[tor-bugs] #2846 [Torify]: Patch GPG to support SOCKS proxies

[Tor Bug Tracker & Wiki]

#2846: Patch GPG to support SOCKS proxies
------------------------+---------------------------------------------------
    Reporter:  rransom  |       Owner:  mikeperry
        Type:  defect   |      Status:  reopened 
    Priority:  normal   |   Milestone:           
   Component:  Torify   |     Version:           
  Resolution:           |    Keywords:           
      Parent:           |      Points:           
Actualpoints:           |  
------------------------+---------------------------------------------------

Comment(by ioerror):

 It seems like there isn't much of a patch required - either the current
 version of GPG is built against a curl with socks:// support or it isn't;
 either way, we'll need to smoke out all the stray dnsleaks.

 I presume pka-lookups, cert, ldap modes of keylookup will likely also leak
 DNS.

 In the case of pka-lookups it looks like internally (g10/gpg.c) it may
 require that we set 'no-auto-key-retrieve' - I'm not sure of the best way
 to trigger such a lookup. If anyone has suggestions, I'd love to know how
 to trigger it.

 So now we're up to two DNS leak plugging key-server options:
 {{{
 no-auto-key-retrieve,no-try-dns-srv
 }}}

 I'll next look into the 'cert, ldap' code to see how it leaks and report
 back.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2846#comment:23>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online