Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 790248 - app-crypt/gnupg-2.3.0 unmasking
Summary: app-crypt/gnupg-2.3.0 unmasking
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Mikle Kolyada (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-05-14 18:11 UTC by Maciej S. Szmigiero
Modified: 2021-10-23 14:16 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Maciej S. Szmigiero 2021-05-14 18:11:04 UTC
Any particular reason why app-crypt/gnupg-2.3.0 is still package.mask'ed?

This GnuPG version brings important new features, especially support for using multiple card readers and tokens at the same time.

Thanks.
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-05-14 18:18:10 UTC
As per https://lists.gnu.org/archive/html/info-gnu/2021-04/msg00000.html, it is not a stable release and is for “testing”.
Comment 2 Maciej S. Szmigiero 2021-05-14 18:22:15 UTC
Thanks for the pointer - didn't know it was just a testing release.

Does this mean there are no plans to unmask 2.3.x?
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-05-14 18:24:04 UTC
No worries, I was curious at first too.

We’ll see what the maintainers say, but given how critical gpg is, I imagine they will wait either for 2.4.x (when this becomes stable) or at least a few more releases in to this series.
Comment 4 Lars Wendler (Polynomial-C) (RETIRED) gentoo-dev 2021-05-14 18:39:43 UTC
# ./app-crypt/gnupg-2.3.1/image/usr/bin/gpg2 --version
gpg (GnuPG) 2.3.1-unknown
libgcrypt 1.9.3-unknown
NOTE: THIS IS A DEVELOPMENT VERSION!
It is only intended for test purposes and should NOT be
used in a production environment or with production keys!
Copyright (C) 2021 Free Software Foundation, Inc.
License GNU GPL-3.0-or-later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


As long as "gpg2 --version" still emits the "DEVELOPMENT VERSION" warning I don't see a reason to unmask this.
Comment 5 Stuart Longland 2021-09-12 03:50:24 UTC
Release 2.3.2 omits this warning:

gpg (GnuPG) 2.3.2
libgcrypt 1.9.4-unknown
Copyright (C) 2021 Free Software Foundation, Inc.
License GNU GPL-3.0-or-later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
    
Home: /home/stuartl/.gnupg
Supported algorithms:
Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
        CAMELLIA128, CAMELLIA192, CAMELLIA256
AEAD: EAX, OCB
Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
Compression: Uncompressed, ZIP, ZLIB, BZIP2

However, I note there's either a bug in this release with regards to smart cards (doesn't work at all), or there's a migration procedure needed to make it work:
https://dev.gnupg.org/T1621#149542

So, more work to do on the 2.3 branch before it can be unmasked methinks.
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2021-09-12 03:56:47 UTC
(In reply to Stuart Longland from comment #5)
> Release 2.3.2 omits this warning:
> 

Right, soap looked into this and it turned out that it was actually not an experimental release at all -- it was a flaw in how the one of gnupg's homebrew macro works (us running eautoreconf triggered it and it got upset by the lack of some git files and assumed it was a dev release).

> gpg (GnuPG) 2.3.2
> libgcrypt 1.9.4-unknown
> Copyright (C) 2021 Free Software Foundation, Inc.
> License GNU GPL-3.0-or-later <https://gnu.org/licenses/gpl.html>
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.
>     
> Home: /home/stuartl/.gnupg
> Supported algorithms:
> Pubkey: RSA, ELG, DSA, ECDH, ECDSA, EDDSA
> Cipher: IDEA, 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH,
>         CAMELLIA128, CAMELLIA192, CAMELLIA256
> AEAD: EAX, OCB
> Hash: SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224
> Compression: Uncompressed, ZIP, ZLIB, BZIP2
> 
> However, I note there's either a bug in this release with regards to smart
> cards (doesn't work at all), or there's a migration procedure needed to make
> it work:
> https://dev.gnupg.org/T1621#149542
> 
> So, more work to do on the 2.3 branch before it can be unmasked methinks.

Thanks, this looks interesting.
Comment 7 Larry the Git Cow gentoo-dev 2021-10-06 02:55:44 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=783c8028990463f390175804ec02553ba3d1c5aa

commit 783c8028990463f390175804ec02553ba3d1c5aa
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-10-06 02:54:01 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-10-06 02:54:01 +0000

    profiles: add bug reference to gnupg 2.3.x mask
    
    Bug: https://bugs.gentoo.org/790248
    Signed-off-by: Sam James <sam@gentoo.org>

 profiles/package.mask | 1 +
 1 file changed, 1 insertion(+)
Comment 8 Larry the Git Cow gentoo-dev 2021-10-12 18:48:16 UTC
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=022ca5838e9da166a42cb5db0bfa590c66d953a0

commit 022ca5838e9da166a42cb5db0bfa590c66d953a0
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-10-12 18:47:39 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-10-12 18:47:45 +0000

    app-crypt/gnupg: add 2.3.3
    
    Enable tofu by default given tests need it
    and Python needs sqlite by default now too.
    
    Bug: https://bugs.gentoo.org/790248
    Signed-off-by: Sam James <sam@gentoo.org>

 app-crypt/gnupg/Manifest           |   1 +
 app-crypt/gnupg/gnupg-2.3.3.ebuild | 155 +++++++++++++++++++++++++++++++++++++
 2 files changed, 156 insertions(+)
Comment 9 Larry the Git Cow gentoo-dev 2021-10-23 14:16:26 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9b0e7351d14c57a287991e1923b85db57e33c4e0

commit 9b0e7351d14c57a287991e1923b85db57e33c4e0
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2021-10-23 14:15:41 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2021-10-23 14:15:41 +0000

    profiles: unmask gnupg 2.3.x
    
    It's considered production ready upstream and no known regressions.
    
    Closes: https://bugs.gentoo.org/790248
    Signed-off-by: Sam James <sam@gentoo.org>

 profiles/package.mask | 5 -----
 1 file changed, 5 deletions(-)