gnupg + TPM 2.0 support request

sergio borghese sergio.borghese at gmail.com
Tue Dec 26 01:47:12 CET 2023


Hi Niibe, All,

Sorry for the late reply, but I was working on this in my spare time.
This is just to say that your suggestion solved my issue.
I got the latest source code from github and built gngpg 2.4 from master
branch

* master 37fa36a32 [origin/master] doc: Fix description of scdaemon for
--disable-ccid.

I also needed to build pinentry form master, as I need a version supporting
with latest libassuan protocol

* master 6fdb5e5 doc: Fix documentation

```
gpg> keytotpm
Really move the primary key? (y/N) y

sec  rsa2048/37B7F7A2498FDF57
     created: 2023-12-10  expires: 2026-12-09  usage: SC
     card-no: TPM-Protected
     trust: ultimate      validity: ultimate
[ultimate] (1). tpm-test <tpm at example.com>
```

Thanks again for the support

Ciao e grazie
Sergio





On Mon, Dec 11, 2023 at 10:15 AM sergio borghese <sergio.borghese at gmail.com>
wrote:

> Hi Niibe,
>
> Thanks a lot for the info and help
> So, if I get this right, I just need to get the latest master and rebuild
> the gnupg sw. Is this correct?
> Will try and send an update to the ML to share the results with everyone
>
> Ciao e grazie
> Sergio
>
> On Mon, Dec 11, 2023 at 1:33 AM NIIBE Yutaka <gniibe at fsij.org> wrote:
>
>> Hello,
>>
>> sergio borghese wrote:
>> > 2023-12-10 16:46:24 gpg-agent[358316] DBG: chan_11 <- ERR 268435731
>> Unknown
>> > IPC command <TPM2d>
>>
>> This is no harm.  TPM2d doesn't support GETINFO command.
>>
>> > 2023-12-10 16:46:30 gpg-agent[358316] updating regular key file
>> >
>> '/home/netresults.wintranet/borghese/gpg2.tmp/private-keys-v1.d/FDEE0860BCFCE24C29738F1ADBF42D4C7D95516B.key'
>> > by a shadow key inhibited
>>
>> I fixed this problem in the repo of GnuPG 2.4/master, I suppose.  It's
>> the commit 9909f622f for 2.4.
>>
>> The check was introduced (by the commit a1015bf2f) (in GnuPG 2.4.2),
>> which caused the problem for KEYTOTPM handling of gpg-agent.  Then fixed
>> in repo (will be in GnuPG 2.4.4).
>> --
>>
>
>
> --
> preferisco ammazzare il tempo,
> preferisco sparare cazzate,
> preferisco fare esplodere una moda,
> preferisco morire d'amore.
> (Caparezza)
>
>

-- 
preferisco ammazzare il tempo,
preferisco sparare cazzate,
preferisco fare esplodere una moda,
preferisco morire d'amore.
(Caparezza)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20231226/31ae1b49/attachment.html>


More information about the Gnupg-users mailing list