Package request: gnupg2
Hi,
Please consider including the package/software 'gnupg2' in the grml live CD.
Quote from http://lists.gnupg.org/pipermail/gnupg-users/2013-February/046057.html:
Is there any LiveCD that has GPG 2.0.18 (or higher) on it?
I plan to generate some secret keys to store on a smartcard, and to backup on a USB device. To minimize the risk of Key compromise, I'd like to do the key generation on an offline machine.
I could do a regular install for this, and wipe the harddrive after I'm done, but it would save a lot of work if I could boot off a LiveCD.
But since I'd like to move a 4096bit key to a smartcard, I need 2.0.18 (or higher). Are there LiveCDs that have this version on them?
It seems the only live system providing that package is knoppix' DVD version (see reply to the quoted message on the gnupg-user list).
Thank you very much for consideration and putting together such a fantastic system! It has helped me many times already and I stole config parts which made my life as an admin much easier. I hope you can keep up the good work! :)
Best regards
henk
Not a direct solution but to put two walk arounds on record:
1) boot GRML to RAM and install needed packages from Debian unstable.
2) stop graphical ui, stop database etc daemons, remount / read-only, and write key to ram disk.
Richard
PS: what kind of smart card is sold as secure and does not support on-card key generation?
PPS: think of revocation key! If they lose that card...
PPPS: feel free to forward to whoever needs this info.
Sent by mobile; excuse my brevity.
Hi Richard,
On Mon, 25 Feb 2013 21:43:23 +0100 Richard Hartmann richih.mailinglist@gmail.com wrote:
Not a direct solution but to put two walk arounds on record:
- boot GRML to RAM and install needed packages from Debian unstable.
Might work, but requires a network connection as well as download and installation of packages via that network. Which is exactly what we want to avoid …
- stop graphical ui, stop database etc daemons, remount / read-only,
and write key to ram disk.
Richard
PS: what kind of smart card is sold as secure and does not support on-card key generation?
I don’t know. But I assume it’s a rhetorical question, so: Generation on-card is possible, but making backups is impossible that way. I would not need a live system if I wanted to go that way but could just use the system I use on a daily basis as it would not matter if the system is compromised or not …
Thank you very much for the suggestion though. I’m sure it’s good to have that method on record.
Best regards
henk
Teilnehmer (2)
-
Hendrik Jaeger -
Richard Hartmann