Home → Stable →

Update to GnuPG 2.2.2?

• Edit

Frank

11 Nov, 2017 01:08 PM

Dear GPG team,

do you plan to update to the latest GnuPG 2.2.2 version?
What about updating pinentry and other libraries to their current versions?

Thanks for your feedback,
Frank

1. Support Staff 1 Posted by Steve on 11 Nov, 2017 05:13 PM

   

   Hi Frank,

   welcome to the GPGTools support platform. Sorry you are having problems using GPG Suite.

   Sure, updating to gpg 2.2.2 is planned. Is there a specific problem you are seeing with the current release and the gpg / pinentry that comes with it?

   Best,
   steve

   • Edit

2. 2 Posted by Frank on 11 Nov, 2017 05:33 PM

   

   Hi Steve,

   my inquiry is not based on a specific problem or bug in GPG, but I am a bit concerned that all the bug fixes in newer versions of both gnupg and pinentry do find their way into GPG. Furthermore, there might also be security fixes in those newer versions. In general, I believe it is good policy to rely on the latest releases, esp. if those libraries are part of an IT security product.
   Best,
   Frank

   • Edit

3. Support Staff 3 Posted by Steve on 11 Nov, 2017 05:56 PM

   

   We sure do keep tabs on that. 2.2.2 has no security fixes: https://lists.gnupg.org/pipermail/gnupg-announce/2017q4/000416.html

   But it's highly likely it will be included in the next release.

   • Edit

4. 4 Posted by Concerned User on 14 Nov, 2017 01:08 AM

   

   Is there a way to substitute homebrew's install of GnuPG rather than the separate GPGTools version? Homebrew's is kept up to date, and I feel like this should be modular.

   Is there a way to uninstall just the MacGPG2 part it GPGTools? I think I can handle the simlinks needed as long as the full list of them can be provided here so I don't miss anything.

   • Edit

5. Support Staff 5 Posted by Steve on 17 Nov, 2017 08:10 PM

   

   Hi Frank,

   gpg 2.2.2 is now included in the nightly build and will be included in the next stable release.

   Feel free to download and install our latest GPG Suite nightly build. That page also has sig and SHA256 to verify the download.

   All the best,
   steve

   Disclaimer: This is a development version which has not been thoroughly tested yet - bugs or crashes are to be expected. Thanks for helping us test.

   • Edit

6. Support Staff 6 Posted by Luke Le on 18 Nov, 2017 09:12 AM

   

   Hi Concerned User,

   sure you can, and it’s pretty simple to find all the symlinks by running the following command:

    ls -l /usr/local/bin | grep MacGPG2
   

   Simply remove the symlinks found and install gnupg via brew

   The main difference between our MacGPG2 and homebrew’s gnupg is pinentry-mac and the Communication with macOS Keychain Access. So once you use homebrew’s gnupg you will unfortunately no longer be able to use the “Save in Keychain” option.

   Hope that helps.

   • Edit

7. Steve closed this discussion on 26 Mar, 2018 11:50 AM.