X
PGP / gpg スレ
0480名無しさん＠お腹いっぱい。
垢版 |
2022/10/17(月) 21:57:19.12
セキュリティアップデート

共有ライブラリであるLibksbaに脆弱性

影響があるのは
- Libksba 1.6.1 以前を利用するほとんどのソフトウェア
- Gpg4win 2.0.0 から 4.0.3
- GnuPG VS-Desktop 3.1.16 から 3.1.24
- GnuPG installers for Windows 2.3.0 から 2.3.7
- GnuPG LTS installers for Windows 2.1.0 から 2.2.39

対処法
Linux, Unix, macOS：Libksbaを1.6.2に更新

Windows
- Gpgwin 4.0.4 以降に更新
- GnuPG VS-Desktop 3.1.25 以降に更新
- GnuPG installer for Windows 2.3.8 に更新
- GnuPG LTS installer for Windows 2.2.40 に更新
0481名無しさん＠お腹いっぱい。
垢版 |
2022/11/26(土) 18:52:37.12
>>479
あるよ
俺もそうだけど板がUnix板でスレチ気味だけど
mac OS venturaで動かなくなった
暗号化だけしかできなくて復号と署名ができなくなった
0482名無しさん＠お腹いっぱい。
垢版 |
2022/12/20(火) 20:24:24.09
GnuPG 2.4.0
祝25周年！

Noteworthy changes in version 2.4.0
===================================
* The key database daemon is now a fully supported feature. Keys are stored in a SQLite database to make key lookups much faster. Enable it by adding "use-keyboxd" o common.conf. See also the README file.
* gpg: New command --quick-update-pref. [rGd40d23b233]
* gpg: New list-options show-pref and show-pref-verbose. [rG811cfa34cb]
* gpg: New option --list-filter to restrict key listings like gpg -k --list-filter 'select=revoked-f && sub/algostr=ed25519' [rG1324dc3490]
* gpg: New --export-filter export-revocs. [rGc985b52e71]
* gpg: Also import stray revocation certificates. [rG7aaedfb107]
* gpg: Add a notation to encryption subkeys in de-vs mode. [T6279]
* gpg: Improve signature verification speed by a factor of more than four. Double detached signing speed. [T5826]
* gpg: Allow only OCB for AEAD encryption. [rG5a2cef801d]
* gpg: Fix trusted introducer for mbox only user-ids. [T6238]
* gpg: Report an error via status-fd for receiving a key from the agent. [T5151]
* gpg: Make --require-compliance work without the --status-fd option. [rG2aacd843ad]
* gpg: Fix verification of cleartext signatures with overlong lines. [T6272]
* agent: Fix import of protected OpenPGP v5 keys. [T6294]
* gpgsm: Change the default cipher algorithm from AES128 to AES256. Also announce support for this in signatures. [rG2d8ac55d26]
* gpgsm: Always use the chain validation model if the root-CA requests this. [rG7fa1d3cc82]
* gpgsm: Print OCSP revocation date and reason in cert listings. [rGb6abaed2b5]
* agent: Support Win32-OpenSSH emulation by gpg-agent. [T3883]
* scd: Support the Telesec Signature Card v2.0. [T6252]
* scd: Redact --debug cardio output of a VERIFY APDU. [T5085]
* scd: Skip deleted pkcs#15 records in CARDOS 5. [rG061efac03f]
* dirmngr: Fix build with no LDAP support. [T6239]
* dirmngr: Fix verification of ECDSA signed CRLs. [rG868dabb402]
* wkd: New option --add-revocs for gpg-wks-client. [rGc3f9f2d497]
* wkd: Ignore expired user-ids in gpg-wks-client. [T6292]
* card: New commands "gpg" and "gpgsm". [rG9c4691c73e]
Release-info: https://dev.gnupg.org/T6303
0483名無しさん＠お腹いっぱい。
垢版 |
2022/12/20(火) 20:25:57.15
Gpg4win 4.1.0

Version 4.1.0 released 2022-12-20

GPA: So long, and thanks for all the fish. To reduce maintenance and overall quality of Gpg4win we have decided to retire GPA. Over the last decade Kleopatra has made large improvements in quality and is very well maintained and the focus of our development. [rW3f7ed3834f]
GnuPG: Improve signature verification speed by a factor of more than four. Double detached signing speed. [T5826]
GnuPG: Import stray revocation certificates to improve WKD usability.
GnuPG: New option --add-revocs for gpg-wks-client. [rG2f4492f3be]
GnuPG: Ignore expired user-ids in gpg-wks-client. [T6292]
GnuPG: Support the Telesec Signature Card v2.0 in OpenPGP. [T6252]
GnuPG: For the new AEAD Format we now only allow the fast OCB mode. The EAX mode may still be used for decryption. [rG5a2cef801d]
Kleopatra: Support the import of non-standard conforming UTF-16 encoded text files with certificates. [T6298]
Kleopatra: New Option to delete the locally stored secret key after a transfer to a smart card. [T5836]
Kleopatra: Improve the display of keys in the group edit dialog. [T6295]
Kleopatra: Simplify changing the owner trust of keys. [T6148]
Kleopatra: Allow selecting ECC with supported curves when generating new keys for smart cards. [T4429]
GnuPG: Update the X.509/CMS library Libksba to version 1.6.3 to fix a security problem in the CRL signature parser. [T6230]
GnuPG: Fix trusted introducer for mbox only user-ids. [T6238]
GpgOL: IMAP access to encrypted mails works again. [T6203]
Kleopatra: Don't report success if the key signing job was canceled. [T6305]
Kleopatra: Report failed imports immediately when receiving the result. [T6302]
Kleopatra: Do not offer invalid S/MIME certificates for signing or encryption. [T6216]
Kleopatra: Don't ask user to certify an imported expired or revoked OpenPGP key. [T6155]
Kleopatra: Do not crash when closing details widget while certificate dump is shown. [T6180]
Kleopatra: Improve usability and accessibility of the notepad operations. [T6188]

GnuPG: 2.4.0
Kleopatra: 3.1.26
GpgOL: 2.5.6
GpgEX: 1.0.9
Kompendium DE: 4.0.1
Compendium EN: 3.0.0
0485名無しさん＠お腹いっぱい。
垢版 |
2022/12/20(火) 20:46:37.27
** Key database daemon

Since version 2.3.0 it is possible to store the keys in an SQLite
database instead of the keyring.kbx file. This is in particular
useful for large keyrings or if many instances of gpg and gpgsm may
run concurrently. This is implemented using another daemon process,
the "keyboxd". To enable the use of the keyboxd put the option
"use-keyboxd" into the configuration file ~/.gnupg/common.conf or the
global /etc/gnupg/common.conf. See also doc/examples/common.conf.
Only public keys and X.509 certificates are managed by the keyboxd;
private keys are still stored as separate files.

Note that there is no automatic migration; if the use-keyboxd option
is enabled keys are not taken from pubring.kbx. To migrate existing
keys to the keyboxd do this:

1. Disable the keyboxd (remove use-keyboxd from common.conf)
2. Export all public keys
gpg --export --export-options backup > allkeys.gpg
gpgsm --export --armor > allcerts.gpg
3. Enable the keyboxd (add use-keyboxd to common.conf)
4. Import all public keys
gpg --import --import-options restore < allkeys.gpg
gpgsm --import < allcerts.crt
0486名無しさん＠お腹いっぱい。
垢版 |
2022/12/20(火) 21:09:53.16
公開鍵リングのSQLiteへの移行手順（自動では移行されない）
秘密鍵は今まで通り

1. 今の公開鍵リングをバックアップ

gpg --export --export-options backup > allkeys.gpg
gpgsm --export --armor > allcerts.gpg

2. coommon.conf（gpg.confではない）に"use-keyboxd"を追加

3. 1でバックアップした鍵リングをインポート

gpg --import --import-options restore < allkeys.gpg
gpgsm --import < allcerts.crt
0490名無しさん＠お腹いっぱい。
垢版 |
2022/12/22(木) 12:14:46.68
Windowsだが、sqlite方式(pubring.db)への移行がうまくいかない
インポート中にinput/outputエラーが起きて数百ある公開鍵の半分もインポートできず終了する
当分は従来方式(pubring.kbx)のままでいいか
0491名無しさん＠お腹いっぱい。
垢版 |
2023/04/29(土) 10:41:34.09
GnuPG 2.4.1

Noteworthy changes in version 2.4.1
===================================

* If the ~/.gnupg directory does not exist, the keyboxd is now automagically enabled. [rGd9e7488b17]
* gpg: New option --add-desig-revoker. [rG3d094e2bcf]
* gpg: New option --assert-signer. [rGc9e95b8dee]
* gpg: New command --quick-add-adsk and other ADSK features. [T6395, https://gnupg.org/blog/20230321-adsk.html]
* gpg: New list-option "show-unusable-sigs". Also show "[self-signature]" instead of the user-id in key signature listings. [rG103acfe9ca]
* gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
* gpg: Detect already compressed data also when using a pipe. Also detect JPEG and PNG file formats. [T6332]
* gpg: New subcommand "openpgp" for --card-edit. [T6462]
* gpgsm: Verification of detached signatures does now strip trailing zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
* gpgsm: Non-armored detached signature are now created without using indefinite form length octets. This improves compatibility with some PDF signature verification software. [rG8996b0b655]
* gpgtar: Emit progress status lines in create mode. [T6363]
* dirmngr: The LDAP modifyTimestamp is now returned by some keyserver commands. [rG56d309133f]
* ssh: Allow specification of the order keys are presented to ssh. See the man page entry for --enable-ssh-support. [T5996, T6212]
* gpg: Make list-options "show-sig-subpackets" work again. Fixes regression in 2.4.0. [rG5a223303d7]
* gpg: Fix the keytocard command for Yubikeys. [T6378]
* gpg: Do not continue an export after a cancel for the primary key. [T6093]
* gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
* gpgtar: Fix decryption with input taken from stdin. [T6355]

Release-info: https://dev.gnupg.org/T6454
0493名無しさん＠お腹いっぱい。
垢版 |
2023/06/04(日) 11:14:47.81
Noteworthy changes in version 2.4.2
===================================

* gpg: Print a warning if no more encryption subkeys are left over after changing the expiration date. [rGef2c3d50fa]
* gpg: Fix searching for the ADSK key when adding an ADSK. [T6504]
* gpgsm: Speed up key listings on Windows. [rG08ff55bd44]
* gpgsm: Reduce the number of "failed to open policy file" diagnostics. [rG68613a6a9d]
* agent: Make updating of private key files more robust and track display S/N. [T6135]
* keyboxd: Avoid longish delays on Windows when listing keys. [rG6944aefa3c]
* gpgtar: Emit extra status lines to help GPGME. [T6497]
* w32: Avoid using the VirtualStore. [T6403]

Release-info: https://dev.gnupg.org/T6506
0500名無しさん＠お腹いっぱい。
垢版 |
2023/07/11(火) 12:18:29.97
Noteworthy changes in version 2.4.3
===================================

* gpg: Set default expiration date to 3 years. [T2701]
* gpg: Add --list-filter properties "key_expires" and "key_expires_d". [T6529]
* gpg: Emit status line and proper diagnostics for write errors. [T6528]
* gpg: Make progress work for large files on Windows. [T6534]
* gpg: New option --no-compress as alias for -z0.
* gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
* gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
* gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
* gpgtar: New option --no-compress.
* dirmngr: Extend the AD_QUERY command. [rG207c99567c]
* dirmngr: Disable the HTTP redirect rewriting. [T6477]
* dirmngr: New option --compatibility-flags. [rGbf04b07327]
* dirmngr: New option --ignore-crl-extensions. [T6545]
* wkd: Use export-clean for gpg-wks-client's --mirror and --create commands. [rG2c7f7a5a27]
* wkd: Make --add-revocs the default in gpg-wks-client. New option --no-add-revocs. [rG10c937ee68]
* scd: Make signing work for Nexus cards. [rGb83d86b988]
* scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]

Release-info: https://dev.gnupg.org/T6509
0506名無しさん＠お腹いっぱい。
垢版 |
2024/03/13(水) 07:43:13.49
GnuPG 2.4.5

Noteworthy changes in version 2.4.5
===================================

* gpg,gpgv: New option --assert-pubkey-algo. [T6946]
* gpg: Emit status lines for errors in the compression layer. [T6977]
* gpg: Fix invocation with --trusted-keys and --no-options. [T7025]
* gpgsm: Allow for a longer salt in PKCS#12 files. [T6757]
* gpgtar: Make --status-fd=2 work on Windows. [T6961]
* scd: Support for the ACR-122U NFC reader. [rG1682ca9f01]
* scd: Suport D-TRUST ECC cards. [T7000,T7001]
* scd: Allow auto detaching of kernel drivers; can be disabled with the new compatibility-flag ccid-no-auto-detach. [rGa1ea3b13e0]
* scd: Allow setting a PIN length of 6 also with a reset code for openpgp cards. [T6843]
* agent: Allow GET_PASSPHRASE in restricted mode. [rGadf4db6e20]
* dirmngr: Trust system's root CAs for checking CRL issuers. [T6963]
* dirmngr: Fix regression in 2.4.4 in fetching keys via hkps. [T6997]
* gpg-wks-client: Make option --mirror work properly w/o specifying domains. [rG37cc255e49]
* g13,gpg-wks-client: Allow command style options as in "g13 mount foo". [rGa09157ccb2]
* Allow tilde expansion for the foo-program options. [T7017]
* Make the getswdb.sh tool usable outside the GnuPG tree.

Release-info: https://dev.gnupg.org/T6960
0509名無しさん＠お腹いっぱい。
垢版 |
2024/03/27(水) 20:10:23.56
顔はもちろん大事
0510名無しさん＠お腹いっぱい。
垢版 |
2024/03/27(水) 21:43:23.93
アホだと何故わからないんだろうね
普通に生きてたらまず起こり得ない漢字が一文字入ってた人で取り囲んで実演させたりしたんだけどアメリカンという感じだよね
ここでは何度もこの画面が表示される場合は速やかに(^ワ^=)に報告🌈🦀
・立てられなかったが
新着レスの表示
レスを投稿する

ニューススポーツなんでも実況