[pkg-gnupg-maint] Bug#822974: Backport of GnuPG 2.1

[Luca Capello]

user production at infomaniak.com
usertag 849845 + infomaniak.com-authentication
thanks

Hi Daniel,

On Wed, 18 Jan 2017 02:37:51 -0500, Daniel Kahn Gillmor wrote:
> On Mon 2017-01-16 16:14:01 -0500, Luca Capello wrote:
> > Any news on this?  At work we have recently deployed OpenPGP (via
> > YubiKey 4) for all the sysadmins, installing GnuPG 2 on jessie with the
> > following trick:
> 
> there is a known bug (in particular, 849845, upstream 2902) affecting
> dirmngr in stretch and sid, which makes it very difficult for certain
> common configurations to retrieve keys from the network. i'm reluctant
> to inflict them on jessie users, and am hoping to get that resolved
> before we go with the backport.

Thank you for the explanation, I see that the bug has been reassigned to
tor since the dirmngr part has been fixed, very good.

Nevertheless, IMHO a GnuPG 2 was anyway useful, since it would have not
affectced the main functionality (i.e. signing, encrypting and SSH, even
with a YubiKey/smartcard).  To be clear, your call for the official
backport ;-)

> > From a quick look, the following are the Build-Depends: needing a
> > backport as well:

FWIW, for the jessie-backports below I decided to:

- use debhelper from jessie-backports as well, instead of having a
  bigger delta.
- remove all mingw-related binary packages, because other than missing
  dependencies, I do not think they are useful for their primary target,
  i.e. d-i on Windows.

> >   libassuan-dev

--8<---------------cut here---------------start------------->8---
libassuan (2.4.3-2~bpo8+1) jessie-backports; urgency=medium

  * Rebuild for jessie-backports.
  * debian/control:
    + add myself to Uploaders:.
    + remove Build-Depends-Indep: and libassuan-mingw-w64-dev binary
      package, no libgpg-error-mingw-w64-dev.
  * debian/gbp.conf:
    + add debian-branch=jessie-backports.

 -- Luca Capello <luca.capello at infomaniak.com>  Sat, 28 Jan 2017 16:12:37 +0100

--8<---------------cut here---------------end--------------->8---

Working fine on my jessie-backports with gnupg2_2.1.11-7.

> >   libgcrypt20-dev

"[2017-01-26] Accepted 1.7.6-1 in unstable (medium) (Andreas Metzler)"

Cc:ing the Debian GnuTLS Maintainers list and Bcc:ing Andreas Metzler
who did the upload: is that version target for stretch, so the one I
should backport for GnuPG 2?

> >   libgpg-error-dev

"[2017-01-18] Accepted 1.26-2 in unstable (medium) (Daniel Kahn Gillmor)"

I guess this is the version intended for stretch, right?  If so, I will
wait for it to migrate to stretch before doing the backport (ATM "Too
young, only 9 of 10 days old").

> >   libksba-dev

--8<---------------cut here---------------start------------->8---
libksba (1.3.5-2~bpo8+1) jessie-backports; urgency=medium

  * Rebuild for jessie-backports.
  * debian/control:
    + add myself to Uploaders:.
    + remove Build-Depends-Indep: and libksba-mingw-w64-dev binary package,
      no libgpg-error-mingw-w64-dev.

 -- Luca Capello <luca.capello at infomaniak.com>  Sat, 28 Jan 2017 22:39:02 +0100
--8<---------------cut here---------------end--------------->8---

Working fine on my jessie-backports with gnupg2_2.1.11-7.

> >   libnpth0-dev

--8<---------------cut here---------------start------------->8---
npth (1.3-1~bpo8+1) jessie-backports; urgency=medium

  * Rebuild for jessie-backports.
  * debian/control:
    + add myself to Uploaders:.
    + remove Build-Depends-Indep: and libnpth-mingw-w64-dev binary package,
      "/usr/bin/i686-w64-mingw32-ld: .libs/libnpth-0.dll.def:5: syntax error".
  * debian/gbp.conf:
    + add debian-branch=jessie-backports.

 -- Luca Capello <luca.capello at infomaniak.com>  Sat, 28 Jan 2017 16:48:34 +0100
--8<---------------cut here---------------end--------------->8---

Working fine on my jessie-backports with gnupg2_2.1.11-7.

I will upload the three backports above at the beginning of the next
week after having tested them again at work and if no one says anything
before.

Daniel, what do you think about adding the jessie-backports branches I
have locally to the corresponding Git repositories on Alioth?

Thx, bye,
Gismo / Luca

-- 
Luca Capello
Administrateur GNU/Linux

Infomaniak Network SA
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20170128/7cd5b022/attachment-0003.sig>