[Gpg4win-devel] Gpg4win 1.1.4 released

Wed Feb 18 15:09:26 CET 2009

Hi!

We are pleased to announce the availability of a new stable Gpg4win
release: Version 1.1.4.

This is a maintenance release; if you don't have any problems there is
no need for an update.  It mainly fixes problem using GnuPG on Windows
Vista by updating to a newer version of the included GnuPG.

About Gpg4win
-------------

The Gpg4win project aims at updating the Gpg4win Windows installation
package with GnuPG encryption tool, associated applications and
documentation on a regular basis.  Especially the documentation
(handbooks "Novices", "Einsteiger" and "Durchblicker") are directly
maintained as part of the gpg4win project.

It is an international project. Due to the origin of the project the
German language is fully supported.  People helping with translations
are very welcome!

The main difference compared to all other similar approaches (mainly
GnuPP, GnuPT, Windows Privacy Tools and GnuPG-Basics) is that the first
thing developed was the Gpg4win-Builder. This builder allows to easily
create new gpg4win.exe installers with updated components.

The builder runs on any decent Unix system, preferable Debian GNU/Linux.
Almost all products are automatically cross-compiled for integration
into the installer.  With this concept it is hoped to prevent quick
aging of the installer package. This is due to easier updating and less
dependency on single developers.

Noteworthy changes in version 1.1.4 (2009-02-17)
------------------------------------------------

 * Updated GnuPG to 1.4.9 to solve problems on Windows Vista.

 * Updated the optional GnuPG-2 components.

 * Included the small Paperkey and Scute utilities.

 * Included components are:
         GnuPG:  1.4.9 [*]
         GnuPG2: 2.0.10 [*]
         DirMngr: 1.0.3-svn310 [*]
         GPA:    0.8.0 [*]
         GPGol:  0.9.92
         GPGee:  1.3.1
         WinPT:  1.2.0
         Claws-Mail: 3.0.0-rc2
         Novices:        1.0.0
         Einsteiger:     2.0.2
         Durchblicker:   2.0.2
   (Marked packages are updated since the last release) 

Incompatibilities
-----------------

The Dirmngr, which is used by GnuPG-2, uses another location for its
configuration files.  It is not anymore below the installation directory
put at the proper place for data files.  This ensures that they will
persist over updates and allows to use a network share for the program
files.  Gpg4win 1.1.4 deletes those old configuration files it knows
about but keeps those not installed by Gpg4win.  However, the left over
files are not anymore used and need to be copied to the new location
manually if this is desired.  Given that GnuPG-2 and Dirmngr are not
used by the other tools, we believe that this is not a hard problem.

Current Work
------------

We are still working towards Gpg4win 2.0, featuring a completely new
architecture.  The currently available Beta version (available through
http://www.gpg4win.org/download.html) is almost usable.  However there
are a couple of problems we need to solve before we are able to release
a stable Gpg4win 2.0.  Due to these problems we decided to release 1.1.4
as an update for 1.1.3 first.

Using GPG via %PATH%
--------------------

As of version 1.1.0, Gpg4win updates the PATH variable to include a new
public directory containing the command line tools of Gpg4win.  To avoid
having a bunch of DLLs in the PATH a special wrapper is used to access
these tools.  With this release the wrapper should actually work and
allows access to gpg, gpgsm and gpg-connect-agent from anywhere in the
system without the need to know where Gpg4win has been installed.

Developers of frontends making use of Gpg4win might want to avoid the
use of these wrappers.  A hidden option in the wrapper makes the actual
used binary available.  For example, running "gpg --version --version"
will print the following to stdout if the wrapper is being used:

  gpgwrap (Gpg4win) 1.1.4 ;C:\Programme\GNU\GnuPG\gpg.exe
  gpg (GnuPG) 1.4.9 (Gpg4win 1.1.4)
  ....

The string after the semicolon up to the end of the first line may be
used for future invocations of gpg.exe. 

Installation
------------

For installation instructions, please visit http://www.gpg4win.org or
read on.

Developers who want to *build an installer* need to get the following
files from http://wald.intevation.org/projects/gpg4win/ :

  gpg4win-1.1.4.tar.bz2 (4.3M)
  gpg4win-1.1.4.tar.bz2.sig

The second file is a digital signature of the the first file.  Either
check that this signature is fine or compare with the checksums given
below.  (see also http://www.gnupg.org/download/integrity_check.html)

The *ready to use installer* is available at:

  http://ftp.gpg4win.org/gpg4win-1.1.4.exe  (9.6M)
  http://ftp.gpg4win.org/gpg4win-1.1.4.exe.sig

Or using the ftp protocol at:

  ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.1.4.exe  (9.6M)
  ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.1.4.exe.sig

SHA1 and MD5 checksums for these files are given below.

If you don't need the manuals or the GnuPG2 command line tools for
S/MIME, you might alternatively download the "light" version of the
installer:

  http://ftp.gpg4win.org/gpg4win-light-1.1.4.exe  (5.9M)
  http://ftp.gpg4win.org/gpg4win-light-1.1.4.exe.sig

or using FTP at:

  ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.1.4.exe  (5.9M)
  ftp://ftp.gpg4win.org/gpg4win/gpg4win-1.1.4.exe.sig

A separate installer with the source files used to build the above
installer is available at:

  ftp://ftp.gpg4win.org/gpg4win/gpg4win-src-1.1.4.exe  (60M)
  ftp://ftp.gpg4win.org/gpg4win/gpg4win-src-1.1.4.exe.sig

Most people don't need this source installer; it is merely stored on
that server to satisfy the conditions of the GPL.  In general it is
better to get the gpg4win builder tarball (see above) and follow the
instructions in the README to build new installers; building the
installer is not possible on Windows machines and works best on current
Debian GNU/Linux systems (we currently use the mingw32 package from
Etch).

SHA1 checksums are:

e1c41605b0a359759059e4e2f527055b0f4036d5  gpg4win-1.1.4.exe
6ae2b32ec97801543e954fd23888fa10a9a1781a  gpg4win-light-1.1.4.exe
08c585347750e8345d964afa73aff7d455c81f39  gpg4win-src-1.1.4.exe
6a3ec8f7cb5a4252b3b93f49b733bcb5e344eb06  gpg4win-1.1.4.tar.bz2

MD5 checksums are:

b2e18fd37a14b065a8361f5348c83f72  gpg4win-1.1.4.exe
bb3bee4d8c30f5376d532c7135b17045  gpg4win-light-1.1.4.exe
2efc36781e7b3f463064129d6819fe4d  gpg4win-src-1.1.4.exe
2b1ac6dbc4d4fe3e710348b7a671b102  gpg4win-1.1.4.tar.bz2

If you have problems downloading the above files, you may try the mirror
servers listed at the download page.

We like to thank the authors of the included packages, the NSIS authors,
all other contributors and first of all, those folks who stayed with us
and helped testing Gpg4win.

To help furthering this project, please consider to sponsor the
development.  See http://www.gpg4win.org .

Happy hacking,

  The Gpg4win hackers

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 205 bytes
Desc: not available
Url : http://lists.wald.intevation.org/pipermail/gpg4win-devel/attachments/20090218/a3094f38/attachment.pgp