From warner at lothar.com Mon Apr 3 10:58:52 2000 From: warner at lothar.com (Brian Warner) Date: Wed Feb 23 12:43:29 2005 Subject: EGD-0.7 released (important security fix) Message-ID: <20000403085852.21144.qmail@luther.lothar.com> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Howdy all. I've just released version 0.7 ("the Brown Paper Bag" release) of EGD. The Entropy Gathering Daemon is primarily intended as a source of randomness for GnuPG, for use on systems which lack a /dev/random device. version 0.6, which has been available for about 8 months, had a serious and embarrasing bug in which the gathered random data (the output from 'vmstat' and other programs) was not properly fed into the entropy pool. The resulting data stream would have been hard to predict (it was still influenced by the timing and quantity of program output), but had far far less entropy than it claimed to provide. Many thanks to Brian Carrier for spotting the problem. Other changes: Fix handling of relative socket names. Thanks to Gerard Kok. Added lsof to gatherer list. thanks to Jack Lloyd. Added self-tests. 'make test' should be useful now. Fix "should we build SHA?" tests, works much better now. Send all debug, usage, and diagnostic output to STDERR instead. This helps egd run in scripts with GPG better (doesn't interfere with pipelines as much). EGD is available from: (signature) For futher notes and updates, see . Bug reports and patches are always welcome at warner@lothar.com . Share and Enjoy, and my humblest apologies for that egregious bug.. -Brian warner@lothar.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard iD8DBQE46E6gkDmgv9E5zEwRAqcPAKDD0NtuyLmHsHcnLYfFnr4ER+BkXwCg679D 0Wc8fZ3Afhao4AIMqg6mnjM= =OSPi -----END PGP SIGNATURE----- From cova at ferrara.linux.it Sun Apr 9 23:44:48 2000 From: cova at ferrara.linux.it (Fabio Coatti) Date: Wed Feb 23 12:43:29 2005 Subject: New site for GnuPG rpms Message-ID: <20000409234448.A1182@janus.ferrara.linux.it> We have a new site for GnuPG rpms; we have moved from pgp.4net.it to ftp://security.ferrara.linux.it/pub/gpg The old site will remain up and running for a while. -- Fabio Coatti http://www.ferrara.linux.it/members/cova Ferrara Linux Users Group http://ferrara.linux.it GnuPG fp:6AB9 277E 9AA7 9D20 E82C 9EE7 2D17 E351 3DCB 0CDC Old SysOps never die... they simply forget their password. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 240 bytes Desc: not available Url : /pipermail/attachments/20000409/91a717a5/attachment.pgp From anthony at kcn.ne.jp Wed Apr 12 18:06:15 2000 From: anthony at kcn.ne.jp (Anthony Mulcahy) Date: Wed Feb 23 12:43:29 2005 Subject: Seahorse 0.4.0 Released Message-ID: <20000413010615.A15501@kcn.ne.jp> Hello, I would like to announce the release of Seahorse 0.4.0, a Gnome GUI for GnuPG. This is the first release since Seahorse moved to SourceForge's CVS and it has a lot of changes: * Danish, Finnish and German translations * Command line options * Caching of the public and secret keyrings to speed up the display * Improvements to the GUI * Gnome Help support * Improvements to the key manager including support for editing the owner trust value. The command line options enable integration of Seahorse with email software and the distribution includes an example file showing how to use Seahorse with Mutt. This still needs to be improved so I would like to hear any comments you might have and I would really like to know if anybody succeeds in using Seahorse with any other MUA. Tarballs, Debian packages and rpms can be downloaded from http://seahorse.sourceforge.net/ and http://www1.kcn.ne.jp/~anthony/seahorse/ Thanks, Anthony -- Anthony Mulcahy GPG Key ID 61CA8871 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 248 bytes Desc: not available Url : /pipermail/attachments/20000413/02211a2e/attachment.pgp From wk at gnupg.org Wed Apr 19 19:04:33 2000 From: wk at gnupg.org (Werner Koch) Date: Wed Feb 23 12:43:29 2005 Subject: A new snapshot Message-ID: <20000419190433.I1182@djebel.gnupg.de> Hi, I have released a new snapshot of GnuPG, I hope this is one of the last ones before 1.0.2 ;-) This is still a BETA VERSION and not intended for general use. ftp://ftp.gnupg.org/pub/gcrypt/devel/gnupg-1.0.1e.tar.gz (1600k) The usual diff file is also available, but this time there is only a detached signature for this diff file, because I noticed to late that the --not-dash-escaped option is broken - fixes are welcome. $ md5sum gnupg-*1.0.1e.*gz 26da53390652da65c98cfd331984091f gnupg-1.0.1d-1.0.1e.diff.gz 71ff2be5a090f7dbf7b5935810371d61 gnupg-1.0.1e.tar.gz I know that there are still some bugs in it; if you discover that one of the bugs (see http://bugs.guug.de) has been fixed, please tell this the developers list (gnupg-devel@gnupg.org). I am going to southern France to relax for a week in a small medieval village; so don't expect ans answers the next week. Have fun too :-), Werner p.s. Here is a list of sites mirroring ftp://ftp.gnupg.org/pub/gcrypt/ Please use them if you can; new releases should show up on these servers within a day. Australia ftp://ftp.progsoc.uts.edu.au/pub/gnupg/ ftp://mirror.aarnet.edu.au/pub/gnupg/ http://mirror.aarnet.edu.au/pub/gnupg/ Austria ftp://gd.tuwien.ac.at/privacy/gnupg/ Belgium ftp://openbsd.rug.ac.be/pub/gcrypt/ Canada ftp://crypto.yashy.com/pub/cryptography/gnupg/ Denmark ftp://sunsite.auc.dk/pub/security/gcrypt/ Finland ftp://ftp.jyu.fi/pub/crypt/gcrypt/ France ftp://ftp.strasbourg.linuxfr.org/pub/gnupg/ Germany ftp://ftp.freenet.de/pub/ftp.gnupg.org/pub/gcrypt/ Hungary ftp://ftp.kfki.hu/pub/packages/security/gnupg/ Ireland ftp://ftp.compsoc.com/pub/gnupg/ Italy ftp://ftp.linux.it/pub/mirrors/gnupg/ ftp://ftp3.linux.it/pub/mirrors/gnupg/ Japan ftp://pgp.iijlab.net/pub/gnupg/ ftp://ring.aist.go.jp/pub/net/gnupg/ ftp://ring.asahi-net.or.jp/pub/net/gnupg/ ftp://ring.astem.or.jp/pub/net/gnupg/ ftp://ring.ip-kyoto.ad.jp/pub/net/gnupg/ ftp://ring.jah.ne.jp/pub/net/gnupg/ ftp://ring.so-net.ne.jp/pub/net/gnupg/ Poland ftp://sunsite.icm.edu.pl/pub/security/gnupg/ Sweden ftp://ftp.stacken.kth.se/pub/crypto/gnupg/ ftp://ftp.sunet.se:/pub/security/gnupg/ Switzerland ftp://sunsite.cnlab-switch.ch/mirror/gcrypt/ Taiwan ftp://coda.nctu.edu.tw/Security/gcrypt United Kingdom ftp://ftp.net.lut.ac.uk/gcrypt/ -- Werner Koch OpenPGP key 621CC013 OpenIT GmbH tel +49 211 239577-0 Birkenstr. 12 email wk@openit.de D-40233 Duesseldorf http://www.openit.de -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 233 bytes Desc: not available Url : /pipermail/attachments/20000419/712cb54b/attachment.pgp From anthony at kcn.ne.jp Sun May 7 22:47:14 2000 From: anthony at kcn.ne.jp (Anthony Mulcahy) Date: Wed Feb 23 12:43:30 2005 Subject: Seahorse 0.4.5 Released Message-ID: <20000508054713.A23457@kcn.ne.jp> Hello, I would like to announce the release of Seahorse 0.4.5, a Gnome GUI for GnuPG. This release has new functions, new translations and many improvements: * Steffen Zahn added drag and drop support - files can be dropped on the text area, encrypt and decrypt buttons and file name entries on the encrypt and decrypt dialogs. * An "Add UID" option was added to the Key Manager. * Several other improvements were made to the Key Manager. * Solaris support has been added. * Max Roth provided a Swedish translation. * Ga Qui provided a French translation. * More command line options have been added. Tarballs, Debian packages and rpms can be downloaded from http://seahorse.sourceforge.net/ and http://www1.kcn.ne.jp/~anthony/seahorse/ Anthony Mulcahy -- Anthony Mulcahy GPG KeyID 61CA8871 http://seahorse.sourceforge.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 248 bytes Desc: not available Url : /pipermail/attachments/20000508/304b51e6/attachment.pgp From wk at gnupg.org Mon Jun 5 14:39:54 2000 From: wk at gnupg.org (Werner Koch) Date: Wed Feb 23 12:43:30 2005 Subject: AIX 4.2 binary distribution Message-ID: <20000605143954.P32324@djebel.gnupg.de> Hi, Rodrigo Barbosa wrote in to tell me that he has a binary AIX distribution of GnuPG: I have a bff (AIX binary distribution package) of 1.0.1 if anyone want ... Oh yeah, I'm using it with EGD, and the bff version will need egd to run. But I have a bff version of egd too, so there is no problem :-) I make absolutly no claim and give no garantee about this BFF, tho. I use it here at my workplace, and it works flawlessly, on at lease 4 AIX machines, so I need no reason why it should not work for everybody else. Its avaliable at: ftp://aix.liveware.com.br/pub/aix/4.2/gnupg-1.0.1.0.bff And EGD at: ftp://aix.liveware.com.br/pub/aix/4.2/egd-0.5.0.0.bff Haven't had time to make a bff of egd 0.7 yet. Also, the used must have Perl installed. Perl bff can be obtained at: ftp://aix.liveware.com.br/pub/aix/4.2/contrib/perl-5.5.2.0.bff Any questions can be directed to me. Thank you ... -- Rodrigo Barbosa - Network Administrator Liveware, Tecnologia a Servico LTDA - (+55)(35)471-3210 finger rodrigob@morcego.liveware.com.br for PGP Key and more info "Artificial Intelligence stands no chance against Natural Stupidity." -- Werner Koch OpenPGP key 621CC013 OpenIT GmbH tel +49 211 239577-0 Birkenstr. 12 email wk@OpenIT.de D-40233 Duesseldorf http://www.OpenIT.de From wk at gnupg.org Wed Jun 28 14:55:15 2000 From: wk at gnupg.org (Werner Koch) Date: Wed Feb 23 12:43:30 2005 Subject: GnuPG test version 1.0.1h Message-ID: <20000628145515.B26051@djebel.gnupg.de> A non-text attachment was scrubbed... Name: not available Type: application/pgp Size: 1724 bytes Desc: not available Url : /pipermail/attachments/20000628/9a56b877/attachment.bin