[00:06] james_w: https://code.edge.launchpad.net/ubuntu/+source/ghostscript [00:06] james_w: new layout [00:12] back [00:13] Lumiere: ok, a few quick questions: [00:13] Lumiere: what version of bzr do you have, and which format were you upgrading to? [00:13] 19:13:31 jstraw@shipon:~ 1$ bzr version [00:13] Bazaar (bzr) 1.13.1 [00:13] I was just doing bzr upgrade without flags [00:15] ok [00:15] Lumiere: is your local copy upgraded? [00:15] I couldn't get it checked out to me [00:15] but the person I am working with had branch type 6 vs 5 on lp [00:16] ? [00:16] thumper: which seemed odd to me [00:16] are you using checkouts? [00:17] are you a member of the team that owns the branch? [00:17] yea [00:17] using branches [00:17] and I am jasonstraw in that team [00:17] the person who had the upgraded one is jelkner [00:18] have you done a `bzr lp-login`? [00:18] on other projects [00:18] bzr should remember [00:18] so you should have been able to do a checkout [00:18] it times out halfway through [00:18] although we recommend branches [00:18] bzr branch lp:gasp-lessons [00:19] that'll give you a complete local copy [00:19] which you can upgrade [00:19] yes [00:19] it was a network issue [00:19] mthaddon: how about we just run upgrade for Lumiere? [00:19] please [00:19] and thank you [00:20] thumper: sure - leave dirs as is and just run upgrade? [00:20] the branch was taking so long to do it [00:20] mthaddon: you'll need to (re)move the current backup.bzr [00:20] that it timed out/crashed [00:20] mthaddon: and just a vanilla bzr upgrade [00:20] Lumiere: ok, that's done [00:20] thank you [00:21] mthaddon: thansk [00:21] np [00:21] 19:21:01 jstraw@shipon:~/compile/gasp 24$ bzr branch lp:gasp-lessons [00:21] bzr: ERROR: The branch lp:gasp-lessons has no revision None.4 [00:23] thumper: any ideas? ^ [00:23] mthaddon: can you run check on the branch? [00:24] Lumiere: what do you have in ~/compile/gasp ? [00:24] nothing [00:24] Lumiere: no existing .bzr? [00:24] correct [00:25] thumper: http://pastebin.ubuntu.com/214009/ [00:25] mthaddon: that was the broken upgrade :( [00:25] :( didn't give me any errors when doing it [00:26] so what now? [00:26] mthaddon: did you keep the old backup.bzr? [00:26] yep [00:26] ok [00:26] delete the existing .bzr [00:26] move the oldest backup.bzr to .bzr [00:26] and do a check [00:26] (pre upgrade .bzr hopefully) [00:26] failing all this, we can grap the mirrored copy [00:27] ok, should be all good now [00:27] bzr check worked fine before and after the upgrade [00:27] mthaddon: check was good? [00:27] kk [00:27] Lumiere: try now? [00:28] it is branching [00:30] * thumper afk, bbs [00:40] thumper: I saw, thanks [00:40] looks great [01:06] where would I file a bug to request ppa build cancellations? [01:06] as a feature [01:07] malone? [01:07] soyuz [01:07] ah [01:07] if in doubt, choose launchpad [03:35] hi [03:35] how much time does it take to import svn into launchpad's bzr? [03:36] depends on the project [03:38] lifeless: it's a small project, it's been 8 hours and it's still pending review :/ [03:38] Turl1: what's the branch? [03:39] mwhudson: https://code.launchpad.net/~vcs-imports/autoptimize/trunk [03:44] Turl1: approved [03:46] thanls mwhudson :) [03:47] thanks* [03:49] np === poolie_ is now known as poolie [07:12] Can somebody please look up OOPS-1287EC164 in a few minutes? It's repeatedly crashing one of my scripts. [07:12] https://lp-oops.canonical.com/oops.py/?oopsid=1287EC164 [07:43] wgrant: looks like something to do with an unsigned publication [07:46] mwhudson: Thanks. [07:46] * wgrant will poke Soyuz people when they appear. [08:11] wgrant: Have you got a minute to help me understand the context of bug 378876 [08:11] Launchpad bug 378876 in soyuz "Superseded binaries shown as FULLYBUILT_PENDING" [Medium,In progress] https://launchpad.net/bugs/378876 [08:12] noodles775: Sure. [08:13] wgrant: so from what I can understand in cprov's comments, the later upload is cruft because there was already a source published that superseded it right? [08:13] In which case, why isn't the later upload *marked* as superseded? [08:14] I'm not sure I understand why the front-end code should be checking 'should I really be superseded'... that should be done by the publisher... but I'm probably missing something. [08:17] noodles775: The problem is that the binaries are superseded, not the source (that's called cruft, in the Debian world) [08:18] hmm... [08:18] * noodles775 tries to wrap his head around the source *not* being superseded, but the binaries generated from that source being superseded... [08:19] wgrant: ok, I think I've got it... thanks for the help! [08:20] noodles775: While you're here - is OOPS-1287EC164 likely to have been caused by bigjools' recent addition addition of package_signer to the webservice export of ISPPH? [08:20] https://lp-oops.canonical.com/oops.py/?oopsid=1287EC164 [08:20] * noodles775 looks [08:20] morning folks : do someone knows when LP will be released to be donwloadable? [08:21] That SPPH doesn't OOPS any moe. [08:21] Probably because it's published. [08:21] A different unpublished one OOPSes now. [08:21] MaWaLe: Late July or early August is the latest word. [08:21] MaWaLe: see the link in the subject [08:22] thx wgrant [08:22] noodles775: i'm asking just to have a confirmation [08:22] as a coordinator of the Web&Tech team of our LoCo, we are planning to hold a classroom on it [08:24] MaWaLe: Cool! But that link is *the* authority on the subject... you might be able to chat with kfogel (who edits it) when he's around... [08:26] wgrant: hmmm... so the SPR isn't signed... in primary... I'm not sure whether it's bigjools' change or not, but definitely log a bug for it (if you haven't already) [08:27] noodles775: That was my suspicion, but I don't see why the SPR wouldn't be signed. [08:27] Oh. [08:27] A sync. [08:27] Of course. [08:27] wgrant: actually, is it possible that you might be grabbing the SPPH as soon as it's been published... [08:27] before it has been signed? [08:27] No, the SPR should be signed on creation. [08:27] OK, so what did you mean above by sync? [08:27] But some of them aren't, because they're not really uploaded. [08:28] Ah ok. [08:28] sync-source.py (as used by the Ubuntu archive admins) doesn't actually use real Soyuz copying. It generates a new source package, and uploads it unsigned from cocoplum. [08:28] * wgrant files a bug. [08:29] noodles775: Thanks. [08:29] wgrant: Thanks. Also, with the cruft bug above... [08:30] wgrant: I'm assuming that if the second source package generates 10 binaries, and only one of them superseded, that the summary for the SPPH should be FULLYBUILT_SUPERSEDED? [08:30] noodles775: I am running away screaming now. [08:30] heh [08:30] noodles775: I don't know. Nobody has done this sort of thing before. [08:31] wgrant: it seems strange to summarise the SPPH as FULLYBUILT_SUPERSEDED when it might only be one binary... OK, I'll comment on the bug and see what the others think... [08:32] noodles775: Sounds good. [08:34] Bug #397732 [08:34] Launchpad bug 397732 in soyuz "Getting an SPPH through the API crashes if the SPR is unsigned" [Undecided,New] https://launchpad.net/bugs/397732 [08:35] Great, thanks wgrant === adeuring changed the topic of #launchpad to: https://launchpad.net/ | Help contact: adeuring | Join https://launchpad.net/~launchpad-users | Channel logs: http://irclogs.ubuntu.com | Open Sourcing: https://dev.launchpad.net/OpenSourcing [09:15] hello [09:15] can anybody help me in getting the import of .pot files reviewed? [09:18] henninge: ^^^^ Is that something you could help with? [09:19] nfilus: All files will be reviewed eventually. When did you upload them? [09:19] last friday [09:19] ok, a week is a lot [09:20] nfilus: what's the project's name? [09:20] what kind of review is needed? [09:20] centreon [09:20] nfilus: https://help.launchpad.net/Translations/ImportPolicy [09:21] henninge: I know this page [09:21] henninge: the technical criteria are met === micahg1 is now known as micahg [09:21] nfilus: cool [09:22] henninge: a simple ACK would be enough :) [09:24] henninge: I uploaded 2 templates for stable and trunk. the language files will be added one by one, when we understand the process and advantages of rosetta better [09:26] henninge: is this ok? or would it be better to upload everything including the requested directory structure? [09:27] nfilus: yes, it would be much better to upload them all in one go [09:27] nfilus: either as a tarball or from a bzr branch [09:27] nfilus: most of all it would be much easier for you ... [09:28] and for us because we see the whole situation at once [09:28] nfilus: but I can approve the templates now [09:28] the whole sources are outside of launchpad in svn und the director structure is different [09:29] nfilus: what do you mean different? [09:30] trunk/centreon/de_DE/LC_MESSAGES/messages.po [09:31] nfilus: that is missing some directory ... [09:31] don't see that in your svn [09:31] nfilus: I am at http://svn.centreon.com/trunk/centreon/ [09:31] translations have a seperate svn [09:32] http://forge.centreon.com/repositories/browse/translations/trunk [09:32] or ... [09:32] http://svn.modules.centreon.com/centreon-translations/trunk [09:33] I see [09:33] how can we integrate both structures better? [09:33] yes, that will need some scripting or so anyway [09:34] nfilus: I am sorry, Launchpad does not support that format directly [09:36] nfilus: for an automatic approval and import you would have to rename the files to de.po etc... [09:36] henninge: no problem. currently I can do it manually, but would like to know how to map the structures onto each other [09:36] henninge: ok [09:36] nfilus: so, de_DE/LC_MESSAGES/messages.po -> centreon/de.po [09:37] please avoid the locales like de_DE or es_ES or el_GR. [09:37] pt_BR is okay, pt_PT should just be pt [09:37] henninge: I will discuss this with the core devs and must have a look at the needed code changes [09:38] the naming scheme is inconsistent [09:39] nfilus: I could approve your templates now but that might get people starting to translate before you upload the translations thus causing double work. [09:40] nfilus: or you set the permission to "closed" for now. [09:40] * henninge goes to file a bug [09:40] so should I upload the current translations? [09:41] nfilus: you can do that but to have them approved automatically (that is quickly) they need to be renamed as described. [09:42] nfilus: also, I saw that your templates are named differently but I guess they are really the same, right? It is just for a different series. [09:42] noodles775: You seem to have misunderstood the issue in bug #378876. I've replied. [09:42] Launchpad bug 378876 in soyuz "Superseded binaries shown as FULLYBUILT_PENDING" [Medium,In progress] https://launchpad.net/bugs/378876 [09:42] nfilus: also! [09:42] nfilus: We have message sharing in place now! [09:42] Thanks wgrant. [09:43] * wgrant fails. [09:43] henninge: how to setup translations for different series? [09:43] Two step 3s! And a typo in the first step 3. [09:43] nfilus: you did that right [09:43] nfilus: you uploaded the files to different series. [09:44] henninge: ah, ok - I will have a targz ready in 3 minutes to upload everything [09:44] nfilus: I am just saying they don't need to be named differently and in fact shouldn't if you want to take advantage of message sharing [09:45] nfilus: we take the name and translation domain from the file name. [09:46] wgrant: so perhaps I misunderstood when cprov wrote "the later source is cruft".. [09:47] noodles775: I suspect he meant the former. [09:47] wgrant: yes, I guess he did. Thanks! [09:48] noodles775: And there are actually two cases here - the display and handling of the situation needs to differ depending on whether any binaries remain. [09:49] wgrant: do you mean when the earlier source has some binaries that have been superseded, but others that are not? If so, yes, that's the issue I tried to highlight on the bug... [09:49] How do I revert a backedup .bzr dir on launchpad? [09:50] I have a botched bzr upgrade, and need to put the backup.bzr back as .bzr [09:50] noodles775: Right. [09:50] lamalex: Use lftp or lp:hitchhiker. [09:50] * wgrant -> dinner. [09:50] Enjoy :) [09:50] wgrant: it tells me I can't rename something to .bzr [09:52] also can't rename .bzr to /anything/ [09:55] henninge: please have a look at the new uploaded trunk templates [09:57] nfilus: looks very good! [09:57] nfilus: btw you have a broken locale [09:58] nfilus: zn_TW should be zh_TW [09:58] or we don't know that language ... ;) [09:59] oh :) [09:59] how to exchange that? [09:59] upload again? [09:59] nfilus: yes, you can always upload again, entries with the same file name just get replaced. [09:59] nfilus: also [10:00] nfilus: please change the following locales while you're at it: [10:00] pt_PT -> pt, es_ES -> es [10:01] nfilus: we don't you those and thus they are likely to be missed by translators. [10:01] nfilus: I'll set the others to "Deleted" [10:01] henninge: ok [10:04] nfilus: ok, I approved the trunk templates, the translation files will get approved and imported automatically now [10:04] give it 30-60 minutes, the overall queue is quite big. [10:05] woow, thanks [10:05] should I upload now only the renamed ones or the whole tar.gz again? [10:06] nfilus: use the tar.gz to keep the path [10:06] nfilus: single file uploads lose the path information (HTTP limitation) [10:06] henninge: but all files included or the changed ones? [10:06] hello [10:06] nfilus: yes, you can always upload again, entries with the same file name just get replaced. [10:06] nfilus: all files is fine. [10:08] i have an issue with firebird code import in bzr https://code.edge.launchpad.net/~vcs-imports/firebird/trunk [10:08] henninge: thank you very much! [10:09] nfilus: np, poke me when you need the template for the other series approved. [10:13] lamalex: Allowed names are .bzr, backup.bzr, and .bzr.backup. I'd just remove .bzr, and rename backup.bzr to .bzr. [10:13] wgrant: yah, i got it [10:13] thanks [10:15] bigjools: What time does edge update these days? I'll turn off my scripts until then, lest my inbox fill with errors. [10:17] wgrant: I need to check [10:17] It had been 4am UTC, but that doesn't seem to have held lately... [10:18] I might push out a cherry pick to edge, it will be breaking james_w as well [10:18] yes, that's why I need to check :) [10:18] That would be good, thanks. [10:18] it won't be for ~6 hours minimum if that happens though === sabdfl1 is now known as sabdfl [10:39] Um. Who stole all of the widgets from +filebug? [10:39] On the second step, after you choose to report a new bug, only the summary, description and checkbox widgets appear. [10:40] The rest have labels and descriptions, but the actual widgets are missing from the HTML. [10:41] wgrant: you mean under "extra options"? [10:41] because that WFM [10:42] henninge: Yes. Hmmm. [10:42] * wgrant tries some non-Launchpad projects. [10:44] Oh, maybe it is Firebug after all. I just noticed the widgets are in the HTML, but I missed them because it's all wrapped in tables. [10:47] hi [10:48] your system in translation, everytime with anew version from software, do XXXX problem for us [10:49] we have translated wordpress 2.7 completlly and now is 2.8, you have imported the 2,7 in 2.8, but we must tranlate every line again. [10:49] what is that for Bugy system you have?!! [10:50] https://translations.launchpad.net/wordpress/2.8/+pots/wordpress/ckb/+translate [10:51] we must edit every page and select the correct line [10:51] can any one tell me, if you import the last translated version, why make you this mistake ever? [10:54] henninge: something went wrong, german is translated in 100% (but some are fuzzy), but launchpad shows 0% [10:54] henninge: same goes for french [10:54] henninge: what could be the reason? [11:00] Ooh shiny. Inline bugtask editing is arriving? [11:01] nfilus: German isn't imported yet. [11:02] nfilus: French looks fine now [11:02] henninge: ok, I though every appearing lang is already imported [11:02] nfilus: wait until all files are "Imported". [11:02] nfilus: do you have "German" as a preferred language for your Launchpad account? [11:03] henninge: no [11:03] * henninge looks [11:03] nfilus: ah, now [11:03] no [11:03] nfilus: the reason is: the language is created when the file is approved. [11:03] henninge: I'm doing most things in english [11:03] nfilus: just wait for the imports to complete. [11:03] henninge: that wasn't clear to me [11:04] nfilus: Aber du hast auch Deutsch in deinem Konto stehen ... ;-) [11:04] nfilus: You always see your preferred languages in a template. [11:06] henninge: you mean the menus "Templates" or "overview" or messages.pot template? [11:07] nfilus: I meant this page: https://translations.edge.launchpad.net/centreon/trunk [11:08] henninge: I see 9 languages, which several of them are neiter prefered nor spoken by me :) [11:08] henninge: maybe because I'm project admin? [11:08] nfilus: No, I meant "your preferred languages in addition to those for which there are translations." [11:09] nfilus: for example, I see ten languages. [11:09] nfilus: I have Esperanto as a preferred language and so I see a line for it. Untranslated, of course. [11:10] henninge: ok :) === so is now known as Guest73796 === kiko-fud is now known as kiko [13:39] IArchive.newComponentUploader seems to not work on PPAs, even though it's meant to now... when I specify a component_name of 'main', it gives me a 400 stating that the component name must be 'main'. [13:58] wgrant: that's err, less than optimal [13:58] I am going for food now, I'll play with it when I get back [14:00] bigjools: Thanks. And why are PPA package-specific uploaders not possible? === abentley1 is now known as abentley [15:08] Hi... just got the following... (Error ID:OOPS-1287EB598) when attempting an edit on https://edge.launchpad.net/ubuntu/jaunty/+source/me-tv/+edit-packaging [15:08] https://lp-oops.canonical.com/oops.py/?oopsid=1287EB598 [15:11] and on a second attempt... (Error ID:OOPS-1287EC593) [15:11] https://lp-oops.canonical.com/oops.py/?oopsid=1287EC593 [15:12] bigjools: hey, was the problem you were talking about earlier an issue with OOPS from getPublishedSources? [15:12] james_w: yes [15:13] sorry for the cockup [15:13] it will right itself next time edge is updated [15:13] AttributeError? [15:15] james_w: see bug 397732 [15:15] Launchpad bug 397732 in soyuz "Getting an SPPH through the API crashes if the SPR is unsigned" [High,Fix committed] https://launchpad.net/bugs/397732 [15:15] james_w: I don't know how it manifested itself externally, but it oopsed when serialising sources with no signer [15:17] thanks for the quick fix [15:17] I'll assume it's the same [15:17] e.content just gives 'AttributeError' and nothing else, which is a bit odd [15:17] but it is the same error that the Oops shows [15:25] hey, I will rename my account, I can only change the Displayname, not the "Name": This user has a PPA and may not be renamed., I dont need this ppa, its empty. How Can i delete this? [15:25] cprov, ^^ holzmodem [15:25] holzmodem: file a question on soyuz please, and we'll deal with it [15:25] VK7HSE, so that problem you're getting is because there's already a packaging entry with the data you're inputting. it's a bug, though [15:26] sinzui, does a bug already exist on https://lp-oops.canonical.com/oops.py/?oopsid=1287EB598 [15:26] kiko: thanks, I was attempting to change the development to stable... [15:27] kiko: no, infact we have a opposite bug requesting that they no be unique [15:27] holzmodem: did you upload any packages to your PPA ? [15:27] yes, but i deleted all (or copied to a team ppa) [15:28] sinzui, I guess you can just lump it in then :) [15:29] kiko: I see there is a recent bug: bug 352374 [15:29] Launchpad bug 352374 in launchpad-registry "IntegrityError: duplicate key value violates unique constraint "packaging_uniqueness"" [Low,Triaged] https://launchpad.net/bugs/352374 [15:29] kiko: and bug 344376 [15:29] Launchpad bug 344376 in launchpad-registry "in +addpackage in a project, it oopses if the "Source Package Name" is left blank" [Low,Triaged] https://launchpad.net/bugs/344376 [15:29] holzmodem: cool, but unfortunately it doesn't suffice, we can't purge the history in your PPA. [15:29] kiko: both of these bugs can be fixed with a name field or a validator [15:30] holzmodem: for now file a question and we will deal with the required renaming involved. [15:30] cprov, the ppa is not the problem i want only change the name [15:31] holzmodem: right, but changing the account name implies in changes to the PPA repository path, and that has to be done manually right now. [15:32] holzmodem: no worries, file a question on soyuz and we will deal with it asap. [15:32] ok, filing question, thx [15:55] the dependencies of launchpadlib have ballooned somewhat [15:57] cprov, #76597 ^^ [15:58] holzmodem: thank, I'm on it, will move the PPA repo path and rename your account. [16:00] holzmodem: 'raa' is taken -> https://edge.launchpad.net/~raa [16:02] :-( maybe; "ra" or "raaa" ? [16:03] it really requires all that zope stuff now? [16:04] holzmodem: you tell me, pick one of your preference. [16:05] cprov, if ok "ra" [16:05] else "raaa" [16:06] ah, it's for testing apparently === Nicke_ is now known as Nicke [16:06] holzmodem: 'ra' is also taken, going to https://edge.launchpad.net/~raaa. Please confirm that it's what you want in the question. [16:11] what i have to do? aking question for "raaa"? (sry english is not my native language) [16:15] holzmodem: nothing special, just post a new comment to the existing question. [16:16] done [16:16] holzmodem: thank you. === salgado is now known as salgado-lunch [16:56] question about branch merge requesting: [16:57] when you request on the web interface, it automatically requests review [16:57] when you bzr send or resubmit a merge request, it doesn't [16:57] is there any reason for this difference? === dpm is now known as dpm-afk === salgado-lunch is now known as salgado [17:23] cprov, how long does the change approximately took? [17:32] tumbleweed: where are you `bzr send`ing it to? [17:33] cocooncrash: that'd be you [17:33] LarstiQ: I tend to use the web interface, cocooncrash tends to bzr send [17:40] holzmodem: you need to wait for an admin to pick up your question, it should be within a day === adeuring changed the topic of #launchpad to: https://launchpad.net/ | Help contact: - | Join https://launchpad.net/~launchpad-users | Channel logs: http://irclogs.ubuntu.com | Open Sourcing: https://dev.launchpad.net/OpenSourcing === deryck_ is now known as deryck[lunch] === jon is now known as Guest95554 [18:42] LarstiQ: merge@code.launchpad.net === yofel_ is now known as yofel [18:43] cocooncrash: and what is the submit branch? [18:43] LarstiQ: lp:ibid [18:43] cocooncrash: because afaik, for the bzr project, it does work fine [18:43] LarstiQ: The merge request is created fine -- it just doesn't set the reviewer. [18:44] cocooncrash: yeah, I meant it setting the reviewer to bzr-core, sorry [18:44] Oh, right. [18:44] * LarstiQ checks bzr project settings [18:46] cocooncrash: looks similar to me [18:46] * LarstiQ leaves it up to an lp dev [18:46] LarstiQ: Thanks [18:48] ping gmb [18:50] cocooncrash, you'll need to set the default review team of the target branch [18:50] cocooncrash, or, you can type the following in your email [18:51] reviewer rockstar [18:51] ...if you wanted me to review it. === deryck[lunch] is now known as deryck [19:21] hi, someone LP admin can change an project name (id, not title)? [19:24] DnaX: File a question here: https://answers.edge.launchpad.net/launchpad/+addquestion about it. [19:27] rockstar, LarstiQ: Apologies, bzr send isn't a problem [19:28] But resubmiting merge requests doesn't assign the default reviewer. [19:28] (And you also can't resubmit with bzr send, but I've filed a bug for that.) [19:30] cocooncrash: cool [19:30] you also can't resubmit with e-amil [19:31] tumbleweed: bzr send is via email. [19:31] cocooncrash: hmm, I suppose yes [19:32] * tumbleweed leave outta here for now [19:44] thanks jpds === hsitter is now known as apachelogger [23:06] guud evening [23:06] I'm experiencing timeouts on Edge [23:06] sending emails to contacts from their profile page [23:11] BUGabundo, could you file a bug with the OOPS ids? [23:12] what's the difference bewteen SSH and OpenPGP keys? [23:12] Aren't they both just RSA key pairs? [23:15] beuno: I just get a blank page :( [23:22] RenatoSilva: an OpenPGP key contains more than just a single keypair [23:23] signed user ids, subkeys, potentially other extended information [23:26] maxb: wouldn't it be easier to just have two key pairs and everytime you want to send signed content you just sign it? [23:26] huh? [23:26] maxb: sorry [23:26] maxb: I don't get the sense [23:27] What would be easier? What would it be easier than? I don't understand the reasoning behind your previous question. [23:28] maxb: let's go abck to the question [23:28] maxb: I mean, huh for you heheh [23:29] maxb: why more than a key pair? for what? [23:30] maxb: I can't imagine what else than a key pair would I need to send signed content out there. [23:30] For starters, associating the keypair with an identity, and cryptographically signing that association [23:31] And not just a self signature - other people can sign the association to assert that the user id is genuine [23:31] This is the basis of the "web of trust" [23:31] maxb: if you have signed content in your openPGP key, then it's a mix of priv key + pub key + signed content, right? [23:32] yes [23:32] And then you can have subkeys - secondary keypairs with delegated authority [23:33] maxb: I can't figure out why would I need this default signed content [23:33] maxb: do you have an example? [23:34] maxb: and I'd appreciate too if you point me to a tutorial you it's good [23:34] My key asserts that I am Max Bowsher, and that I own a variety of email addresses, and moreover carries the certification of various people that I have met face-to-face that they believe that I, the owner of the key, are that person [23:35] maxb: humm, ok then would that be kind of a "default signed message for basic questions"? === abentley1 is now known as abentley [23:36] um. that's kind of a weird way of describing it, and I don't know how to answer that [23:37] maxb: such as dose this email belong to him, or does he trust in this guy's public key... [23:37] s/dose/does [23:38] Essentially yes, though it's less of a "message" and more a core part of the way the keys are defined and used [23:39] maxb: I've found explanations in lp and ubuntu wiki, but they don't introduce the idea, and they don't point out a clever way to keep your priv key secure, whcih I think it's a very important step. [23:40] You're right, it's a vitally important step, since it potentially may be important to you for your entire lifetime [23:41] maxb: how to keep it secure? the question is for any pub/priv key pair I think [23:41] Exactly, it's in no way specific to PGP keys [23:42] And really it comes down to being sensible about where you put it [23:43] maxb: and how about creating many OpenPGP keys? For example, I need one to become an Ubuntero, and set up PPA etc. I want to create an OpenPGP key only for that use, in Launchpad. How about it? [23:44] Certainly doable [23:45] You might choose to indicate in the user id comment if the key is intended for a restricted purpose [23:45] maxb: I wonder if there are any specific steps, because anyone with physical access to the machine containing your private key would be able to access it [23:45] only if you keep it unencrypted, which would be foolish [23:46] maxb: encrypt with a password-based algorith? [23:46] m [23:46] However, you are right that you shouldn't keep high value keys on a machine to which others have physical access, even if they *are* encrypted [23:47] It is normal to keep your pgp key protected with a passphrase - preferably a fairly long one [23:47] mine is > 30 characters [23:48] I wonder if crypted .zips woud be enougth [23:48] erm, what? [23:49] maxb: you can put the key in a zip file, protected by pasword [23:49] maxb: when you want to extract the file, you must type the right password. I don't know if the algorith is trustable tough. [23:50] No, you don't do that - the program you use to sign/encrypt/verify stores it encrypted and decrypts on the fly when using it, never storing it on disk at all [23:52] maxb: I wonder if such encryption of the key-manager is enough too. PuTTY for example. [23:52] ? [23:53] maxb: are pass_word_-encrypted files enougth? Or do you really need a pass_phrase_ greater than 30 chars? [23:54] I like to be comfortable that I'm well beyond the possibility of a brute force search *and* sufficiently complex that someone couldn't feasibly watch me type it either [23:55] maxb: PuTTY is a Windows SSH client, it can generate a key pair. You can protect the private key with a pasword, but I wonder if that is really secure. Are password/phrase-based encryption really secure, enougth, as secure as or more than assimetric algorithm [23:56] s/Are/Is [23:57] s/enought/enough [23:57] s/enougth/enough [23:57] An asymmetric algorithm is irrelevant here. The aim is to secure data using a memorized key. Asymmetry serves no purpose. [23:59] maxb: I was jsut wondering how they compare, as it is standed that symetric algorithms are "better"