Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 950756 - app-crypt/gnupg-2.4.7: gnupg does not depend on curl (anymore?)
Summary: app-crypt/gnupg-2.4.7: gnupg does not depend on curl (anymore?)
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2025-03-07 16:45 UTC by Stefan Cristian Brindusa
Modified: 2025-03-20 03:02 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge-info-gnupg (emerge-info-gnupg.txt,6.30 KB, text/plain)
2025-03-07 16:47 UTC, Stefan Cristian Brindusa
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Stefan Cristian Brindusa 2025-03-07 16:45:59 UTC
I have observed that gnupg does not directly depend on curl/libcurl anymore.

[ebuild   R    ] app-crypt/gnupg-2.4.7::gentoo  USE="bzip2 nls readline smartcard ssl tofu usb -doc -ldap (-selinux) -test -tools -tpm -user-socket -verify-sig -wks-server" 0 KiB

Using these USE flags (the basic default ones).

```
stefan /work # qa-vdb gnupg
VDB: detected possibly incorrect RDEPEND (app-crypt/gnupg-2.4.7)
dev-db/sqlite | dev-db/sqlite:3
net-misc/curl < 
stefan /work #
```

Scanelfs:

```
stefan /home/work # qlist -e gnupg |  xargs scanelf -BF '%n' | grep -i curl
stefan /home/work #
```

Even grep'ing the source for curl doesn't find no actual usage.


Reproducible: Always

Steps to Reproduce:
1. emerge -C curl
2. emerge gnupg
3. observe
Comment 1 Stefan Cristian Brindusa 2025-03-07 16:47:31 UTC
Created attachment 920335 [details]
emerge-info-gnupg
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-03-07 17:11:35 UTC
The dep was added in:

commit a3b20449d14942a7273a89931735cfb51ed1278e
Author: Robin H. Johnson <robbat2@gentoo.org>
Date:   Wed Mar 16 22:31:58 2005 +0000

    virtual/mta re-added for mailto support.  new network code using CURL provides FTPS support. Removed the use ppc-macos && use caps hackery, since ppc-macos has caps in use.mask and t
his case will never happen. Re-enabled photo-viewers as xli is available again, everywhere except arm.  Spelling errors fixed. The ECC patch for 1.4.0 applies perfectly still, only the version number in configure needs tweaking. Add a proper src_test that works, fixing bug #80044. This release also fixes mail signatures as per bug #76440. This release solves security bug #85547.
    (Portage version: 2.0.51.19)

It became unconditional (no more USE=curl) in:

commit 5636d4c95d0d2cfbc6b96d2dc96b64f396a3eb8d
Author: Alon Bar-Lev <alonbl@gentoo.org>
Date:   Thu Feb 8 15:29:59 2007 +0000

    Added curl dependency, bug#165922, thanks to Harald van Dijk
    (Portage version: 2.1.2-r8)

(for 2.x)
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-03-07 17:13:07 UTC
I think the last remaining true use of curl was dropped in:

commit 62b2cee85f15ee083896efdb44d10208ef1212a7
Author: Werner Koch <wk@gnupg.org>
Date:   Mon Apr 20 17:39:20 2015 +0200

    Remove the obsolete keyserver directory from the repo.

    --

    We also merge dirmngr/ChangeLog.1 into dirmngr/ChangeLog-2011
    and rename keyserver/ChangeLog-2011 to dirmngr/ChangeLog-2011-ks.

in gnupg.git.
Comment 4 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2025-03-07 17:13:24 UTC
(In reply to Sam James from comment #3)
> I think the last remaining true use of curl was dropped in:
> 
> commit 62b2cee85f15ee083896efdb44d10208ef1212a7
> Author: Werner Koch <wk@gnupg.org>
> Date:   Mon Apr 20 17:39:20 2015 +0200
> 
>     Remove the obsolete keyserver directory from the repo.
> 
>     --
> 
>     We also merge dirmngr/ChangeLog.1 into dirmngr/ChangeLog-2011
>     and rename keyserver/ChangeLog-2011 to dirmngr/ChangeLog-2011-ks.
> 
> in gnupg.git.

... and

commit 2540a4b674a17b45ec33f43f26e830e74ff0afed
Author: Werner Koch <wk@gnupg.org>
Date:   Wed Jun 25 20:25:28 2014 +0200

    build: Remove unused options.

    * configure.ac: Remove option --build-agent-only.
    (FAKE_CURL, GPGKEYS_CURL): Remove check for cURL
    (GPGKEYS_MAILTO): Remove ac_subst but keep the currently unused
    SENDMAIL check.
    (GPGKEYS_KDNS): Remove ac_subst.
    * autogen.rc (final_info): Remove suggestion to use the removed option
    --enable-mailto.
Comment 5 Larry the Git Cow gentoo-dev 2025-03-07 17:16:59 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=97ad37af8d4c93583129d45b3f6d95b684aeccea

commit 97ad37af8d4c93583129d45b3f6d95b684aeccea
Author:     Stefan Cristian B. <stefan.cristian+git@rogentos.ro>
AuthorDate: 2025-03-07 16:28:35 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2025-03-07 17:16:12 +0000

    app-crypt/gnupg: remove curl dep from gnupg
    
    * Apparently gnupg 2.4.x+ does not depend on curl/libcurl
      anymore.
    
    [sam: Revbump, drop from older versions too. See analysis in bug.]
    
    Closes: https://bugs.gentoo.org/950756
    Signed-off-by: Stefan Cristian B. <stefan.cristian+git@rogentos.ro>
    Closes: https://github.com/gentoo/gentoo/pull/40946
    Signed-off-by: Sam James <sam@gentoo.org>

 app-crypt/gnupg/{gnupg-2.2.45.ebuild => gnupg-2.2.45-r1.ebuild}  | 1 -
 app-crypt/gnupg/{gnupg-2.4.6-r1.ebuild => gnupg-2.4.6-r2.ebuild} | 1 -
 app-crypt/gnupg/{gnupg-2.4.7.ebuild => gnupg-2.4.7-r1.ebuild}    | 1 -
 app-crypt/gnupg/{gnupg-2.5.1.ebuild => gnupg-2.5.1-r1.ebuild}    | 1 -
 4 files changed, 4 deletions(-)