Mailing List Archive

gnupg-1.0.1 trust issues and compile problems
Hi Werner,

I got an earful of ||ugh Daniel's agony trying yet again to use GPG.
I am using it on an isolated system to view the very few messages that
I get that require it.

!!! I was just able to change the trust level of a key without having
to provide my passphrase! This was from "unset" to "full trust" to
"no trust" back to "full trust"! Each time I told it to save and
exit, it said: "Key not changed so no update needed." but it wrote out
the change to trust level! This is alarming! Am I missing something
crucial here?

It turns out that mutt with gpg doesn't even seem to care what the
trust setting is. I set the trust to full and it still tells me it
doesn't have trust level set, then asks me to confirm.

In doing some interoperation testing with Marc Boucher, he found a bug
in which a signature does not check out if there is a trailing space
in the text that was signed. Has this been fixed?

On another system, I tried to compile gpg1.0.1 and got this compile
error. Can you offer any advice where to go from here? I have
appended my ./configure output after my .sig

Making all in tools
make[2]: Entering directory `/usr/src/sw/gnupg-1.0.1/tools'
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I../include -I../intl -g -O2 -Wall -c mpicalc.c
gcc -g -O2 -Wall -o mpicalc mpicalc.o ../cipher/libcipher.a ../mpi/libmpi.a ../util/libutil.a -lz -ldl -lgdbm
mpicalc.o: In function `i18n_init':
/usr/src/sw/gnupg-1.0.1/tools/mpicalc.c:74: undefined reference to `bindtextdomain'
/usr/src/sw/gnupg-1.0.1/tools/mpicalc.c:75: undefined reference to `textdomain'../util/libutil.a(logger.o): In function `g10_log_bug0':
/usr/src/sw/gnupg-1.0.1/util/logger.c:218: undefined reference to `gettext'
../util/libutil.a(argparse.o): In function `show_help':
/usr/src/sw/gnupg-1.0.1/util/argparse.c:741: undefined reference to `gettext'
../util/libutil.a(secmem.o): In function `print_warn':
/usr/src/sw/gnupg-1.0.1/util/secmem.c:79: undefined reference to `gettext'
../util/libutil.a(secmem.o): In function `secmem_malloc':
/usr/src/sw/gnupg-1.0.1/util/secmem.c:280: undefined reference to `gettext'
/usr/src/sw/gnupg-1.0.1/util/secmem.c:282: undefined reference to `gettext'
../util/libutil.a(errors.o):/usr/src/sw/gnupg-1.0.1/util/errors.c:107:
more undefined references to `gettext' follow
make[2]: *** [mpicalc] Error 1
make[2]: Leaving directory `/usr/src/sw/gnupg-1.0.1/tools'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/usr/src/sw/gnupg-1.0.1'
make: *** [all-recursive-am] Error 2


I really would like to get away from PGP, but at this rate, it is not
happening yet...

slainte mhath, RGB
--
Richard Guy Briggs -- PGP key available Auto-Free Ottawa! Canada
<www.conscoop.ottawa.on.ca/rgb/> <www.flora.org/afo/>
Prevent Internet Wiretapping! -- FreeS/WAN:<www.freeswan.org>
Thanks for voting Green! -- <green.ca> Marillion:<www.marillion.co.uk>



$ ./configure
loading cache ./config.cache
checking which static random module to use... default
checking whether use of /dev/random is requested... yes
checking whether use of extensions is requested... yes
checking whether assembler modules are requested... yes
checking whether memory debugging is requested... no
checking whether memory guard is requested... no
checking whether included zlib is requested... no
checking whether use of capabilities is requested... no
checking whether to enable maintainer-specific portions of Makefiles... no
checking host system type... i486-pc-linux-gnulibc1
checking target system type... i486-pc-linux-gnulibc1
checking build system type... i486-pc-linux-gnulibc1
checking whether make sets ${MAKE}... (cached) yes
checking whether build environment is sane... yes
checking for working aclocal... missing
checking for working autoconf... missing
checking for working automake... missing
checking for working autoheader... missing
checking for gcc... (cached) gcc
checking whether the C compiler (gcc ) works... yes
checking whether the C compiler (gcc ) is a cross-compiler... no
checking whether we are using GNU C... (cached) yes
checking whether gcc accepts -g... (cached) yes
checking how to run the C preprocessor... (cached) gcc -E
checking for POSIXized ISC... no
checking for a BSD compatible install... (cached) /usr/bin/install -c
checking for mawk... (cached) mawk
checking for docbook-to-man... (cached) no
checking for BSD-compatible nm... (cached) /usr/bin/nm -B
checking command to parse /usr/bin/nm -B output... (cached) yes
checking for _ prefix in compiled symbols... (cached) no
checking for option to create PIC... -fPIC
checking how to specify -rdynamic... -Wl,-export-dynamic
checking for ranlib... (cached) ranlib
checking for ANSI C header files... (cached) yes
checking for working const... (cached) yes
checking for inline... (cached) inline
checking for off_t... (cached) yes
checking for size_t... (cached) yes
checking for working alloca.h... (cached) yes
checking for alloca... (cached) yes
checking for unistd.h... (cached) yes
checking for getpagesize... (cached) yes
checking for working mmap... (cached) yes
checking for argz.h... (cached) no
checking for limits.h... (cached) yes
checking for locale.h... (cached) yes
checking for nl_types.h... (cached) yes
checking for malloc.h... (cached) yes
checking for string.h... (cached) yes
checking for unistd.h... (cached) yes
checking for sys/param.h... (cached) yes
checking for getcwd... (cached) yes
checking for munmap... (cached) yes
checking for putenv... (cached) yes
checking for setenv... (cached) yes
checking for setlocale... (cached) yes
checking for strchr... (cached) yes
checking for strcasecmp... (cached) yes
checking for strdup... (cached) yes
checking for __argz_count... (cached) no
checking for __argz_stringify... (cached) no
checking for __argz_next... (cached) no
checking for LC_MESSAGES... (cached) yes
checking whether NLS is requested... yes
checking whether included gettext is requested... no
checking for libintl.h... (cached) yes
checking for gettext in libc... (cached) no
checking for bindtextdomain in -lintl... (cached) yes
checking for gettext in libintl... (cached) yes
checking for msgfmt... (cached) /usr/bin/msgfmt
checking for dcgettext... (cached) no
checking for gmsgfmt... (cached) /usr/bin/msgfmt
checking for xgettext... (cached) /usr/bin/xgettext
checking for catalogs to be installed... de es_ES fr id it pl pt_BR pt_PT ru
checking for gdbm.h... (cached) yes
checking for gdbm_firstkey in -lgdbm... (cached) yes
checking for gethostbyname in -lnsl... (cached) no
checking for socket in -lsocket... (cached) no
checking for gethostbyname in -lnsl... (cached) no
checking for dlopen in -ldl... (cached) yes
checking for ANSI C header files... (cached) yes
checking for unistd.h... (cached) yes
checking for langinfo.h... (cached) yes
checking for working const... (cached) yes
checking for inline... (cached) inline
checking for size_t... (cached) yes
checking return type of signal handlers... (cached) void
checking for sys_siglist declaration in signal.h or unistd.h... (cached) yes
checking endianess... (cached) little
checking for byte typedef... (cached) no
checking for ushort typedef... (cached) yes
checking for ulong typedef... (cached) yes
checking for u16 typedef... (cached) no
checking for u32 typedef... (cached) no
checking size of unsigned short... (cached) 2
checking size of unsigned int... (cached) 4
checking size of unsigned long... (cached) 4
checking for vprintf... (cached) yes
checking for strerror... (cached) yes
checking for stpcpy... (cached) yes
checking for strlwr... (cached) no
checking for stricmp... (cached) no
checking for tcgetattr... (cached) yes
checking for rand... (cached) yes
checking for strtoul... (cached) yes
checking for mmap... (cached) yes
checking for memmove... (cached) yes
checking for gettimeofday... (cached) yes
checking for getrusage... (cached) yes
checking for gethrtime... (cached) no
checking for setrlimit... (cached) yes
checking for memicmp... (cached) no
checking for atexit... (cached) yes
checking for raise... (cached) yes
checking for getpagesize... (cached) yes
checking for strftime... (cached) yes
checking for nl_langinfo... (cached) yes
checking for mlock... (cached) yes
checking whether mlock is broken... (cached) no
checking if mkdir takes one argument... (cached) no
checking for sys/ipc.h... (cached) yes
checking for sys/shm.h... (cached) yes
checking whether IPC_RMID allowes subsequent attaches... (cached) yes
checking whether SHM_LOCK is available... (cached) yes
checking for random device... (cached) yes
checking for linux/random.h... (cached) yes
checking for random device ioctl... (cached) yes
dynamically linked cipher modules: rndunix rndegd tiger
statically linked cipher modules: rndlinux sha1 rmd160 md5
checking for mpi assembler functions... done
checking for zlib.h... (cached) yes
checking for deflateInit2_ in -lz... (cached) yes
creating ./config.status
creating Makefile
creating intl/Makefile
creating po/Makefile.in
creating util/Makefile
creating mpi/Makefile
creating cipher/Makefile
creating g10/Makefile
creating doc/Makefile
creating tools/Makefile
creating zlib/Makefile
creating checks/Makefile
creating config.h
config.h is unchanged
linking ./mpi/i386/mpih-add1.S to mpi/mpih-add1.S
linking ./mpi/i386/mpih-mul1.S to mpi/mpih-mul1.S
linking ./mpi/i386/mpih-mul2.S to mpi/mpih-mul2.S
linking ./mpi/i386/mpih-mul3.S to mpi/mpih-mul3.S
linking ./mpi/i386/mpih-lshift.S to mpi/mpih-lshift.S
linking ./mpi/i386/mpih-rshift.S to mpi/mpih-rshift.S
linking ./mpi/i386/mpih-sub1.S to mpi/mpih-sub1.S
g10defs.h is unchanged
Re: gnupg-1.0.1 trust issues and compile problems [ In reply to ]
> On another system, I tried to compile gpg1.0.1 and got this compile
> error. Can you offer any advice where to go from here? I have
> appended my ./configure output after my .sig

(That's not where it belongs ..., argh, picking nits again :)

> /usr/src/sw/gnupg-1.0.1/tools/mpicalc.c:74: undefined reference to `bindtextdomain'
> /usr/src/sw/gnupg-1.0.1/tools/mpicalc.c:75: undefined reference to `textdomain'../util/libutil.a(logger.o): In function `g10_log_bug0':
> /usr/src/sw/gnupg-1.0.1/util/logger.c:218: undefined reference to `gettext'
> ../util/libutil.a(argparse.o): In function `show_help':
> /usr/src/sw/gnupg-1.0.1/util/argparse.c:741: undefined reference to `gettext'
> ../util/libutil.a(secmem.o): In function `print_warn':
> /usr/src/sw/gnupg-1.0.1/util/secmem.c:79: undefined reference to `gettext'
> ../util/libutil.a(secmem.o): In function `secmem_malloc':
> /usr/src/sw/gnupg-1.0.1/util/secmem.c:280: undefined reference to `gettext'
> /usr/src/sw/gnupg-1.0.1/util/secmem.c:282: undefined reference to `gettext'
> ../util/libutil.a(errors.o):/usr/src/sw/gnupg-1.0.1/util/errors.c:107:
[...]
> checking host system type... i486-pc-linux-gnulibc1
> checking target system type... i486-pc-linux-gnulibc1
> checking build system type... i486-pc-linux-gnulibc1

Your Linux probably has no nls support. You could install GNU gettext,
or configure with --disable-nls, I guess.

slán leat.
Re: gnupg-1.0.1 trust issues and compile problems [ In reply to ]
Hi Richard,

On Tue, 13 Jun 2000, Richard Guy Briggs wrote:

> !!! I was just able to change the trust level of a key without having
> to provide my passphrase! This was from "unset" to "full trust" to
> "no trust" back to "full trust"! Each time I told it to save and

Waht you mean is the "ownertrust"; that is how far you trust a key
holder to correctly sign other keys. This is just a flag in the
trustdb - you don't have to enter a passphrase even with PGP 2 or 5.

I know that there is a but somewhere in the calculation of the key
validity which uses the ownertrust to establish a chain of trust from
you to the recipient/signer of a message.

> exit, it said: "Key not changed so no update needed." but it wrote out
> the change to trust level! This is alarming! Am I missing something

I know. There is a design problem: Most things are updated when you
enter the "save" command; however the ownertrust flag is updated
immediately and therefore you see this misleading message.

> In doing some interoperation testing with Marc Boucher, he found a bug
> in which a signature does not check out if there is a trailing space
> in the text that was signed. Has this been fixed?

Same version of gpg on both sides? or is it an PGP/GPG issue? There
is a problem with backward compatibilty to PGP which doesn't behave as
OpenPGP demands. Very ugly situation and gpg _tries_ to check both
versions.

> gcc -g -O2 -Wall -o mpicalc mpicalc.o ../cipher/libcipher.a ../mpi/libmpi.a ../util/libutil.a -lz -ldl -lgdbm
> mpicalc.o: In function `i18n_init':
> /usr/src/sw/gnupg-1.0.1/tools/mpicalc.c:74: undefined reference to `bindtextdomain'

Maybe your gettext installation is messed up; try:

./configure --with-included-gettext

> checking whether included gettext is requested... no


Werner

--
Werner Koch OpenPGP key 621CC013
OpenIT GmbH tel +49 211 239577-0
Birkenstr. 12 email wk@OpenIT.de
D-40233 Duesseldorf http://www.OpenIT.de