[Announce] GnuPG 1.9.92 released

[Werner Koch]

Hello!

We are pleased to announce the availability of GnuPG 1.9.92 - one of
the last steps towards a 2.0 release.  The 1.9 branch of GnuPG
features the OpenPGP as well as the S/MIME protocol.  You should
consider using GnuPG 1.9 if you want to use S/MIME. The included
GPG-AGENT is also helpful when using the stable GPG version 1.4 or if
you want to use its ssh-agent replacement feature (including smart
card support).

Note, that this version is still in beta state. The final release of
GnuPG 2.0 is scheduled for November.  Please watch the gnupg-users
mailing list for announcement of more beta versions.

You may still use GnuPG 1.4.5 for OpenPGP as there is no conflict in
installing both versions.  The actually binary for OpenPGP has been
renamed to gpg2 in GnuPG 1.9.  There are no plans to give up
development on 1.4 after the 2.0 release.

There are quite some changes since the announcement of 1.9.20 back in
December:

 * New "relax" flag for trustlist.txt to allow root CA certificates
   without BasicContraints.

 * [gpg2] Removed the -k PGP 2 compatibility hack.  -k is now an
   alias for --list-keys.

 * [gpg2] Print a warning if "-sat" is used instead of "--clearsign".

 * Regular man pages for most tools are now build directly from the
   Texinfo source.

 * Included translations from gnupg 1.4.5.

 * The gpg code from 1.4.5 has been fully merged into this release.
   The configure option --enable-gpg is still required to build this
   gpg part.  For production use of OpenPGP the gpg version 1.4.5 is
   still recommended.  Note, that gpg will be installed under the name
   gpg2 to allow coexisting with an 1.4.x gpg.

 * API change in gpg-agent's pkdecrypt command.  Thus an older gpgsm
   may not be used with the current gpg-agent.

 * The scdaemon will now call a script on reader status changes.

 * gpgsm now allows file descriptor passing for "INPUT", "OUTPUT" and
   "MESSAGE".

 * The gpgsm server may now output a key listing to the output file
   handle. This needs to be enabled using "OPTION list-to-output=1".

 * The --output option of gpgsm has now an effect on list-keys.

 * New gpgsm commands --dump-chain and list-chain.

 * gpg-connect-agent has new options to utilize descriptor passing.

 * A global trustlist may now be used.  See doc/examples/trustlist.txt.

 * When creating a new pubring.kbx keybox common certificates are
   imported.

 * Enhanced pkcs#12 support to allow import from simple keyBags.

 * Exporting to pkcs#12 now create bag attributes so that Mozilla is
   able to import the files.

 * Pkcs#12 files are now created with a MAC.  This is for better
   interoperability.

 * Fixed uploading of certain keys to the smart card.

 * New command APDU for scdaemon to allow using it for general card
   access.  Might be used through gpg-connect-agent by using the SCD
   prefix command.

 * Support for the CardMan 4040 PCMCIA reader (Linux 2.6.15 required).

 * Scdaemon does not anymore reset cards at the end of a connection. 

 * Kludge to allow use of Bundesnetzagentur issued X.509 certificates.

 * Added --hash=xxx option to scdaemon's PKSIGN command.


You may download GnuPG 1.9.92 from one of the mirrors as listed at
http://www.gnupg.org/download/mirrors.html or direct from the master
server ftp://ftp.gnupg.org:

  ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.9.92.tar.bz2    (3703k)
  ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.9.92.tar.bz2.sig

 or as a patch against the previous release:

  ftp://ftp.gnupg.org/gcrypt/alpha/gnupg/gnupg-1.9.91-1.9.92.diff.bz2 (20k)

SHA-1 checksums for the above files are:

8021f1b170bde91fa4e7126c0dd8db2c69c7a8f5  gnupg-1.9.92.tar.bz2
24b28871d3ffb60f79878b33286160ec55a9b3e6  gnupg-1.9.91-1.9.92.diff.bz2


For help on installing or running GnuPG 1.9 you should send mail to
the gnupg-users mailing list or to one of the country specific lists.
See http://www.gnupg.org/documentation/mailing-lists.html .

Improving GnuPG is costly, but you can help!  We are looking for
organizations that find GnuPG useful and wish to contribute back.  You
can contribute by reporting bugs, improve the software, or by donating
money.

Commercial support contracts for GnuPG are available, and they help
finance continued maintenance.  g10 Code GmbH, a Duesseldorf based
company owned and headed by gpg's principal author, is currently
funding GnuPG development.  We are always looking for interesting
development projects.  A service directory is available at
http://www.gnupg.org/service.html .


The GnuPG project is looking for a new logo.  The contest runs until
end of this month.  See http://www.gnupg.org/misc/logo-contest.html


Happy hacking,

  Werner


-- 
Werner Koch                                      <wk at gnupg.org>
The GnuPG Experts                                http://g10code.com
Join the Fellowship and protect your Freedom!    http://www.fsfe.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 205 bytes
Desc: not available
Url : /pipermail/attachments/20061011/ff2fd5b0/attachment.pgp