GnuPG Portable 1.4.10 Dev Test 14

This seem a little discotinued and I would like to know if it can be considered of a replacement to the actual squeme in wich GPG only works in TBP.
I think is the right move and hope something alike with other packages like python and some other libraries and dlls wich are replicated through the PortableApps directories.(mmm I also saw QT but I'm not sure if it is in the non-official-Beta-Test-only apps and remember the GTK Hell).

Something like for this App to work you would have to download also the XXXX-CommonPortable Library

Now that GPA is working, I've been experimenting with compression of the executables.

It occurs to me that after compressing GPG, it is not a "release" version any more. In particular, the only signatures or hashes available apply to the package, not to the GPG.exe executable, so the only way a person could be sure they have a legitimate version is to download the package, test its sig (or SHA1 hash) and use that version -- and they would probably not get the benefit of UPX compression.

We should be modeling good security behavior for people, by pointing out to them that the GPG.exe is different from the one found on the official site, and offering an explanation and a way to check it themselves.

If GPG.exe will work with an authenticode signature, I propose that JTH carefully download, verify, and compress his own copy of GPG.exe, and then code-sign it himself, then create a detached sig file with GnuPG. That puts more responsibility on him, but it is the only way I can think of to get a copy of GPG.exe that mere mortals have a chance of tracing back to a trusted source. And yes, I'm thinking that they may want to do the test more regularly than just at the time of the install, so having an authenticode signature would provide an easy way to make sure the file has not been compromised after using a public computer.

I certainly don't want to give people the impression that any old file named "gpg.exe" that they find on a machine or on the Internet can be trusted, and I do like the idea of showing them how they can and should test and evaluate software, especially software they download, even if it is from a trusted source like PortableApps. That is particularly so with software like GPG.exe that is used to verify other software as well as documents and e-mail.

Please fold this in to your Dev Test 1 thread and delete this. This is standard practice to avoid clutter.

Also, please make it clear that Thunderbird Portable does not support your unofficial GnuPG Portable package.

I really hope that this becomes final and JTH will pick up your work. GnuPG as common files for TBP/Enigmail + WinPT will be awesome!

I think I have found a bug. In around line 170 it reads

${registry::Write} "HKEY_CURRENT_USER\Software\GnuPGPortable" "ClientCount" $2 "REG_DWORD" $3
StrCmp $2 "0" TheEnd
StrCpy $3 "Error: Increment Client Count."

Shouldn't the middle line be "StrCmp $3 ..." -- $3 (the one all the way at the end of the previous line) is the variable containing the result code (0 for good, -1 for error).

@mstinaff: Please update this app at the overview page with the test releases (https://portableapps.com/development/test).

The one I downloaded had an MD5 hash of: 31a1265e47e8737a1f5a1b8247634c88

This is the one I downloaded:

http://downloads.sourceforge.net/portableapps/GPG_for_Thunderbird_Portab...
GPG for Thunderbird Portable (2008-07-25 20:19)
GPG_for_Thunderbird_Portable_1.4.9.paf.exe 1850552

Just want to let you know that this works for me under WinXP & Vista. Thanks!

I just thought I'd let you know that I installed this last night. It's been needed for some time. It works great!!! Thank you very much!!!

Hi,
It seems there is a bug.
I have a path for portable TB like: D:\name\....
According to my understanding, when portable TB starts, portable GPG sets the correct path in prefs.js for gpg.exe. But the path is not correct: it is something like D:\name\\.... There is only one \ after the D:. In the case of \n, it is interpreted as a CR by TB and gpg is not found. If I have another letter instead of n, it works well.

I have solved the problem by modifying ThunderbirdPortable.nsi line 384 by replacing:
FileWrite $0 `user_pref("extensions.enigmail.agentPath", "$GPGPATHDIRECTORY\gpg.exe");`
with
${StrReplace} '$1' '\' '\\' '$GPGPATHDIRECTORY\gpg.exe'
FileWrite $0 `user_pref("extensions.enigmail.agentPath", '$1') ;`
with StrReplace from http://nsis.sourceforge.net/StrRep

Is GnuPG still being developed?

EDIT: I just installed the current Dev Test, which created a start menu folder. Pretty sure that's not supposed to happen.

Is this still being worked on?

Any chance someone is picking this back up or it is complete somewhere on the site?