 Thread Murphy
. The virtualbox environment is perfect for experimenting with new beta versions and playing with ECC keys and subkeys, without disturbing you regular production environment. Murphy -BEGIN PGP SIGNATURE- Version: GnuPG v1 iJwEAQECAAYFAlQfLbMACgkQUVKxkWZz2Q25uQP9GgJikeZPNYVBYQ2Gkzr4OP7r

Re: New beta

2014-09-20 Thread Werner Koch
On Fri, 19 Sep 2014 22:15, r...@sixdemonbag.org said: It would be nice if it could also be checked with Fedora. CentOS/RHEL My idea was to check that the required software is available and not to check for a certain distribution. One major problem has always been that the mingw toolchain

Re: New beta

2014-09-20 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Saturday 20 September 2014 at 1:13:27 AM, in mid:541cc6a7.9040...@gmail.com, Murphy wrote: Of course your milage may vary, machine blow up and hard drive autowipe. But it works for me and it is definitely worth it to play with all the

Re: New beta

2014-09-20 Thread Philip Jackson
On 20/09/14 02:13, Murphy wrote: For my Ubuntu machine hHere is a brief summary of the steps, in order 1. Install latest libraries: npth, libgpg-error, libgcrypt, libksba, libassuan 2. Execute the following command: sudo ln -sf /dev/null /etc/xdg/autostart/gnome-keyring-gpg.desktop 3.

Re: New beta

2014-09-20 Thread Murphy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 20/09/14 10:20, Murphy wrote: What, please, is the reason for the step no. 2 in the above list ? This is a command to prevent gnome from hijacking pinentry. Without it or something like it error messages are generated during execution of the

Re: New beta

2014-09-20 Thread Werner Koch
On Sat, 20 Sep 2014 12:57, 2014-667rhzu3dc-lists-gro...@riseup.net said: If you add an ECC subkey to an RSA or DSA mainkey, does GnuPG 1.4.x or 2.0.x ignore it and revert to the next newest subkey? Or does It should do so; if not it is a bug which needs to be fixed soon. But given that 1.4 is

Re: New beta

2014-09-20 Thread Murphy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am definitely having fun with Speedo. After playing around with it in a virtual box Ubuntu environment I can see the advantage. It immediately downloads and installs the required libraries as advertised and builds an executable gpg2 in PLAY/inst/.

Re: New beta

2014-09-19 Thread MFPA
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi On Thursday 18 September 2014 at 5:41:21 PM, in mid:87r3z87ufi@vigenere.g10code.de, Werner Koch wrote: If you have all required tools and some extra source packages in ../tarballs, you may also build a Windows installer: make -f

Re: New beta

2014-09-19 Thread Robert J. Hansen
Does this have to be done under Linux, or can it be done under Windows with the aid of something like MinGW or CodeBlocks? Unfortunately, this is not something I'd recommend for anyone except a handful of MinGW experts. It's technically possible, but daunting. The approved way of building

Re: New beta

2014-09-19 Thread vedaal
On 9/19/2014 at 2:18 PM, Robert J. Hansen r...@sixdemonbag.org wrote: Does this have to be done under Linux, or can it be done under Windows with the aid of something like MinGW or CodeBlocks? Unfortunately, this is not something I'd recommend for anyone except a handful of MinGW experts.

Re: New beta

2014-09-19 Thread Werner Koch
On Fri, 19 Sep 2014 20:14, r...@sixdemonbag.org said: The approved way of building Win32 executables of GnuPG is to cross-compile from Linux. and best on Debian Wheezy or Jessie. I plan to eventually add some checks into the Makefile to suggest what to install. Salam-Shalom, Werner --

Re: New beta

2014-09-19 Thread Robert J. Hansen
and best on Debian Wheezy or Jessie. I plan to eventually add some checks into the Makefile to suggest what to install. It would be nice if it could also be checked with Fedora. CentOS/RHEL is really big in the business world, and I know a couple of shops that would like to be able to

Re: New beta

2014-09-19 Thread Murphy
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 In response to vedaal's question - installation of gnupg v2.1 is significantly different from v1.x and even v2.0. For my Ubuntu machine hHere is a brief summary of the steps, in order 1. Install latest libraries: npth, libgpg-error, libgcrypt,

New beta

2014-09-18 Thread Werner Koch
Hi, I just uploaded a new beta: ftp://ftp.gnupg.org/gcrypt/gnupg/unstable/gnupg-2.1.0-beta834.tar.bz2 ftp://ftp.gnupg.org/gcrypt/gnupg/unstable/gnupg-2.1.0-beta834.tar.bz2.sig Noteworthy changes in version 2.1.0-beta834 (2014-09-18

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-10 Thread Bernhard Reiter
On Friday 06 June 2014 at 17:39:44, Werner Koch wrote: On Fri,  6 Jun 2014 13:22, bernh...@intevation.de said: Seriously for Werner (and some others) it is hard to know at what point information is missing where by whom. Actually I know the problem.  GnuPG-2 requires a lot of libraries and

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-10 Thread Werner Koch
On Tue, 10 Jun 2014 16:31, bernh...@intevation.de said: A dependency diagram would be cool to have! :) That is easy. Build in this order: speedo_spkgs = \ libgpg-error npth libgcrypt \ zlib libiconv gettext \ libassuan libksba gnupg \ libffi glib pkg-config \

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-07 Thread Alphazo
. It has been released to give you the opportunity to check out new features and a new beta was due anyway after 30 months. If you need a stable and fully maintained version of GnuPG, you should use version 2.0.23 or 1.4.16. This versions is marked as BETA and as such it should

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Werner Koch
On Fri, 6 Jun 2014 00:49, kristian.fiskerstr...@sumptuouscapital.com said: Congratulations on the beta release, it is good to see this development continuing steadily and I can confirm that it is working rather nicely. Well, LDAP keyserver support has not yet been implemented. But that is

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Werner Koch
On Fri, 6 Jun 2014 08:18, w...@gnupg.org said: Ooops. How does that come? My test build shows 2.1.0-beta442 as to be Never mind. I just replicated it while hacking on the new Windows installer. Shalom-Salam, Werner -- Die Gedanken sind frei. Ausnahmen regelt ein Bundesgesetz.

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Nicholas Cole
On Thu, Jun 5, 2014 at 4:55 PM, Werner Koch w...@gnupg.org wrote: Hello! I just released the fourth *beta version* of GnuPG 2.1. It has been released to give you the opportunity to check out new features and a new beta was due anyway after 30 months. Dear Werner, Congratulations

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Werner Koch
On Fri, 6 Jun 2014 10:13, nicholas.c...@gmail.com said: I just wonder if anyone would have time to put together a HOW-TO for people building GnuPG 2.1 and all of its associated libraries from source. For those of us who don't do this often, this is currently a I know. That is my Marcus

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Bernhard Reiter
On Friday 06 June 2014 at 10:13:23, Nicholas Cole wrote: I just wonder if anyone would have time to put together a HOW-TO for people building GnuPG 2.1 and all of its associated libraries from source. The tarball already has the documentation. Maybe we should place more hints in the

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Werner Koch
On Fri, 6 Jun 2014 13:22, bernh...@intevation.de said: Seriously for Werner (and some others) it is hard to know at what point information is missing where by whom. Actually I know the problem. GnuPG-2 requires a lot of libraries and they all need to be build and installed in a certain

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-06 Thread Hans-Christoph Steiner
After working with GnuPG 2.1 for over a year now, its great to see it in beta! Let's try to sync up the Android build with the official 2.1 release, so the 2.1 final release can include new support for a very popular platform :) That should be pretty straightforward since it has been building

[Announce] A new Beta of GnuPG 2.1 is now available

2014-06-05 Thread Werner Koch
Hello! I just released the fourth *beta version* of GnuPG 2.1. It has been released to give you the opportunity to check out new features and a new beta was due anyway after 30 months. If you need a stable and fully maintained version of GnuPG, you should use version 2.0.23 or 1.4.16

Re: [Announce] A new Beta of GnuPG 2.1 is now available

2014-06-05 Thread Kristian Fiskerstrand
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 06/05/2014 05:55 PM, Werner Koch wrote: Hello! I just released the fourth *beta version* of GnuPG 2.1. It has been released to give you the opportunity to check out new features and a new beta was due anyway after 30 months. If you need