[Pkg-rust-maintainers] Bug#1099478: sqopv: sqopv doesn't support inline-signed compressed messages

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Mar 3 22:54:55 GMT 2025


Package: sqopv
Version: 0.36.1-1+b1
Severity: normal
Tags: patch

pgpainless-cli inline-sign produces compressed inline-signed messages by
default, but sqopv is currently built without sequoia's compression
support.

This means that the following sequence fails:

```
sqop generate-key test > test.key
sqop extract-cert < test.key > test.cert
echo test | pgpainless-cli inline-sign test.key | sqopv inline-verify test.cert
```

I think we should add the feature sequoia-openpgp/compression to the
line in debian/rules that builds sqopv.

Or maybe we should just make the following change, since
sequoia-openpgp's default features are just ["compression",
"crypto-nettle"] anyway:

```
diff --git a/src/sequoia-sop/debian/rules b/src/sequoia-sop/debian/rules
index 6b68e03f1..4dbcf821d 100755
--- a/src/sequoia-sop/debian/rules
+++ b/src/sequoia-sop/debian/rules
@@ -25,7 +25,7 @@ TARGET_RELEASE_DIR = target/$(DEB_HOST_RUST_TYPE)/release
        dh $@ --buildsystem cargo --with bash-completion
 
 execute_after_dh_auto_build:
-       $(CARGO) $(CARGO_BUILD_ARGS) --bin sqopv --features=cliv,sequoia-openpgp/crypto-nettle --no-default-features
+       $(CARGO) $(CARGO_BUILD_ARGS) --bin sqopv --features=cliv
        $(CARGO) $(CARGO_BUILD_ARGS) --bin sqop --features=cli
 
 override_dh_auto_test:
```

This might end up increasing the size of the `sqopv` binary, though.

     --dkg


-- System Information:
Debian Release: trixie/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'testing'), (200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.12-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sqopv depends on:
ii  libc6           2.40-7
ii  libgcc-s1       14.2.0-16
ii  libgmp10        2:6.3.0+dfsg-3
ii  libhogweed6t64  3.10.1-1
ii  libnettle8t64   3.10.1-1
ii  libsqlite3-0    3.46.1-1

sqopv recommends no packages.

sqopv suggests no packages.

-- no debconf information
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20250303/255c1b92/attachment.sig>


More information about the Pkg-rust-maintainers mailing list