[pkg-gnupg-maint] Bug#818997: Bug#818997: gpgv.exe linked dynamically against zlib1, doesn't allow proper signature verification

[Didier 'OdyX' Raboud]

Le mercredi, 23 mars 2016, 23.14:59 Daniel Kahn Gillmor a écrit :
> On Tue 2016-03-22 12:49:10 -0400, Didier 'OdyX' Raboud wrote:
> > I've noticed that gpgv.exe fails its CI test
> > (debian/tests/gpgv-win32) in version 1.4.20-4 (-3 and previous work
> > fine):
> 
> interesting, there was no change between -3 and -4 other than
> re-adding the gpgv-udeb for constrained armel devices at tbm's
> request (see #814027).
> 
> I suspect this means that the toolchain changed in some significant
> way between these releases.

I agree with this analyis; I've rebuilt gnupg in a clean chroot and the 
resulting gpgv.exe works, so we could just get the package rebuilt.

> hm, right.  I'm actually working on moving gpgv.exe over to the gnupg2
> packaging, so that we can get support for elliptic curve signatures
> as well.  I'll definitely test to ensure that it's properly
> statically linked when i produce it from that source.

Cool; saw the branch there, looking forward!

> > (By the way, the CI seems to have never run successfully in the last
> > months: https://ci.debian.net/packages/g/gnupg/unstable/amd64/ …)
> 
> this appears to be because of uninstallable dependencies; the tests
> can really only run on i386 systems or multiarch systems, right?  is
> wine32 available in amd64?

As far as I understand it, wine32 is only available on i386, and the 
current way to install it on amd64 hosts is through multiarch.

> I don't see any other architectures available at
> https://ci.debian.net/packages/g/gnupg/unstable/, and i'm assuming
> that the amd64 ci tester isn't multiarch.  or am i misinterpreting
> something?

CC'ing Antonio: there's no way to setup multiarch within an autopkgtest, 
right ?

-- 
Cheers,
    OdyX
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 630 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20160324/657eb66b/attachment.sig>