[pkg-gnupg-maint] Bug#822974: Backport of GnuPG 2.1

[Daniel Kahn Gillmor]

Hi Luca--

On Mon 2017-01-16 16:14:01 -0500, Luca Capello wrote:
> On Thu, 06 Oct 2016 10:23:25 -0400, Daniel Kahn Gillmor wrote:
>> On Thu 2016-10-06 05:17:54 -0400, Thomas Goirand wrote:
>> > It'd be nice to have a backport of GnuPG 2.1 to Jessie, so that one
> [...]
>> https://bugs.debian.org/822974
>> 
>> last week, the changes i was waiting for did indeed drop into testing,
>> but we have a few minor bugs that i'm in the process of cleaning up
>> which i'd like to avoid inflicting on users of jessie-backports.
>> 
>> It'll happen soon, i promise :)
>
> Any news on this?  At work we have recently deployed OpenPGP (via
> YubiKey 4) for all the sysadmins, installing GnuPG 2 on jessie with the
> following trick:

there is a known bug (in particular, 849845, upstream 2902) affecting
dirmngr in stretch and sid, which makes it very difficult for certain
common configurations to retrieve keys from the network. i'm reluctant
to inflict them on jessie users, and am hoping to get that resolved
before we go with the backport.

> From a quick look, the following are the Build-Depends: needing a
> backport as well:
>
>   libassuan-dev
>   libgcrypt20-dev
>   libgpg-error-dev
>   libksba-dev
>   libnpth0-dev
>
> I have started working on libassuan-dev and go on if no one else is
> doing that already, the idea being a *full* bakcport, i.e. completely
> replacing GnuPG 1.

yes, that's the plan.  backporting these -dev packages to jessie should
be a relatively straightforward process.  If you're up for helping with
that to lay the groundwork for an updated gnupg package, that'd be
great.

Regards,

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20170118/7801d5f3/attachment-0002.sig>