Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 582070 - app-crypt/signing-party-2.4 version bump
Summary: app-crypt/signing-party-2.4 version bump
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Crypto team [DISABLED]
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-05-04 11:15 UTC by Manuel Rüger (RETIRED)
Modified: 2016-09-05 00:22 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Manuel Rüger (RETIRED) gentoo-dev 2016-05-04 11:15:00 UTC
signing-party (2.3-1) unstable; urgency=low

  * debian.control:
    + Replace "Suggests: fonts-droid" by "Suggests: fonts-noto-mono,
      fonts-noto-cjk".  (Closes: #804689)
    + Replace "http://" with "https://" in the Homepage and Vcs-Browser
      fields.
    + Bump Standards-Version to 3.9.8 (no changes necessary).
  * debian.rules:
    + Add 'hardening=+pie' to DEB_BUILD_MAINT_OPTIONS to compile ELF
      executables as PIEs.
  * caff:
    + Replace a hash slice with a reverse map for compatibility with Perl
      older than 5.20.  Patch from Gregor Jasny.  (Closes: #813469)
    + Deprecate $CONFIG{'keyserver'}.  Users of GnuPG <2.1 should put the
      option in caff's GnuPG configuration file (~/.caff/gnupghome/gpg.conf by
      default) instead.  GnuPG 2.1 delegates network access to another
      process (dirmngr), hence for 2.1 the keyserver should be set in
      ~/.gnupg/dirmngr.conf instead.
    + When caff's own GnuPG configuration file (~/.caff/gnupghome/gpg.conf)
      does not exist, automatically generate it with the GnuPG options found
      in ~/.gnup/gpg.conf that are known to be safe (and useful) for caff.
      This includes "keyserver", "keyserver-options", "ask-cert-level" and
      "cert-digest-algo" (among many others).  Hence in the absence of its own
      GnuPG configuration file caff now uses the certification options from
      the user's GnuPG configuration file.
  * gpgsigs, gpg-key2latex:
    + Use "Noto Mono" as default font when compiling with XeLaTeX or LuaLaTeX;
      and "Noto Sans Mono CJK" as CJK font when compiling with XeLaTeX.
  * gpg-key2latex:
    + Don't show capabilities of the entire key when --show-subkeys is set.
      (Instead, the capabilities of the master key and each subkey are shown
      independently in uppercase.)
    + Enclose (sub)key capabilities in square brackets, to match GnuPG 2.1.11+'s
      output.
    + For ECDH, ECDSA, EDDSA (sub)keys, show the curve name instead of the
      public key algorithm and length.  This matches GnuPG 2.1.x's output.
    + The master key's fingerprint was incorrectly set to the last unusable
      (eg, expired or revoked) subkey fingerprint, if any.  (Closes: #815721)
  * keyart:
    + Print the public key algorithm and length as shown by GnuPG 2.1 (e.g.,
      "rsa4096" instead of "4096R"); for ECDH, ECDSA and EDDSA keys, show the
      curve name instead.
  * keyanalyze:
    + Remove autogenerated files from the repository, so that they do not
      clutter it, and do not generated useless diffs.  Patch from Guillem
      Jover.
    + Switch to use system libmd; this removes the embedded SHA-1 code.
      Patch from Guillem Jover.  (Closes: #816851)

 -- Guilhem Moulin <guilhem@guilhem.org>  Tue, 26 Apr 2016 00:04:47 +0200
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2016-05-04 22:02:10 UTC
Fails to compile
make -C pgpring pgpring
make[2]: Entering directory '/dev/shm/portage/app-crypt/signing-party-2.3/work/keyanalyze/pgpring'
x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I.     -march=native -O2 -pipe -MT pgppubring.o -MD -MP -MF .deps/pgppubring.Tpo -c -o pgppubring.o pgppubring.c
x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I.     -march=native -O2 -pipe -MT pgplib.o -MD -MP -MF .deps/pgplib.Tpo -c -o pgplib.o pgplib.c
x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I.     -march=native -O2 -pipe -MT lib.o -MD -MP -MF .deps/lib.Tpo -c -o lib.o lib.c
x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I.     -march=native -O2 -pipe -MT extlib.o -MD -MP -MF .deps/extlib.Tpo -c -o extlib.o extlib.c
x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I.     -march=native -O2 -pipe -MT pgppacket.o -MD -MP -MF .deps/pgppacket.Tpo -c -o pgppacket.o pgppacket.c
pgppacket.c:27:18: fatal error: sha1.h: No such file or directory
compilation terminated.
pgppubring.c:48:18: fatal error: sha1.h: No such file or directory
compilation terminated.
Makefile:396: recipe for target 'pgppacket.o' failed
make[2]: *** [pgppacket.o] Error 1
make[2]: *** Waiting for unfinished jobs....
Makefile:396: recipe for target 'pgppubring.o' failed
make[2]: *** [pgppubring.o] Error 1
mv -f .deps/extlib.Tpo .deps/extlib.Po
mv -f .deps/pgplib.Tpo .deps/pgplib.Po
mv -f .deps/lib.Tpo .deps/lib.Po
make[2]: Leaving directory '/dev/shm/portage/app-crypt/signing-party-2.3/work/keyanalyze/pgpring'
Makefile:16: recipe for target 'pgpring/pgpring' failed
Comment 2 Manuel Rüger (RETIRED) gentoo-dev 2016-08-31 21:58:13 UTC
Looks like this needs libmd

https://anonscm.debian.org/viewvc/pgp-tools?view=revision&revision=845
Comment 3 Manuel Rüger (RETIRED) gentoo-dev 2016-08-31 22:02:38 UTC
https://www.hadrons.org/software/libmd/
Comment 4 Manuel Rüger (RETIRED) gentoo-dev 2016-09-05 00:22:27 UTC
Added app-crypt/libmd to the tree and pushed 2.4

commit 213d8afa29406de781efee684a45f86b611e2d07
Author: Manuel Rüger <mrueg@gentoo.org>
Date:   Mon Sep 5 02:21:20 2016 +0200

    app-crypt/signing-party: Version bump to 2.4
    
    Gentoo-Bug: 582070
    
    Package-Manager: portage-2.3.0