patching GnuPG to shuddup was: Re: Signatures and GnuPG and PGP 6.8.X

[Larry Rosenman]

I think there is an option you can set, see the manpage..... or FAQ
file.

LER
* Armin Hartinger <armin@pctechware.com> [001023 14:27]:
> The platform is actually FreeBSD. It's my webhost on which I just have a little useraccount. and
> ... I don't really follow what you are trying to say below.
> Would going in into the C-source and just commenting out the offending message out - work?
> 
> Just wondering...
> 
> -Armin
> 
> Larry Rosenman wrote:
> 
> > On what platform?  On Linux, I believe, the gpg binary needs to be
> > setuid root.  On UnixWare, add filepriv -f plock /path/to/gpg
> >
> > Larry
> >
> > * Armin Hartinger <armin@pctechware.com> [001023 13:58]:
> > > How to patch gnupg to not complain? It messes up php-scripts of mine this way. (complaining
> > > about insecure memory)
> > > -Armin
> > >
> > > Caleb Land wrote:
> > >
> > > > Hello,
> > > >         I'm using GnuPG 1.0.4 (patched to not complain about
> > > > deprecated algorithms), and a friend of mine is using the newest
> > > > freeware PGP program (6.8.something).  When I encrypt a file and sign
> > > > it and send it to him, he can decrypt it, but his program reads that
> > > > it is a bad signature.
> > > >         Now, I tried both attaching the file\ and using mutt to
> > > > encrypt and sign it, and I tried doing:
> > > >
> > > > ---output---
> > > >
> > > > [caleb@deepthought caleb]$ gpg --armor --sign --recipient "Brian R. Boyce" --encrypt test.c
> > > > gpg: Warning: using insecure memory!
> > > >
> > > > You need a passphrase to unlock the secret key for
> > > > user: "Caleb Land (RedHatDude) <bokonon@rochester.rr.com>"
> > > > 1024-bit DSA key, ID 29402314, created 2000-10-18
> > > >
> > > > ---/output---
> > > >
> > > >         He can decrypt the file fine, but it reads that my signature
> > > > is bad.  I moved my private/public keypair to a windows box with the
> > > > newest version of freeware PGP, and sent him a file which I encrypted
> > > > and signed, and all went well.  It both decrypted and the signature
> > > > checked out okay.
> > > >         I hope that this is enough information.  Unfortunately, I am
> > > > fairly new to this stuff, so I don't understand it too well.
> > > >
> > > >         One more thing:  I get a message which I don't understand when
> > > > I try to decrypt files sent by him to me:
> > > >
> > > > ---output---
> > > >
> > > > [caleb@deepthought caleb]$ gpg --decrypt DTF-802.pdf.asc > DTF-802.pdf
> > > > gpg: Warning: using insecure memory!
> > > >
> > > > You need a passphrase to unlock the secret key for
> > > > user: "Caleb Land (RedHatDude) <bokonon@rochester.rr.com>"
> > > > 1024-bit ELG-E key, ID 0E85FED7, created 2000-10-18 (main key ID
> > > > 29402314)
> > > >
> > > > gpg: encrypted with 3072-bit ELG-E key, ID AA4D2A27, created
> > > > 2000-10-16
> > > >       "Brian R. Boyce <Veritas@rochester.rr.com>"
> > > > gpg: no secret key for decryption available
> > > > gpg: Signature made Mon Oct 23 12:09:06 2000 EDT using DSA key ID
> > > > 752A64A7
> > > > gpg: Good signature from "Brian R. Boyce <Veritas@rochester.rr.com>"
> > > >
> > > > ---/output---
> > > >
> > > >         What does "gpg: no secret key for decryption available" mean?
> > > > The file decrypts fine, but I have no idea what the error (warning or
> > > > neither?) message means.
> > > >
> > > > --
> > > > Sincerely,
> > > > Caleb Land
> > > > (bokonon@rochester.rr.com)
> > > >
> > > > --
> > > > Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
> > > > with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org
> > >
> > > --
> > > Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
> > > with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org
> >
> > --
> > Larry Rosenman                      http://www.lerctr.org/~ler
> > Phone: +1 972-414-9812 (voice) Internet: ler@lerctr.org
> > US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

-- 
Larry Rosenman                      http://www.lerctr.org/~ler
Phone: +1 972-414-9812 (voice) Internet: ler@lerctr.org
US Mail: 1905 Steamboat Springs Drive, Garland, TX 75044-6749

-- 
Archive is at http://lists.gnupg.org - Unsubscribe by sending mail
with a subject of  "unsubscribe"  to gnupg-users-request@gnupg.org