Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 324785

Summary: <=evolution-2.31.2 does not support strong GPG keys
Product: Gentoo Linux Reporter: Hans de Graaff <graaff>
Component: New packagesAssignee: Gentoo Linux Gnome Desktop Team <gnome>
Status: RESOLVED FIXED    
Severity: normal CC: rcoffree
Priority: High Keywords: InVCS
Version: unspecified   
Hardware: All   
OS: All   
URL: https://bugzilla.gnome.org/show_bug.cgi?id=304415
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 339225    
Attachments: evolution-data-server patch
evolution patch

Description Hans de Graaff gentoo-dev Security 2010-06-20 10:04:41 UTC
The GnuPG and SMIME support in evolution only supports the SHA-1 hash signature, which makes it impossible to use stronger keys based on e.g. SHA-2. See the upsteam bug report for more details.

I have backported the upstream patches to evolution 2.28 and evolution 2.30. I'm currently testing these in my own overlay graaff. I'll attach the evolution 2.30 patches here as well.
Comment 1 Hans de Graaff gentoo-dev Security 2010-06-20 10:05:39 UTC
Created attachment 236033 [details, diff]
evolution-data-server patch
Comment 2 Hans de Graaff gentoo-dev Security 2010-06-20 10:06:04 UTC
Created attachment 236035 [details, diff]
evolution patch
Comment 3 Pacho Ramos gentoo-dev 2010-06-20 12:17:02 UTC
Looks better to wait for 2.32 since that patches break API:
https://bugzilla.gnome.org/show_bug.cgi?id=304415#c76
Comment 4 Pacho Ramos gentoo-dev 2010-07-05 21:34:05 UTC
Closing then, we will wait for 2.32
Comment 5 Hans de Graaff gentoo-dev Security 2010-07-06 05:08:44 UTC
(In reply to comment #4)
> Closing then, we will wait for 2.32
> 

Makes sense for the official tree, but I'll keep patches ebuilds for 2.28 and 2.30 in my overlay for those who need the stronger keys.
Comment 6 Pacho Ramos gentoo-dev 2010-07-06 09:31:17 UTC
Great to know, I will point people there is anyone contact us looking for the same :-)
Comment 7 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-08-31 14:38:26 UTC
*** Bug 334553 has been marked as a duplicate of this bug. ***
Comment 8 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-12-30 13:13:59 UTC
evolution-2.32 is now in tree.
Comment 9 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-12-30 13:14:12 UTC
Closing fixed, thanks for reporting.