Gpg4win: baixar versions anteriors

Gpg4win version 5.1.1 is available since 2026-09-23.
Changes
Kleopatra
Okular/GnuPG-edition
- Hide finish signing banner on document reload. (T8345)
Outlook Classic Add-In (GgpOL)
- Fix S/MIME handling. (T8436, T8439)
- Fix closing an open smime encrypted msg file creates mail in the inbox. (T8438)
- Fix Outlook crashes on preview of an S/MIME mail. (T8420)
- Fix getting the conformance string from libkleopatrarc. Also fixes a crash due C++ runtime error when reading libkleopatrarc. (T8421)
- Fix problem with MIME attachments w/o a Content-Disposition. (T8411)
- Fix minor memory leak.
- Mitigate slowness in switching between mails due to an Outlook regression. (T8418)
Outlook-New Add-In (GpgOL/Web)
Engine (GnuPG)
For changes in the backend see the release info for GnuPG versions from 2.5.22 up to 2.5.24: (T8425,T8320)
Versions of the Components
| Component | Version | Remarks |
| --------- | ------------- | ------- |
| GnuPG | 2.5.24 | T8425 |
| Kleopatra | gpg4win-5.1.0 | |
| GpgOL | 2.7.6 | |
| GpgEX | 1.1.2 | |
| Libgcrypt | 1.12.4 | T8417 |
| Libksba | 1.8.0 | |

Gpg4win version 5.1.0 is available since 2026-07-29.
Changes
Kleopatra
- Improvement of the first part of the decryption/verification messages. (T8273)
- Improvement of the import certificates dialog text. (T7446)
- The default appearance of S/MIME root certificates was changed. (T8275)
- Addition of "Save Secret Team Key" button to success message of "Team Key"-creation. (T8166)
- Addition of "Copy" button to context menu of details tables. (T8134)
- Removal of "Backup secret key" from the context menu. (T8153)
- Removal of the .gpgsk backup offer when moving keys to card. (T8327)
- Removal of unnecessary path info from file verification feedback. (T8332)
- We now use a shorter text for verification with same name ".sig" file. (T7795)
- Prevent starting Kleopatra as Admin on Windows. (T8210)
- Decrypting packets with hybrid cipher works again without entering a symmetric passphrase. (T7339)
- Cancellation of signing only operation now reports cancellation. (T8289)
- Fix application of certificate category styling. (T8279,T8258)
- Gpgme: Fix hanging file encryption due to invalid S/MIME certificate. (T8187)
- Use an outer folder in archive decryption if the archive was renamed. (T8154)
- Do not offer "Save Secret Team Key" for card keys. (T8146)
- Do only ask for confirmation twice when deleting a secret key. (T7538)
- Add ".pub" suffix to the file selector filter when importing certificates in Kleopatra. (T7451)
- Cancellation of team key save dialog no longer keeps a background process open. (T8150)
- Prevent creation of opaquely signed unencrypted archives (S/MIME or mixed encryption). (T8324)
- Fix application order from settings via windows registry and config files. (T5707)
- Fix protocol check of detached OpenPGP signatures. (T8337)
- Fix info in smart card usage column for auth keys. (T8316)
- Disable subkey backup action in key details for primary key. (T8321)
- Prevent startup of dirmngr if it has been disabled via config files. (T8304)
Okular/GnuPG-edition
- Fix shown trust information for "not trusted" or "not verified" S/MIME certificates. (T8294)
- Not trusted certificate are no longer offered for signing. (T8017)
- Prevent overwriting of the original file when saving the signed document. (T7705)
- Fix for resizing/moving new signature. (T8335)
- Fix link to Kleopatra in signature properties. (T8295)
- OpenPGP certificate export now creates ".asc" files. (T8293)
- Fix OpenPGP fingerprints in signature properties. (T8291)
- Give an error when trying to sign with wrong passphrase. (T8018)
- Improvement of error messages when signing. (T7285)
- Highlight / preselect "nonRepudiation" certificates for qualified signatures. (T6632)
- Disable file saving during the signing process. (T8314)
- Disable reload during signing process. (T8345)
- Hide (unhelpful) details in bad passphrase error dialog (T8341)
Outlook Classic Add-In (GgpOL)
- The Ribbon Icon and Tooltip now reflect the selected security settings of a new mail. (T7098)
- Content of HTML-only OpenPGP mails is now shown with "Read as plain" activated. (T7843)
- Fix for cases where attached mails were shown empty. (T7806,rO06e35e5)
- Fix multipart attachment type in case of no cid. (T8161)
- p7m attachments no longer break attachment parsing. (T8113)
- Fix an Outlook freeze when saving S/MIME encrypted draft. (T7837)
- Fix memory leaks. (rC5b52c25,rCc18e33a)
- Fix for a case where the overlay did stay open after sending. (rO0d36b54)
- gpg4win-tools: Fix encoding for status information. (T8362)
Outlook-New Add-In (GpgOL/Web)
Several improvements to this still EXPERIMENTAL component. Among others:
- The native client now initially acts as a straight forward first install wizard, and becomes an intuitively usable configuration dialog afterwards.
- Improved status notification in both native client and tray icon.
- When no secret key is available for the current Outlook account, the addin helps you generate one (through Kleopatra).
- Attached public keys can be importe

Gpg4win version 5.0.2 is available since 2026-03-16.
Notes to Admins
An update to this version is recommended due to the following security fixes:
- A security bug in GpgOL has been fixed which could result in no warning shown to the user when a signed mail contained a not signed attachment after a signed one. (T8110)
- The libpng component has been updated to version 1.6.55 to fix a security issue (CVE-2026-25646). This is only exploitable in our software if a mail is opened via Kleopatra.
Changes
GUI (Kleopatra)
- Kleopatra in Gpg4win and GnuPG Desktop uses now a blue icon (T8083)
- New Registry key to allow saving CSR as PEM (T8115)
- Removed "Forced Decryption" button in notepad (T8124)
- Omit question about own key when importing a secret team key (T8098)
- Add expired/revoked information to ldap search results (T8042)
- Extract single folder archive without creating subfolder (T8022)
- New filter for valid certificates (T7950)
- Make the initial status of the check boxes of the sign/encrypt dialog configurable (T7831)
- Add config option to only allow upload of own certificates to LDAP (T7772)
- Changed dialog on import of secret key (T7637, T7502)
- Improvement of clipboard actions (T7455)
- Improved lookup of gpgconf executable (T8082)
- Improvements for "Save Secret Team Key" (T8027, T8030)
- Fix order of filters in settings dialog (T8079)
- Formatting of QES signatures is no longer bold font (T8077)
- Re-added support for config options RSAKeySizes and PGPKeyType (T8056)
- Fix tab navigation in smart card table (T8051)
- Some improvement in representation of signature verification (T8035)
- Notepad now hides "signed" text if the signature is bad (T8020)
- Make filesystem watcher notice new trustdb (T8015)
- Fix handling of unset keyserver in configuration dialog (T8014)
- Fix tab order in notepad (T8125, T7784)
- Completed accessibility improvements of table column headings (T6568)
- Don't show duplicate ldapservers in Kleopatra configuration (T7828)
Outlook Classic Add-In (GgpOL)
- Make sure to check all attachments. (T8110)
- Avoid warning pop-up in Outlook in a certain configurations when listing other Add-Ins. (T8036)
- Fix confusing message in dialog window "Conflicting crypto settings". (T7989)
Outlook-New Add-In (GpgOL/Web)
Several improvements to this still EXPERIMENTAL component.
Engine (GnuPG)
- gpg: Support deleting a composite secret key in gpg-agent. (T7875)
- gpg: Fix armor parsing when no CRC is found. (T7071)
- gpgsm: New option –assert-validsig. (rG9500b2c776)
- agent: Fix the recent regression in pkdecrypt with TPM RSA. (T8045)
- scdaemon: Add support for D-Trust Card 6.1/6.4. (rG987c6a398a)
- dirmngr: Let KS_SEARCH print all uid records for a key. Fixes regression since 2015. (rG2dde9ddf56)
- gpg-authcode-sign.sh: Keep the log file even on success. (rGc0f9ca47f0)
Other
- libgpg-error: Fix for empty first key listing. (T8052)
- A security bug in the supporting library libpng has been fixed. Now libpng 1.6.55 is included. This is only exploitable in our software if a mail is opened via Kleopatra. (CVE-2026-25646)
Versions of the Components

Component Version Remarks
GnuPG 2.5.18 T7999
Kleopatra gpg4win-5.0.2
GpgOL 2.7.2
GpgEX 1.1.0
Libgcrypt 1.12.1 rC7e91b2a334
Libksba 1.6.8 T7174

A critical bug was found in the GnuPG versions included with Gpg4win 5.0.0 and the previous 3 beta versions. Please update as soon as possible to Gpg4win version 5.0.1
For more info see the Security Advisory T8044

- GnuPG: D-TRUST ECC smart cards are now supported. [T7000,T7001]
- Kleopatra: The WKD lookup does now also work if the mail addresses are surrounded by spaces. [T6868]
- Kleopatra: The WKD lookup now works even if no keyserver is configured. [T6868]
- GnuPG: The Windows system root CAs are now trusted when checking CRL. [T6963]
- GnuPG: For a full list of the backend changes between GnuPG 2.4.4 in Gpg4win-4.3.0 and GnuPG 2.4.5 in Gpg4win-4.3.1 please see: https://dev.gnupg.org/T6960
GnuPG: 2.4.5
Kleopatra: 3.2.2
GpgOL: 2.5.12
GpgEX: 1.0.10
Kompendium DE: 4.0.1
Compendium EN: 3.0.0

Included Gpg4win components in version 4.3.0 are:

GnuPG: 2.4.44
Kleopatra: 3.2.0
GpgOL: 2.5.12
GpgEX: 1.0.10
Kompendium DE: 4.0.1
Compendium EN: 3.0.0

Noteworthy changes in Version 4.3.0 (2024-01-25)
------------------------------------------------

--- Highlights ---

- Kleopatra: A new mail viewer mode has been added, allowing crypto
mails received by mail clients without PGP/MIME or S/MIME support
to be decrypted. This means that you can open an SMIME.p7m file
or openpgp-encrypted-message.asc attachment with Kleopatra, and
it will be displayed as a mail. [T6199]

- Kleopatra: It is now possible to certify multiple certificates at
once using the group interface. [T6469]

--- Features ---

- Okular (GnuPG Edition): This PDF reader has received a lot of
updates and is now ready for everyday's use.

- GnuPG: Support for proxy authentication using the Negotiation method
has been added. [T6719]

- GnuPG: Keyserver can now be configured to the value "none" to avoid
unnecessary queries to non-existing keyservers that would slow down the
system. [T6708]

- GnuPG: Es kann nun der Wert "none" als Schlüsselserver verwendet
werden, um unnötige Abfragen gegen nicht existierende Server zu
vermeiden, die das System verlangsamen würden. [T6708]

- GnuPG: A new option has been added to ignore specific CRL
extensions. This can help as a workaround for problems with specific
CRLs. [T6545]

- GnuPG: Automatic proxy detection has been improved. [T5768]

- Kleopatra: The start time of Kleopatra has been drastically
improved on throttled systems with third-party software installed, which
manipulates system calls. The number of system calls to start Kleopatra
has been roughly halved. [T6259]

- Kleopatra: The advanced options in the certification view are now
automatically visible if they were open in the last certification. [T6480]

- Kleopatra: Windows dark mode is now fully supported. [T4066]

- Kleopatra: Some invalid operations, such as signing with an expired
certificate, which would have resulted in errors, can no longer be
triggered. The reason for this is indicated, too. [T6742 T6788]

- Kleopatra: The support for Telesec signature cards has been
improved. [T6830]

- Kleopatra: When exporting or publishing certificates, the user is
now informed if there are uncertified certificates in the export. This
is especially useful when exporting groups. [T6766]

- Kleopatra: Expiry dates after 19.01.2038 (year 2038 bug) are now
possible. [T6736]

- Kleopatra: The dialog to extend OpenPGP certificates has been
improved and redundant options removed. [T6621]

- Kleopatra: When creating archives, they are now written out as a
.part file to improve error handling and canceling the operation without
leaving a broken archive in the file system. [T6584]

- Kleopatra: Updating certificates now also looks for updates in a
Web Key Directory if one exists for the domain. [T5951]

- Kleopatra: Progress bars are now also properly shown for S/MIME
file operations. [T6534]

- GpgOL: Added support for RFC2231 encoded attachment filenames,
which increases compatibility with Apple Mail. [T6604]

- GpgOL: Draft encryption with S/MIME certificates now skips CRL
checks and is much faster and reliable. [T6827]

- GpgOL: The error handling was improved if a preference for S/MIME
is set and signing selected but no signing certificate can be found.
See: https://gnupg.com/vsd/registry-settings.html (smimeNoCertSigErr)
on how to add a custom message to instruct users what to do in this
case. [T6683]

- GpgOL: It is now possible to encrypt to S/MIME certificates that
are untrusted or cannot be validated because of CRL errors. In
this case a warning dialog is shown, allowing the user to override the
errors. This is not VS-NfD compliant but can be used for unrestricted
encryption. [T6701]

- GpgOL: Mails without the correct MIME type but which still look
like crypto mails are now decrypted. This improves compatibility with
Apple Mail and various mail gateways that modify the 

Included Gpg4win components in version 4.2.0 are:

GnuPG: 2.4.3
Kleopatra: 3.1.28
Okular: 23.07.70-patched
GpgOL: 2.5.8
GpgEX: 1.0.9
Kompendium DE: 4.0.1
Compendium EN: 3.0.0

New in Gpg4win version 4.2.0 (2023-07-14)
-----------------------------------------

--- General ---

- Okular (GnuPG Edition): Gpg4win has been extended with the popular
Okular PDF Viewer. Although our Okular version is currently considered
experimental and therefore not installed by default, this provides the
ability to legally sign and verify documents with the S/MIME certificates
and smart cards GnuPG supports.
The GnuPG Edition of Okular is optimized to be lightweight and to provide
as little attack surface as possible. It does not support any active
content like JavaScript or media files in PDF documents. It should
therefore be more suitable in high security environments than other
PDF readers.

See: https://www.gpg4win.org/version4.2.html

- GnuPG: The new component "keyboxd" is now enabled by default for new users
of Gpg4win. keyboxd stores certificates (public keys) in an sqlite
database and keeps it in memory. The resulting performance improvement
can be quite large especially for users with large keyrings.

Adventuresome users can enable it manually:
Select all certificates in Kleopatra and export them with a right click.
Add a file %APPDATA%\gnupg\common.conf with the contents
"use-keyboxd" (without the quote marks), then restart Kleopatra and
import your certificates again.

As usual we caution to make a backup of the %APPDATA%\gnupg directory
before modifying files in there.

To switch back to the old behavior, add a "#" character in front of
the "use-keyboxd" and restart Kleopatra. Where applicable you have to
export the certificate before and import them again after the restart.

- mkportable has been removed. Please see:
https://wiki.gnupg.org/Gpg4win/PortableVersion
on how to create a portable version of Gpg4win.

--- Features ---

- Kleopatra: Folder encryption and decryption (gpgtar) has been completely
reworked so that it now has roughly the same performance as on the
command line. The new architecture also allows for further performance
improvements in the future and is much more robust. And solves several
issues. [T5478 T6488 T6499 et.al.]

- Kleopatra: The progress indicator now also works for very large data
files. [T6534]

- Kleopatra: It is now possible to rename the output file, if a file
with the same name already exists, instead of just overwriting or
canceling. [T6372]

- Kleopatra: It is now offered to delete the secret key on the computer
after it was successfully transferred to a smart card. [T5836]

- Kleopatra: Added warnings when your certificate or other certificates
in your keyring are about to expire. The warnings are configurable
and should allow a smoother switch to a new or extended certificate.
[T6452]

- Kleopatra: The Notepad now also uses the last chosen certificates for
signing and self-encryption as default.
The values are shared with file encryption.[T6415]

- Kleopatra: The startup time of Kleopatra has been slightly improved.
[T6259]

- Kleopatra: The certificate selection input and dropdown fields are now
alphabetically sorted. [T6492, T6514]

- Kleopatra: Backed up subkeys can now be restored through the UI even when
they were used from a smart card in between. [T3456, T3391]

- Kleopatra: For certifications of public keys it is now possible to
configure a default validity period. [T6452]

- Kleopatra: When extending the validity period of a certificate,
the default for new ones is now preset. [T6479]

- Kleopatra: The default validity of new certificates is now three years
instead of two. This can be changed through configuration. [T2701]

- GpgOL: Now offers to create a OpenPGP certificate, if none with
signing capability exists and only signing is requested. [T5869]

- GnuPG: The PKCS#12 (.p12 files) parser has been rewritten to increase
compatibility with other PKCS#12 implementations. [T6536]

- 

Included Gpg4win components in version 4.1.0 are:

GnuPG: 2.4.0
Kleopatra: 3.1.26
GpgOL: 2.5.6
GpgEX: 1.0.9
Kompendium DE: 4.0.1
Compendium EN: 3.0.0

New in Gpg4win version 4.1.0 (2022-12-19)
-----------------------------------------

- GPA: So long, and thanks for all the fish. To reduce maintenance
and overall quality of Gpg4win we have decided to retire
GPA. Over the last decade Kleopatra has made large improvements
in quality and is very well maintained and the focus of our
development. [rW3f7ed3834f]

--- Features ---

- GnuPG: Improve signature verification speed by a factor of more
than four. Double detached signing speed. [T5826]

- GnuPG: Import stray revocation certificates to improve WKD
usability.

- GnuPG: New option --add-revocs for gpg-wks-client. [rG2f4492f3be]

- GnuPG: Ignore expired user-ids in gpg-wks-client. [T6292]

- GnuPG: Support the Telesec Signature Card v2.0 in OpenPGP.
[T6252]

- GnuPG: For the new AEAD Format we now only allow the fast OCB
mode. The EAX mode may still be used for decryption.
[rG5a2cef801d]

- Kleopatra: Support the import of non-standard conforming UTF-16
encoded text files with certificates. [T6298]

- Kleopatra: New Option to delete the locally stored secret key
after a transfer to a smart card. [T5836]

- Kleopatra: Improve the display of keys in the group edit
dialog. [T6295]

- Kleopatra: Simplify changing the owner trust of keys. [T6148]

- Kleopatra: Allow selecting ECC with supported curves when
generating new keys for smart cards. [T4429]

--- Bug fixes ---

- GnuPG: Update the X.509/CMS library Libksba to version 1.6.3 to
fix a security problem in the CRL signature parser. [T6230]

- GnuPG: Fix trusted introducer for mbox only user-ids. [T6238]

- GpgOL: IMAP access to encrypted mails works again. [T6203]

- Kleopatra: Don't report success if the key signing job was
canceled. [T6305]

- Kleopatra: Report failed imports immediately when receiving the result.
[T6302]

- Kleopatra: Do not offer invalid S/MIME certificates for signing
or encryption. [T6216]

- Kleopatra: Don't ask user to certify an imported expired or
revoked OpenPGP key. [T6155]

- Kleopatra: Do not crash when closing details widget while
certificate dump is shown. [T6180]

- Kleopatra: Improve usability and accessibility of the notepad
operations. [T6188]

--- Features --- - GnuPG: In de-vs mode use AES-128 instead of 3-DES as implicit
preference. This avoids problems with software considering 3-DES
as non-compliant but does only announce 3-DES as supported
algorithm. [T6063]
- GnuPG: Add new LDAP server flag "areconly" (A-record-only) to
help against long delays on some AD installations.
- GnuPG: New feature to mirror an LDAP keyserver to a Web key
Directory. [T6224]
- GnuPG: Improve reporting of bad passphrase errors during PKCS#11
import. [T5713,T6037]
--- Bug fixes --- - GnuPG: Update the X.509/CMS parsing library Libksba to version
1.6.2 to fix a severe security problem. [T6230]
- GnuPG: Do not consider unknown public keys as non-compliant while
decrypting. [T6205]
- GnuPG: Fix CRL Distribution Point fallback to other schemes. - GnuPG: Fix upload of multiple keys for an LDAP server specified
using the colon format.
- GnuPG: Fix a key upload problem when a BaseDN is specified for an
LDAP server. [T6047]

--- Bug fixes --- - Kleopatra: A crash that occured when exiting
the Application has been fixed. (T5962)
- GnuPG: Security update to 2.3.7 to fix CVE-2022-34903.
(T6027)
- GnuPG: Improved import of PKCS#12 containers.
(T6037,T5793,T4921,T4757)