If you're using #gnupg with a keyserver for "gpg --refresh-keys" and you're running into the bug of getting aborted with "No data", this script is a good workaround for updating your keys of a single email domain using a (organization) key server:

https://codeberg.org/publicvoit/my-domain-gpg-refresh-keys.sh

Background: gnupg fetches keys in chunks (batches) and if a single chunk doesn't contain a single address found on the key server (because you got the keys elsewhere), the whole update process is aborted. 🤦‍♂️

#gpg #OpenPGP

my-domain-gpg-refresh-keys.sh

This shell script updates the OpenPGP keys from a key server for keys of a specific email domain only in order to circumvent a bug in gnupg which causes "--refresh-keys" to abort with "No data".

Codeberg.org

Mit GnuPG kannst du Texte und Dateien ganz einfach, plattformunabhängig, kostenlos, ohne Cloud-Zwang und sicher verschlüsseln. Die verschlüsselten Daten können sicher per E-Mail und Messenger versenden und/oder in einer Cloud gespeichert werden.

#gnupg #datenschutz #verschlüsselung #digitalesicherheit #email #messenger #cloud

https://gnupg.org

The GNU Privacy Guard

How to resolve "Key is stored in legacy trusted.gpg keyring" and migrate to DEB822 .sources format in Ubuntu 24.04/26.04? #apt #updates #2404 #repository #gnupg

https://askubuntu.com/q/1565006/612

How to resolve "Key is stored in legacy trusted.gpg keyring" and migrate to DEB822 .sources format in Ubuntu 24.04/26.04?

Ever since upgrading to the latest LTS, I am getting the following warning every time I run sudo apt update: W: http://ppa.launchpad.net/.../ubuntu/dists/noble/InRelease: Key is stored in legacy tr...

Ask Ubuntu

⏰ Letzter Aufruf! Für die Keysigning-Party auf den Chemnitzer Linux-Tagen (#CLT2026). ich hätte gern noch mehr Teilnehmer. Lasst uns gemeinsam das Web of Trust stärken! 🔐

📅 So, 29.03., 11 Uhr, Raum K2
⚠️ Anmeldeschluss ist HEUTE (20.03.) 23:59 Uhr!

https://chemnitzer.linux-tage.de/2026/de/addons/pgp

Ich freue mich auf euch!
#GnuPG #Linux #WebOfTrust @clt_news

Chemnitzer Linux-Tage 2026 · Keysigning auf den Chemnitzer Linux-Tagen

Die Chemnitzer Linux-Tage sind eine Veranstaltung rund um das Thema Linux und Open Source für jedermann, die Linux-Nutzer, Insider und Unternehmen zusammenbringt.

Keine 30 Jahre und schon komme ich jetzt ich mit #OpenPGP Schlüsseln ganz gut zurecht.

#PGP #GnuPG #Maven #Datenschutz #Mail

Anyone got a working #GPG #git commit signing example for a #macos using #homemanager #nixdarwin

Currently getting the following error:
error: gpg failed to sign the data:
gpg: skipped "$USER": No secret key

#pinentry #pgp #gnupg #nix

The https://freepg.org/ project maintains patches against #GnuPG with the goal of closer adherence to the IETF #OpenPGP spec.

One currently open question is if/how draft-ietf-openpgp-pqc support could be realistically added to #FreePG

I've started https://codeberg.org/freepg/freepg-draft-ietf-openpgp-pqc first of all as a notes-to-self repo for a (presumably very slow and long-term) side quest to explore this problem.

Specifically, the goal would be adding support for v4 ML-KEM-768+X25519 subkeys.

https://www.ietf.org/archive/id/draft-ietf-openpgp-pqc-17.html#ecc-mlkem

FreePG Project

FreePG is not associated with g10code GmbH.

Tragt euch auf der #keysigning #party des #clt2026 ein

Jeder #gnupg #pgp #openpgp Schlüssel der teilnimmt stärkt das Web of Trust #WoT

https://chemnitzer.linux-tage.de/2026/de/addons/pgp

#cryptography #cryptowars

Chemnitzer Linux-Tage 2026 · Keysigning auf den Chemnitzer Linux-Tagen

Die Chemnitzer Linux-Tage sind eine Veranstaltung rund um das Thema Linux und Open Source für jedermann, die Linux-Nutzer, Insider und Unternehmen zusammenbringt.

#GnuPG 2.5.18-freepg has been released.

It contains all the latest bug fixes from upstream GnuPG, plus the usual FreePG patches.

This release also contains fixes for additional gpg.fail issues that remain unfixed upstream:

* skip trust packets during import-restore (https://gpg.fail/trust)
* compat ignore truncated line (https://gpg.fail/formfeed)
* fail on unprintable armor headers (https://gpg.fail/nullbyte https://gpg.fail/notdash)

Note that the FreePG project considers the 2.5.x branch to be experimental, and does not enable non-standard OpenPGP algorithms unless “--compliance=gnupg” is explicitly set.

https://gitlab.com/freepg/gnupg/-/releases/gnupg-2.5.18-freepg

gpg.fail

https://codeberg.org/0xKaishakunin/Architecture/src/branch/main/PlantUML-ModelingTrust/GnuPG-WoT-Download

I have already modeled a #GnuPG key signing as DFD and SEQ as well as the classic "let's put an ISO image alongside a signature" on a WWW server. as DFD with trust boarders, attack path and STRIDE categories.

I have also modeled some of the patterns from »Modeling Trust in Enterprise Architecture: A Pattern Language for ArchiMate« in #PlantUML

Architecture

Security Architecture Notes and Patterns

Codeberg.org