Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 324785 - <=evolution-2.31.2 does not support strong GPG keys
Summary: <=evolution-2.31.2 does not support strong GPG keys
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Gentoo Linux Gnome Desktop Team
URL: https://bugzilla.gnome.org/show_bug.c...
Whiteboard:
Keywords: InVCS
: 334553 (view as bug list)
Depends on:
Blocks: gnome2.32
  Show dependency tree
 
Reported: 2010-06-20 10:04 UTC by Hans de Graaff
Modified: 2010-12-30 13:14 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
evolution-data-server patch (evolution-data-server-2.30.1-sha2.patch,14.18 KB, patch)
2010-06-20 10:05 UTC, Hans de Graaff
Details | Diff
evolution patch (evolution-2.30.1.2-sha2.patch,17.75 KB, patch)
2010-06-20 10:06 UTC, Hans de Graaff
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Hans de Graaff gentoo-dev Security 2010-06-20 10:04:41 UTC
The GnuPG and SMIME support in evolution only supports the SHA-1 hash signature, which makes it impossible to use stronger keys based on e.g. SHA-2. See the upsteam bug report for more details.

I have backported the upstream patches to evolution 2.28 and evolution 2.30. I'm currently testing these in my own overlay graaff. I'll attach the evolution 2.30 patches here as well.
Comment 1 Hans de Graaff gentoo-dev Security 2010-06-20 10:05:39 UTC
Created attachment 236033 [details, diff]
evolution-data-server patch
Comment 2 Hans de Graaff gentoo-dev Security 2010-06-20 10:06:04 UTC
Created attachment 236035 [details, diff]
evolution patch
Comment 3 Pacho Ramos gentoo-dev 2010-06-20 12:17:02 UTC
Looks better to wait for 2.32 since that patches break API:
https://bugzilla.gnome.org/show_bug.cgi?id=304415#c76
Comment 4 Pacho Ramos gentoo-dev 2010-07-05 21:34:05 UTC
Closing then, we will wait for 2.32
Comment 5 Hans de Graaff gentoo-dev Security 2010-07-06 05:08:44 UTC
(In reply to comment #4)
> Closing then, we will wait for 2.32
> 

Makes sense for the official tree, but I'll keep patches ebuilds for 2.28 and 2.30 in my overlay for those who need the stronger keys.
Comment 6 Pacho Ramos gentoo-dev 2010-07-06 09:31:17 UTC
Great to know, I will point people there is anyone contact us looking for the same :-)
Comment 7 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-08-31 14:38:26 UTC
*** Bug 334553 has been marked as a duplicate of this bug. ***
Comment 8 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-12-30 13:13:59 UTC
evolution-2.32 is now in tree.
Comment 9 Gilles Dartiguelongue (RETIRED) gentoo-dev 2010-12-30 13:14:12 UTC
Closing fixed, thanks for reporting.