Armory 0.96.5

[RoadStress]

A bit offtopic question, but I don't know where to ask. Can I send BTC to a native SegWit bc1 address using Armory 0.96.5 + Core 0.19.1? And just for further info: Is any bitcoin core client able to send to a bc1 address?
Thanks!

[BitMaxz]

A bit offtopic question, but I don't know where to ask. Can I send BTC to a native SegWit bc1 address using Armory 0.96.5 + Core 0.19.1? And just for further info: Is any bitcoin core client able to send to a bc1 address?
Thanks!

It seems the current latest version of the armory doesn't support it yet but it might support on their armory 0.97 they don't release it yet.

Read this part

Break backwards compatibility for unsigned transactions carrying bech32 outputs. Older versions cannot make sense of bech32 addresses, therefore they shouldn’t be able to sign the transaction at all.
Fixed

Look at their release note here https://btcarmory.com/0.96.5-release/

Armory does not fully support bech32 but they support segwit address that starts with 3 or with script type: p2sh-p2wpkh

If you want a wallet that fully supports segwit I would suggest you check Electrum wallet or wait for a new armory release.

[goatpig]

You can send to bech32 addresses (bc1) in 0.96.5. What you cannot do is generate these addresses from Armory wallets.

[nc50lc]

-snip- And just for further info: Is any bitcoin core client able to send to a bc1 address?

Almost all "Bitcoin clients" including Armory can now send to bech32 addresses, only those that aren't maintained or oppose the soft-fork can't.
You can customize this list: https://bitcoin.org/en/choose-your-wallet?step=5&platform=linux (link set to linux);
then click a wallet name to see if it has "✓SEGWIT" which means it supports SegWit; additionally, "✓BECH32" if it can generate bc1 addresses.

[Ethorsen]

Hi guys,

Is there any foreseeable problems with usage of Armory 0.96.5 and the incoming Taproot soft-fork?

Thx

[goatpig]

0.96.5 won't be able to spend to native taproot addresses. I'm working to add full support for that address format among other things.

[AM0751]

Hi all,

I downloaded armory 0.96.5. I wanted to check the integrity of the downloaded file, but for that I need to use GPG4win.
The instruction video to check the integrity of the download on the armory website is from 2014 I believe.
It says I need an offline signing key. I believe that is 4922589A. However, if I input that into GPG4win it doesn’t find anything. So I am stuck, not even mentioning the fact that this method might be completely outdated.

Question: how do I check the integrity of the Armory 0.96.5 download on my computer?
Thanks in advance.

[nc50lc]

Question: how do I check the integrity of the Armory 0.96.5 download on my computer?

I can't seem to get a result with Kleopatra's server lookup either.
In the latest version of the website (btcarmory.com/docs/verify), the link to the signing key seems dead, to make it work, just add &op=index at the end of the link's url.
Then import goatpig's signing key from the result: 8c5211764922589a

Then do the rest of the tutorial.

[goatpig]

https://github.com/goatpig/BitcoinArmory/releases

Github release page has the sig files as well.

[AM0751]

Hi all,

Thanks for the help so far, but I must be incredibly dumb.
I can’t get it to work, and I can’t move forward and copy this install file on my airgapped computer without me knowing it is 100% legit.

I downloaded the version of Kleopatra that is in the tutorial on http://www.bitcoinarmory.com/tutorials/armory-basics/verify-download/

I adjust the settings, and then I input the signing key 4922589a
It tells me I seem to be looking for a fingerprint or key-id. And to add a prefix if my search does not yield any results.
Both options give me zero results.

I have no idea what I am doing wrong. Any help would be much appreciated.

Thanks in advance.

[BitMaxz]

Hi all,

Thanks for the help so far, but I must be incredibly dumb.
I can’t get it to work, and I can’t move forward and copy this install file on my airgapped computer without me knowing it is 100% legit.

I downloaded the version of Kleopatra that is in the tutorial on http://www.bitcoinarmory.com/tutorials/armory-basics/verify-download/

I adjust the settings, and then I input the signing key 4922589a
It tells me I seem to be looking for a fingerprint or key-id. And to add a prefix if my search does not yield any results.
Both options give me zero results.

I have no idea what I am doing wrong. Any help would be much appreciated.

Thanks in advance.

I also tried to verify it with Kleopatra it seems it didn't work.

Anyway, have you checked the last part of the video from that guide you can verify if the software is genuine by creating checksums it will generate a new file with the name sha256sum.txt open it with notepad.

Now download the sha256sum.txt.asc from the link posted by goatpig above and open it again with a notepad it should show the list of hash and the pgp signature under the Signed message or Sha256 hash check the installer hash and compare it with the hash that you created recently under sha256sum.txt.
It should be the same if not then the installer you download is fake or clone.

[goatpig]

You should really use GPG from the terminal instead of a GUI solution. The signature process for Armory is the same as Core: save the sha256sum for each package to a text file, then sign that file. Therefor to verify the package, you have to do things:

- Check the packages sha256sum matches the one in the hash file (for the same name). This is as simple as running `sha256sum *package filename*` in the terminal/powershell and comparing with the entry in the hash file for the same file name.

- Check the signature on the hash file is valid. For you can run `gpg verify *hash filename*`. If you have public key in your keystore, it should tell you the sig is valid.

[nc50lc]

I downloaded the version of Kleopatra that is in the tutorial on http://www.bitcoinarmory.com/tutorials/armory-basics/verify-download/

I adjust the settings, and then I input the signing key 4922589a
It tells me I seem to be looking for a fingerprint or key-id. And to add a prefix if my search does not yield any results.
Both options give me zero results.

In my previous reply, I also mentioned that Kleopatra yields zero result at my end.
Instead, I manually imported the one suggested in the tutorial but added "&op=index" at the end of the link for the link to work.

So, instead of keyserver.ubuntu.com/pks/lookup?search=goatpig, it should be: keyserver.ubuntu.com/pks/lookup?search=goatpig&op=index
Then, click on "8c5211764922589a", copy everything on the page from "-----BEGIN PGP PUBLIC KEY BLOCK-----" to "-----END PGP PUBLIC KEY BLOCK-----".

Open Kleopatra, click on "Notepad", paste the text there and click "Import Notepad".
After that, certify that the one you're importing is correct; e.g.: ask goatpig himself if the fingerprint (below) is correct.
Lastly, tick the checkboxes and finish the rest of the process.

[goatpig]

Code:

pub   rsa4096 2015-11-22 [SC]
      745D 707F BA53 968B DF63  AA8D 8C52 1176 4922 589A
uid           [ unknown] goatpig (Offline signing key for Armory releases) <moothecowlord@gmail.com>

This is my offline signing key's fingerprint. The short hand fingerprints you are finding either show the last 2 or the last 4 hexit packets of the full fingerprint

Code:

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=MOxo
-----END PGP PUBLIC KEY BLOCK-----

This is the key itself, with some sigs added

[BitMaxz]

I did try to verify it through command prompt as the administrator but it fails after verifying the installer with the signature even if I use the sha256sum.txt.asc or the above keys.



I also got this below I tried to verify it with the sha256sum.txt.asc from releases but got this error below

Code:

C:\Users\~snip~\Downloads\Programs\New folder>gpg --verify sha256sum.txt.asc armory_0.96.5_win64.exe
gpg: not a detached signature

edit:
Since the error above gpg not a detached signature I tried to edit the sha256sum.txt.asc and remove the hashes or the whole PGP signed message and save only the PGP signature and this is the result below.

Code:

C:\Users\Test1\Downloads\Programs\New folder>gpg --recv-keys --keyserver keyserver.ubuntu.com 4922589A
gpg: key 8C5211764922589A: "goatpig (Offline signing key for Armory releases) <moothecowlord@gmail.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

C:\Users\Test1\Downloads\Programs\New folder>gpg --verify sha256sumsignature.txt.asc armory_0.96.5_win64.exe
gpg: Signature made 24/12/2018 4:16:07 pm Malay Peninsula Standard Time
gpg:                using RSA key 8C5211764922589A
gpg: BAD signature from "goatpig (Offline signing key for Armory releases) <moothecowlord@gmail.com>" [unknown]

[nc50lc]

I did try to verify it through command prompt as the administrator but it fails after verifying the installer with the signature even if I use the sha256sum.txt.asc or the above keys.
-snip-

That's because "sha256sum.txt.asc" isn't the signature for the binaries.
It already contains both the signature of the message and the SHA256sum of each binaries (as signed message).

You verify the signed hash file via gpg --verify sha256sum.txt.asc to see if it's legit.
After passing verification, open it using your notepad or text editor, then compare the SHA256sum of the binaries to the listed SHA256 hashes.

[BitMaxz]

That's because "sha256sum.txt.asc" isn't the signature for the binaries.
It already contains both the signature of the message and the SHA256sum of each binaries (as signed message).

You verify the signed hash file via gpg --verify sha256sum.txt.asc to see if it's legit.
After passing verification, open it using your notepad or text editor, then compare the SHA256sum of the binaries to the listed SHA256 hashes.

That's the only thing that works for me the result is below.

Code:

C:\Users\Admin\Downloads\Programs\New folder>gpg --verify sha256sum.txt.asc
gpg: Signature made 24/12/2018 4:16:07 pm Malay Peninsula Standard Time
gpg:                using RSA key 8C5211764922589A
gpg: Good signature from "goatpig (Offline signing key for Armory releases) <moothecowlord@gmail.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 745D 707F BA53 968B DF63  AA8D 8C52 1176 4922 589A
gpg: WARNING: not a detached signature; file 'sha256sum.txt' was NOT verified!

I just trying to include the installer when verifying but it didn't work except on verifying only the sha256sum.txt.asc
So to make sure it's genuine I manually created the checksums with GpgEX and check the hash inside with the notepad and compared it to sha256sum.txt.asc the hash are the same so it's guinuine as I said on my previous suggestion above.

[AM0751]

Open Kleopatra, click on "Notepad", paste the text there and click "Import Notepad".
After that, certify that the one you're importing is correct; e.g.: ask goatpig himself if the fingerprint (below) is correct.
Lastly, tick the checkboxes and finish the rest of the process.

Hi and thanks for your answer. I am somewhat closer, but I need to ask you; which version of Kleopatra are you using in this example?
I am using the old version to be able to follow the exact steps on the armory website.
Do you happen to use a newer version? Reason I ask is, in my version there is no “notepad” to be clicked.

Thanks for your patience.

[nc50lc]

Do you happen to use a newer version? Reason I ask is, in my version there is no “notepad” to be clicked.

I'm using 3.1.18.
The "Notepad" in mine is located next to "Lookup on Server..." if "Settings->Show Toolbar" is ticked; check if it's available in your menu "View->Notepad".
If not, you may have to upgrade Kleopatra.

[BitMaxz]

I'm using 3.1.18.
The "Notepad" in mine is located next to "Lookup on Server..." if "Settings->Show Toolbar" is ticked; check if it's available in your menu "View->Notepad".
If not, you may have to upgrade Kleopatra.

Ok, it works with the 4.0.2 and I follow the last part of their video on their guide https://youtu.be/zRljOC71VVc?t=191



The last part is to verify it through clipboard and that's the result. I manually open the sha256sum.txt.asc with notepad and copy the hash of the installer and then open the checksum file of the armory installer and compare them and they both are the same. Meaning even if the result on Kleopatra couldn't verify the signature it should have the name, email, and keyID like the result of the image above and manually check the hash of both checksum and the hash under sha256sum.txt.asc.