GnuPG 1.9.92 -- first findings
Patrick Brunschwig
patrick at mozilla-enigmail.org
Mon Oct 16 20:07:15 CEST 2006
Werner Koch wrote:
> On Mon, 16 Oct 2006 09:18, Patrick Brunschwig said:
>
>> * gpg2 reproducibly destroyed my keyring with the following sequence of
>> commands:
>> # gpg2 --charset utf8 --no-tty --status-fd 1 --logger-fd 1 \
>> --command-fd 0 --ask-cert-level --edit-key <0xKeyid> trust
>>
>> # gpg2 --charset utf8 --batch --no-tty --status-fd 2 \
>> --with-fingerprint --fixed-list-mode --with-colons --list-keys
>
> I tried that suing a copy of my own key and answering 4, save. No
> signs of a currupted keyring. Did you used that on the command line
> or are these the invoctions from enigmail. It would be good to see an
> lsof output then.
I could reproduce it on the command line without Enigmail. I believe
it's related to my keyring; using just a subset of the keyring,
everything works fine. On the other hand I don't have the same issue
with gpg 1.4.5.
>> * gpg2 always uses pinentry instead of the passphrase-fd in the
>> following example:
>> # gpg2 --charset utf8 --passphrase-fd 0 --no-use-agent --no-tty \
>> --status-fd 1 --logger-fd 1 --command-fd 0 -u 0xD8A807C7CCEC227B \
>> --ask-cert-level --edit-key 9CD4D060D74A14F3 lsign
>
> I can't replicate this. --use-agent and --no-use-agent have no effect
> as the agent is always used unless --passphrase-fd is given.
>
> BTW, using passphrase-fd along with --command-fd is questionable
> because --passphrase-fd reads the passphrase once and right at startup
> whereas --command-fd ask for the passphrase as needed.
Indeed, I'll have to change it.
>
>> gpg2 --debug-all --recv-keys 0x810271D5
>
> Well, I can't find this key at all. Using
>
> gpg2 --keyserver hkp://minsky.surfnet.nl --recv-keys \
> --no-permission-warning 0x5b0358a2
>
> works just fine. (--no-permission-warnig is needed only in my test setup.)
>
>> gpg: no handler for keyserver scheme `hkp'
>
> What options did you set in your gpg.conf? Also check that there is
> no gpg.conf-1.9*. Build options? Can you send me the config.log by
> PM?
Sure -- done.
Patrick
More information about the Gnupg-devel
mailing list