English README file for Gpg4win =============================== This is Gpg4win, version 3.0.1 (2017-11-21). Content: 1. Important notes 2. Changes 3. Additional notes 4. Version history 5. Version numbers of included software 6. Legal notices 1. Important notes ================== At release date, the English version of the ebook `Gpg4win Compendium` has not been updated for Gpg4win 3, but still is useful as documentation of some general background how to use the product. You will find it on your system (depending on the version of Windows) or online at https://www.gpg4win.org/doc/en/gpg4win-compendium.html Note that the German version 4.0.0 is up-to-date and only available as pdf. Please read the section `3. Additional notes` of this README before you start working with Gpg4win. The Compendium has more hints for manual or automated installation. System requirements ------------------- Gpg4win runs on Windows versions 7 or newer (up to Windows 10). Both 32 and 64bit systems are supported. If you have at least Windows XP, some parts of Gpg4win can be used, but are not officially supported. The Outlook plugin GpgOL is compatible with Microsoft Outlook 2010, 2013 and 2016 (both 32 and 64bit) and supports transporting emails via SMTP/IMAP and MS Exchange Server (version 2010 or newer). For elder Outlook versions 2003 and 2007 less functionality is offered. (See https://www.gpg4win.org/system-requirements.html for updates.) 2. Changes ========== Included Gpg4win components in version 3.0.1 are: GnuPG: 2.2.3 Kleopatra: 3.0.1 GPA: 0.9.9 GpgOL: 2.0.3 GpgEX: 1.0.5 Kompendium DE: 4.0.0 Compendium EN: 3.0.0 New in Gpg4win version 3.0.1 (2017-11-21) ----------------------------------------- - GpgOL: A cause for seemingly random crashes in GpgOL has been fixed. - GpgOL: A crash when pasting recipients has been fixed. - GpgOL: Various problems regarding S/MIME mails have been fixed. - GpgOL: A user interface error for Outlook 2010 has been fixed. - GpgOL: Kleopatra is again started in the background to speed up crypto operations. - Kleopatra: Various problems regarding S/MIME file operations have been fixed. - Kleopatra: Various problems regarding folder operations and archives have been fixed. - GnuPG: Has been updated to version 2.2.3. - Some small bugfixes and improvements. - The mkportable process can be used again to create a portable Gpg4win variant. 3. Additional notes =================== - GpgOL * It is not possible to modify mails (e.g. moving / flagging the mail) while they are shown decrypted. To workaround this: unselect the crypto mail and then make changes through the right click context menu or move it with drag and drop. * Crypto mails forwarded as attachment are not properly handled. * The certificate selection dialog sometimes opens in the background and need an overhaul. * Localization is only there for German and Portuguese. - General * For 3.1 we plan to offer a quick switch to a more automatic mode that will set the GnuPG options: auto-key-locate wkd auto-key-retrieve trust-model tofu+pgp As this is not properly handled everywhere (especially Kleopatra's file verification dialog) this is not yet default or easily accessible. You can add it manually to your gpg.conf. The trust-model is fully supported by GpgOL. - Kleopatra * Netkey cards are not yet supported by the new Manage Smartcard view. - GpgOL for Outlook 2003 and 2007 (deprecated): Outlook 2003 and 2007 support is deprecated and may be removed in a future version. * For Outlook 2003/2007 only: You definitely should create copies of your old encrypted/signed emails before installing GpgOL, e.g. in the form of PST files. * For Outlook 2003/2007 only: Sending signed or encrypted messages via an Exchange based account does not work. (Please note, using SMTP with GpgOL and Exchange seems to be work. Or use GpgOL with Outlook 2010 or newer.) * For Outlook 2003/2007 only: Encrypted E-Mails occurring un-encrypted on the email server: It can happen that parts of encrypted emails are copied to your email server (IMAP or MAPI) in un-encrypted/decrypted form when creating or viewing them. Affected is the content of the email view window, thus usually the so-called email body. Attachments are not affected. Switching off the Outlook preview will lower the probability of this to happen, but not eliminate the issue. (If this is an issue for you: use GpgOL with Outlook 2010 or newer.) 4. Version history ================== Listed below are the changes as recorded in the source distribution's NEWS file. An up-to-date list of changes is also available at: https://www.gpg4win.org/change-history.html Noteworthy changes in Version 3.0.1 (2017-11-21) ------------------------------------------------ * GpgOL: A cause for seemingly random crashes in Outlook has been fixed. 5. Version numbers of included software ======================================= =========== SHA-1 checksum ============= == package == 3c31c9d6b19af840e2bd8ccbfef4072a6548dc4e atk-1.32.0.zip d0b8c53e01e4541d3d3befc82e41fb5b84949030 atk-dev-1.32.0.zip 7f56ab507d3258610391b47fef6b11635861175a boost-1.60.0.tar.bz2 dd5db7563b5d0e1a112da65f97f57842233d87ad breeze-icons-5.30.0.tar.xz 6e38be3377340a21a1f13ff84b5e6adce97cd1d4 bzip2-1.0.6-g10.tar.gz d44cd66a9f4d7d29a8f2c28d1c1c5f9b0525ba44 cairo-1.10.2.zip 45cae1fac45a6c6f33498c37c0cdc47722614d92 cairo-dev-1.10.2.zip f47790b9e324cd8613acc9a17fd56bf2c14745fc expat-2.0.1.zip 2e9189c6c6d1dac847a47c537c7a5e9dffd91992 expat-dev-2.0.1.zip 7c38484c1dd0e5afcaca717a6e3006f9dd4dd35a extra-cmake-modules-5.30.0.tar.xz 37a3117ea6cc50c8a88fba9b6018f35a04fa71ce fontconfig-2.8.0.zip 0b772aaeb0a7a0d5de21afd901d6cf00753efa51 fontconfig-dev-2.8.0.zip c20ab9ff053fe59f73612fd392f6e6dc01af614a freetype-2.4.2.zip 00e877d7ec7c416e2b48a392324a5502019a20bf freetype-dev-2.4.2.zip 6277b4e5b5e334b3669f15ae0376e184be9e8cd8 gdk-pixbuf-2.30.8.tar.xz dc551d4783edf691c1f0095ca927d3128b5093e8 gettext-0.19.8.tar.xz 31de819181dd8abc25d89484ff6a4e60f032e8fc glib-2.41.5.tar.xz 9914e93d5ac50b4e542b4320e1e130dc1552e24b gnupg-w32-2.2.3-20171120-bin.exe c629348725c1bf5dafd57f8a70187dc89815ce60 gpa-0.9.10.tar.bz2 deae401e58c1ee8751a3e2e4bfe944e0ef9f6bf0 gpgex-1.0.5.tar.bz2 13700e58627ca5be70b215f186d1c6bf21c090ce gpgme-1.10.0-beta80.tar.bz2 620d12c57785f4d0eee8b849ccd3d4a55a7e4dc9 gpgol-2.0.3.tar.bz2 f3c2f1a3728ed51d08054f6b4c7384fbf99477c0 gtk+-2.24.28.tar.xz 48d1511593ed1a0755b19796205c5722c771f72e karchive-5.30.0.tar.xz 16956555be32f97166f090267deab6780af89dd8 kcodecs-5.30.0.tar.xz 91d57b6bf5e6776af9383654044a7ab9155a5b11 kcompletion-5.30.0.tar.xz d12e60439778922b28b2e0903aa863bd99805909 kconfig-5.30.0.tar.xz 2cefe9a4c27204201f9f2d196d3f2189ca4d806d kconfigwidgets-5.30.0.tar.xz fe4a4531d2ac063be7bb3731f6a00530d74927eb kcoreaddons-5.30.0.tar.xz 3050f26f1fd9f9d694aa871b418c1635133322d0 kde-l10n-201711161035-bin.tar.xz bc4afddb2237dfd01b808005ac9858f0754af9a1 kguiaddons-5.30.0.tar.xz 698d839db64837aa34df31a8a62bb0f197aa0d1a ki18n-5.30.0.tar.xz ee86c6d538ed2938f16a147963d79cd8afc87ff8 kiconthemes-5.30.0.tar.xz cf815eb2582fe728fd0e1c3d82846538598d75c2 kitemmodels-5.30.0.tar.xz 6dbf54170391a7f9fcc580b9c5ab4caab5855614 kitemviews-5.30.0.tar.xz fa432086f204dbe9610e6f2308412628caf3f04a kleopatra-201711161242.tar.gz 1eb5e1d248c30cb96deda1ef26e27336bd5c4b16 kmime-16.12.3.tar.xz c7490f3cb112a5b7a823e2e87817791e8e187ef6 kwidgetsaddons-5.30.0.tar.xz 22a40a3cd7c3fdbe29592c1e66c034bcf3721380 kwindowsystem-5.30.0.tar.xz 0a886d69c095be3d99c61c6c5acee61b9c137607 kxmlgui-5.30.0.tar.xz 8c00238e11c6d782c80f96868d91e039105e3a8c libassuan-2.4.4.tar.bz2 f5230890dc0be42fb5c58fbf793da253155de106 libffi-3.0.13.tar.gz a428758999ff573e62d06892e3d2c0b0f335787c libgpg-error-1.27.tar.bz2 7af3149fa7c4bd1d3a36a30f02e95a0ebfd6b18f libiconv-1.15.tar.gz f24fd66bd48e9dedc0e4225516b602cd5d434c25 libkleo-201707270914.tar.gz 382f820db7adac5e31605c5fa93ba98ff0e94049 libpng-1.4.22.tar.xz 3959319bd04fbce513458857f334ada279b8cdd4 pango-1.29.4.zip 49ae12458f2e29c27ed9d1390d95db18fd4a49ac pango-dev-1.29.4.zip 16af56d0e7bdf081d60c59ea4d72e7df6d9cec21 paperkey-1.3.tar.gz 85d9ac81ebad3fb082514c505c90c39a0456f1f6 pinentry-1.0.0.tar.bz2 d063e705812e1ee7feb8f35d51b3cad04ca13b0d pkgconfig-0.23.zip eacdd022615734ccdba4e7a92f1f5f3366c0c415 qtbase-5.8.0.tar.xz 604994a2888da00940b61d73e25b9ffe8335365c qtsvg-5.8.0.tar.xz 0dda2333a9cd35f21cb4d5ebc18488b9dc72527d qttools-5.8.0.tar.xz b2f216cb0507370592a9d833a481dd82468ddb99 qttranslations-5.8.0.tar.xz 991817f4a0f1cc5f3d244d591d5684b384367d40 qtwinextras-5.8.0.tar.xz d648b98ce215f81e901f3f982470d37c704433a6 w32pth-2.0.5.tar.bz2 e6d119755acdf9104d7ba236b1242696940ed6dd zlib-1.2.11.tar.gz 6. Legal notices pertaining to the individual packets ===================================================== Gpg4win consist of several independently developed packages, available under different licensing conditions. Most of these packages however are available under or compatible to the GNU General Public License (GNU GPL). Common to all is that they are Free Software, which means they can be used without restrictions, may be studied, modified and that modifications may be distributed. If the source files (i.e. gpg4win-src-x.y.z.exe) are distributed along with the binaries and the use of the GNU GPL has been pointed out, distribution is possible under many circumstances. What follows is a list of copyright statements. Here is a list with collected copyright notices. For details see the description of each individual package. This is not meant as an exhaustive list of copyright notices. Notices from several packages are even not listed. The most restrictive requirements are those of the GNU General Public License version 3 (GPLv3+); thus complying to those terms and conditions should be sufficient. If in doubt check the individual packages. Gpg4win (the installer) is Copyright (C) 2005, 2006, 2007, 2008, 2009, 2010, 2013 g10 Code GmbH Gpg4win is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. Gpg4win is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA GnuPG is Copyright 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013 Free Software Foundation, Inc. GnuPG is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. GnuPG is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, see . See the files AUTHORS and THANKS for credits, further legal information and bug reporting addresses pertaining to GnuPG. NSIS is Copyright 1999-2009 Nullsoft, Jeff Doozan and Contributors Copyright 2002-2008 Amir Szekely Copyright 2003 Ramon Copyright 1995-1998 Jean-loup Gailly and Mark Adler Copyright 1999-2006 Igor Pavlov Copyright 1996-2000 Julian R Seward This license applies to everything in the NSIS package, except where otherwise noted. This software is provided 'as-is', without any express or implied warranty. In no event will the authors be held liable for any damages arising from the use of this software. Permission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you use this software in a product, an acknowledgment in the product documentation would be appreciated but is not required. 2. Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 3. This notice may not be removed or altered from any source distribution. The user interface used with the installer is Copyright (C) 2002-2005 Joost Verburg [It is distributed along with NSIS and the same conditions as stated above apply] GLIB is Copyright (C) 1995-1997 Peter Mattis, Spencer Kimball and Josh MacDonald Copyright (C) 1995-2011 Red Hat, Inc. Copyright (C) 2008-2010 Novell, Inc. Copyright (C) 2008-2010 Codethink Limited. Copyright (C) 2008-2010 Collabora, Ltd. This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. See the AUTHORS file for a list of people on the GLib Team. See the ChangeLog files for a list of changes. These files are distributed with GLib at ftp://ftp.gtk.org/pub/gtk/. GPA is Copyright (C) 2000-2002 G-N-U GmbH (http://www.g-n-u.de) Copyright (C) 2002-2003 Miguel Coca. Copyright (C) 2005-2013 g10 Code GmbH GPA uses fragments from the following programs and libraries: JNLIB, Copyright (C) 1998-2000 Free Software Foundation, Inc. GPGME, Copyright (C) 2000-2001 Werner Koch WinPT, Copyright (C) 2000-2002 Timo Schulz (For details, see the file `AUTHORS'.) GPA is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. GPA is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, see . GPGEX is Copyright (C) 2007 g10 Code GmbH GpgEX is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. GpgEX is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. GPGME is Copyright (C) 2000 Werner Koch Copyright (C) 2001--2013 g10 Code GmbH GPGME is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. GPGME is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this program; if not, see . See the files AUTHORS and THANKS for credits, further legal information and bug reporting addresses pertaining to GPGME. GpgOL is Copyright (C) 2004, 2005, 2007, 2008, 2009, 2010, 2011 g10 Code GmbH GpgOL is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. GpgOL is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this program; if not, see . See the files AUTHORS and THANKS for credits, further legal information and bug reporting addresses pertaining to GpgOL. GTK+ is Copyright (C) 1995-1997 Peter Mattis, Spencer Kimball and Josh MacDonald This library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this library; if not, write to the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. Modified by the GTK+ Team and others 1997-2000. See the AUTHORS file for a list of people on the GTK+ Team. See the ChangeLog files for a list of changes. These files are distributed with GTK+ at ftp://ftp.gtk.org/pub/gtk/. LIBGCRYPT is Copyright 2000, 2002, 2003, 2004, 2007, 2008, 2009, 2010, 2011, 2012 Free Software Foundation, Inc. Copyright 2012, 2013 g10 Code GmbH Libgcrypt is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser general Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. Libgcrypt is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this program; if not, see . LIBGPG-ERROR is Copyright 2003, 2004, 2010, 2013 g10 Code GmbH libgpg-error is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 2.1 of the License, or (at your option) any later version. libgpg-error is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with this program; if not, see . Pthreads-win32 is Copyright(C) 1998 John E. Bossom Copyright(C) 1999,2005 Pthreads-win32 contributors Most of this is work available under the GNU Lesser General Public License as published by the Free Software Foundation version 2.1 of the License. The detailed terms are given in the file COPYING in the source distribution; that very file may not be modified and thus it is not possible to include it here. BZIP2 is This program, "bzip2", the associated library "libbzip2", and all documentation, are copyright (C) 1996-2006 Julian R Seward. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. 2. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you use this software in a product, an acknowledgment in the product documentation would be appreciated but is not required. 3. Altered source versions must be plainly marked as such, and must not be misrepresented as being the original software. 4. The name of the author may not be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Julian Seward, Cambridge, UK. jseward@bzip.org bzip2/libbzip2 version 1.0.4 of 20 December 2006 ADNS adns is Copyright 2008 g10 Code GmbH, Copyright 1997-2000,2003,2006 Ian Jackson, Copyright 1999-2000,2003,2006 Tony Finch, and Copyright (C) 1991 Massachusetts Institute of Technology. adns is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program and documentation is distributed in the hope that it will be useful, but without any warranty; without even the implied warranty of merchantability or fitness for a particular purpose. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with adns, or one should be available above; if not, write to the Free Software Foundation, 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA, or email adns-maint@chiark.greenend.org.uk. Paperkey Copyright (C) 2007, 2008, 2009 David Shaw This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. The included man page is Copyright (C) 2007 Peter Palfrader Examples have been taken from David Shaw's README. The license is the same as for Paperkey. Scute Copyright 2006, 2008 g10 Code GmbH Scute is licensed under the GNU General Pubic License, either version 2, or (at your option) any later version with this special exception: In addition, as a special exception, g10 Code GmbH gives permission to link this library: with the Mozilla Foundation's code for Mozilla (or with modified versions of it that use the same license as the "Mozilla" code), and distribute the linked executables. You must obey the GNU General Public License in all respects for all of the code used other than "Mozilla". If you modify the software, you may extend this exception to your version of the software, but you are not obligated to do so. If you do not wish to do so, delete this exception statement from your version and from all source files. [Compiled by wk 2006-02-15, last updated 2015-11-25] ***end of file ***