I have observed that gnupg does not directly depend on curl/libcurl anymore. [ebuild R ] app-crypt/gnupg-2.4.7::gentoo USE="bzip2 nls readline smartcard ssl tofu usb -doc -ldap (-selinux) -test -tools -tpm -user-socket -verify-sig -wks-server" 0 KiB Using these USE flags (the basic default ones). ``` stefan /work # qa-vdb gnupg VDB: detected possibly incorrect RDEPEND (app-crypt/gnupg-2.4.7) dev-db/sqlite | dev-db/sqlite:3 net-misc/curl < stefan /work # ``` Scanelfs: ``` stefan /home/work # qlist -e gnupg | xargs scanelf -BF '%n' | grep -i curl stefan /home/work # ``` Even grep'ing the source for curl doesn't find no actual usage. Reproducible: Always Steps to Reproduce: 1. emerge -C curl 2. emerge gnupg 3. observe
Created attachment 920335 [details] emerge-info-gnupg
The dep was added in: commit a3b20449d14942a7273a89931735cfb51ed1278e Author: Robin H. Johnson <robbat2@gentoo.org> Date: Wed Mar 16 22:31:58 2005 +0000 virtual/mta re-added for mailto support. new network code using CURL provides FTPS support. Removed the use ppc-macos && use caps hackery, since ppc-macos has caps in use.mask and t his case will never happen. Re-enabled photo-viewers as xli is available again, everywhere except arm. Spelling errors fixed. The ECC patch for 1.4.0 applies perfectly still, only the version number in configure needs tweaking. Add a proper src_test that works, fixing bug #80044. This release also fixes mail signatures as per bug #76440. This release solves security bug #85547. (Portage version: 2.0.51.19) It became unconditional (no more USE=curl) in: commit 5636d4c95d0d2cfbc6b96d2dc96b64f396a3eb8d Author: Alon Bar-Lev <alonbl@gentoo.org> Date: Thu Feb 8 15:29:59 2007 +0000 Added curl dependency, bug#165922, thanks to Harald van Dijk (Portage version: 2.1.2-r8) (for 2.x)
I think the last remaining true use of curl was dropped in: commit 62b2cee85f15ee083896efdb44d10208ef1212a7 Author: Werner Koch <wk@gnupg.org> Date: Mon Apr 20 17:39:20 2015 +0200 Remove the obsolete keyserver directory from the repo. -- We also merge dirmngr/ChangeLog.1 into dirmngr/ChangeLog-2011 and rename keyserver/ChangeLog-2011 to dirmngr/ChangeLog-2011-ks. in gnupg.git.
(In reply to Sam James from comment #3) > I think the last remaining true use of curl was dropped in: > > commit 62b2cee85f15ee083896efdb44d10208ef1212a7 > Author: Werner Koch <wk@gnupg.org> > Date: Mon Apr 20 17:39:20 2015 +0200 > > Remove the obsolete keyserver directory from the repo. > > -- > > We also merge dirmngr/ChangeLog.1 into dirmngr/ChangeLog-2011 > and rename keyserver/ChangeLog-2011 to dirmngr/ChangeLog-2011-ks. > > in gnupg.git. ... and commit 2540a4b674a17b45ec33f43f26e830e74ff0afed Author: Werner Koch <wk@gnupg.org> Date: Wed Jun 25 20:25:28 2014 +0200 build: Remove unused options. * configure.ac: Remove option --build-agent-only. (FAKE_CURL, GPGKEYS_CURL): Remove check for cURL (GPGKEYS_MAILTO): Remove ac_subst but keep the currently unused SENDMAIL check. (GPGKEYS_KDNS): Remove ac_subst. * autogen.rc (final_info): Remove suggestion to use the removed option --enable-mailto.
The bug has been closed via the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=97ad37af8d4c93583129d45b3f6d95b684aeccea commit 97ad37af8d4c93583129d45b3f6d95b684aeccea Author: Stefan Cristian B. <stefan.cristian+git@rogentos.ro> AuthorDate: 2025-03-07 16:28:35 +0000 Commit: Sam James <sam@gentoo.org> CommitDate: 2025-03-07 17:16:12 +0000 app-crypt/gnupg: remove curl dep from gnupg * Apparently gnupg 2.4.x+ does not depend on curl/libcurl anymore. [sam: Revbump, drop from older versions too. See analysis in bug.] Closes: https://bugs.gentoo.org/950756 Signed-off-by: Stefan Cristian B. <stefan.cristian+git@rogentos.ro> Closes: https://github.com/gentoo/gentoo/pull/40946 Signed-off-by: Sam James <sam@gentoo.org> app-crypt/gnupg/{gnupg-2.2.45.ebuild => gnupg-2.2.45-r1.ebuild} | 1 - app-crypt/gnupg/{gnupg-2.4.6-r1.ebuild => gnupg-2.4.6-r2.ebuild} | 1 - app-crypt/gnupg/{gnupg-2.4.7.ebuild => gnupg-2.4.7-r1.ebuild} | 1 - app-crypt/gnupg/{gnupg-2.5.1.ebuild => gnupg-2.5.1-r1.ebuild} | 1 - 4 files changed, 4 deletions(-)