[pkg-gnupg-maint] Bug#834522: libgnupg-perl: FTBFS, test failures, probably gpg2

[Daniel Kahn Gillmor]

Control: affects 834522 + src:gnupg2

On Tue 2016-08-16 12:59:40 -0400, gregor herrmann wrote:
> Package: libgnupg-perl
> Version: 0.19-1
> Severity: serious
> Tags: upstream stretch sid
> Justification: fails to build from source (but built successfully in the past)
>
> libgnupg-perl fails to build:
> https://tests.reproducible-builds.org/debian/rbuild/unstable/amd64/libgnupg-perl_0.19-1.rbuild.log
> and also locally.
>
> Probaly related to the move to gnupg2.

I agree with this assessment.

libgnupg-perl FTBFS and fails to run due to its rigid internal model of
gnupg's expected behavior.  GnuPG 2.1.x uses a slightly different
internal finite state machine than the 1.4.x branch, and as a result,
the scripted/expected interactions in most scenarios that libgnupg-perl
tries to handle don't line up, and libgnupg-perl falls over.

As Gregor has suggested, this is probably an upstream problem.

The next version of libgnupg-perl that goes into debian after 0.19-1
should ideally have a more flexible internal state machine and work
with the 2.1.x branch of GnuPG.

Alternately, the next version in debian could explicitly declare its
dependencies on an older version of gnupg (<< 2.1).  Or, as a
temporary workaround, it could be explicitly patched to use
/usr/bin/gpg1 and then could Depend: gnupg1.

A proper fix with a more robust finite-state machine would be
preferable.

Regards,

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 930 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20160830/706d37b9/attachment-0001.sig>