[pkg-gnupg-maint] Bug#840669: Bug#840669: Bug#840669: Need way to avoid agent, or reliable way to kill agent

Daniel Kahn Gillmor dkg at fifthhorseman.net
Fri Oct 14 19:30:43 UTC 2016


On Fri 2016-10-14 15:11:39 -0400, Werner Koch wrote:
> On Fri, 14 Oct 2016 18:58, dkg at fifthhorseman.net said:
>> instructions that say "if you're dealing with gpg secret key material in
>> a test suite, here's what we recommend you do".
>
> Which could be as simple as: Do what GnuPG does in its test suite.

I don't think it's fair for us to expect people writing projects which
rely on GnuPG (possibly with languages and entirely different
toolchains) to read the full GnuPG test suite and understand its
architectural details and design.  The GnuPG test suite is also
*building* gpg-agent and gpg (likely on systems that already have gpg
and gpg-agent installed), so it's not obvious that the testing behavior
would be the same.

A one- or two-paragraph document that explains the recommendation for
external projects, in English, coming from the official GnuPG project
would be much more helpful in setting reasonable expectations.

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 930 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20161014/ba9df7dd/attachment.sig>


More information about the pkg-gnupg-maint mailing list