[pkg-gnupg-maint] Debian gnupg2 (2.1.11-7+exp1) experimental

[Werner Koch]

On Fri, 22 Apr 2016 16:59, dkg at fifthhorseman.net said:

> which is used to define a static array of keyrings; each instantiated
> keyring itself apparently includes a comparably-sized static array, so

(An item in that array is smaller: About 20 bytes compared to 90)

> used.  I confess i don't understand this arrangement; perhaps it could
> be refactored upstream eventually to remove the hard limit.  Werner, can
> you explain the situation here?

I never expected that many keyrings will be used and thus this simple
arrangement.  In fact, I think it is a bad idea to use many keyrings
because it raises all kinds of problems, for example duplicated entries.

The number was changed from 20 to 40 on 2003-03-04 by David Shaw.
Digging in ML archives may reveal the reason.

> Finally, if merging is still necessary for other reasons, you should be
> able to use /bin/cat to merge binary-format transferable keyrings.

Why not using "gpg --import" to create one keyring - that would be
future proof.   I think gpgpslit can also be used to join keyrings:
 gpgsplit --no-split KEYRING1 KYERING2 .... >keyring
but I have not tested that.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.