{"action":"created","issue":{"url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh/issues/25","repository_url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh","labels_url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh/issues/25/labels{/name}","comments_url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh/issues/25/comments","events_url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh/issues/25/events","html_url":"https://github.com/EtiennePerot/parcimonie.sh/issues/25","id":202613978,"number":25,"title":"Does not torify key fetches with GnuPG 2.1+","user":{"login":"intrigeri","id":2395100,"avatar_url":"https://avatars.githubusercontent.com/u/2395100?v=3","gravatar_id":"","url":"https://api.github.com/users/intrigeri","html_url":"https://github.com/intrigeri","followers_url":"https://api.github.com/users/intrigeri/followers","following_url":"https://api.github.com/users/intrigeri/following{/other_user}","gists_url":"https://api.github.com/users/intrigeri/gists{/gist_id}","starred_url":"https://api.github.com/users/intrigeri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/intrigeri/subscriptions","organizations_url":"https://api.github.com/users/intrigeri/orgs","repos_url":"https://api.github.com/users/intrigeri/repos","events_url":"https://api.github.com/users/intrigeri/events{/privacy}","received_events_url":"https://api.github.com/users/intrigeri/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2017-01-23T18:31:49Z","updated_at":"2017-01-24T17:12:05Z","closed_at":"2017-01-24T05:42:10Z","body":"Recent modern GnuPG delegates to dirmngr all keyserver operations. Torifying `gpg` has no effect on how dirmngr reaches keyservers at all. I realize this is being discussed on #15, but if I'm guessing right, this problem entirely prevents parcimonie.sh (sic) from doing its job as designed on recent distros, so it doesn't seem good enough to me to not have this documented anywhere else than on a ticket titled \"IPC syntax error with gnupg 2.1.4\".\r\n\r\nI suggest requesting a CVE for this problem, and documenting this in `README.md` so that new potential users are aware of this limitation."},"comment":{"url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh/issues/comments/274870542","html_url":"https://github.com/EtiennePerot/parcimonie.sh/issues/25#issuecomment-274870542","issue_url":"https://api.github.com/repos/EtiennePerot/parcimonie.sh/issues/25","id":274870542,"user":{"login":"EtiennePerot","id":1330673,"avatar_url":"https://avatars.githubusercontent.com/u/1330673?v=3","gravatar_id":"","url":"https://api.github.com/users/EtiennePerot","html_url":"https://github.com/EtiennePerot","followers_url":"https://api.github.com/users/EtiennePerot/followers","following_url":"https://api.github.com/users/EtiennePerot/following{/other_user}","gists_url":"https://api.github.com/users/EtiennePerot/gists{/gist_id}","starred_url":"https://api.github.com/users/EtiennePerot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/EtiennePerot/subscriptions","organizations_url":"https://api.github.com/users/EtiennePerot/orgs","repos_url":"https://api.github.com/users/EtiennePerot/repos","events_url":"https://api.github.com/users/EtiennePerot/events{/privacy}","received_events_url":"https://api.github.com/users/EtiennePerot/received_events","type":"User","site_admin":false},"created_at":"2017-01-24T17:12:04Z","updated_at":"2017-01-24T17:12:04Z","body":"It doesn't currently ensure that it's using a new `dirmngr`. This does mean bypassing Tor if the user manually runs `gpg --recv-keys` prior to `parcimonie.sh` doing its first key refresh, which I also documented on commit 0bd6ef34f108ed90c62da7517513f3f00c012595.\r\n\r\nI have a proposed solution for ensuring that it uses a new guaranteed-to-be-torified one at https://github.com/EtiennePerot/parcimonie.sh/issues/15#issuecomment-266246661 but I haven't implemented it yet."}}
{"actor":{"display_login":"EtiennePerot"}}