user production@infomaniak.com usertag 849845 + infomaniak.com-authentication thanks Hi Daniel, On Wed, 18 Jan 2017 02:37:51 -0500, Daniel Kahn Gillmor wrote: > On Mon 2017-01-16 16:14:01 -0500, Luca Capello wrote: > > Any news on this? At work we have recently deployed OpenPGP (via > > YubiKey 4) for all the sysadmins, installing GnuPG 2 on jessie with the > > following trick: > > there is a known bug (in particular, 849845, upstream 2902) affecting > dirmngr in stretch and sid, which makes it very difficult for certain > common configurations to retrieve keys from the network. i'm reluctant > to inflict them on jessie users, and am hoping to get that resolved > before we go with the backport. Thank you for the explanation, I see that the bug has been reassigned to tor since the dirmngr part has been fixed, very good. Nevertheless, IMHO a GnuPG 2 was anyway useful, since it would have not affectced the main functionality (i.e. signing, encrypting and SSH, even with a YubiKey/smartcard). To be clear, your call for the official backport ;-) > > From a quick look, the following are the Build-Depends: needing a > > backport as well: FWIW, for the jessie-backports below I decided to: - use debhelper from jessie-backports as well, instead of having a bigger delta. - remove all mingw-related binary packages, because other than missing dependencies, I do not think they are useful for their primary target, i.e. d-i on Windows. > > libassuan-dev --8<---------------cut here---------------start------------->8--- libassuan (2.4.3-2~bpo8+1) jessie-backports; urgency=medium * Rebuild for jessie-backports. * debian/control: + add myself to Uploaders:. + remove Build-Depends-Indep: and libassuan-mingw-w64-dev binary package, no libgpg-error-mingw-w64-dev. * debian/gbp.conf: + add debian-branch=jessie-backports. -- Luca Capello <luca.capello@infomaniak.com> Sat, 28 Jan 2017 16:12:37 +0100 --8<---------------cut here---------------end--------------->8--- Working fine on my jessie-backports with gnupg2_2.1.11-7. > > libgcrypt20-dev "[2017-01-26] Accepted 1.7.6-1 in unstable (medium) (Andreas Metzler)" Cc:ing the Debian GnuTLS Maintainers list and Bcc:ing Andreas Metzler who did the upload: is that version target for stretch, so the one I should backport for GnuPG 2? > > libgpg-error-dev "[2017-01-18] Accepted 1.26-2 in unstable (medium) (Daniel Kahn Gillmor)" I guess this is the version intended for stretch, right? If so, I will wait for it to migrate to stretch before doing the backport (ATM "Too young, only 9 of 10 days old"). > > libksba-dev --8<---------------cut here---------------start------------->8--- libksba (1.3.5-2~bpo8+1) jessie-backports; urgency=medium * Rebuild for jessie-backports. * debian/control: + add myself to Uploaders:. + remove Build-Depends-Indep: and libksba-mingw-w64-dev binary package, no libgpg-error-mingw-w64-dev. -- Luca Capello <luca.capello@infomaniak.com> Sat, 28 Jan 2017 22:39:02 +0100 --8<---------------cut here---------------end--------------->8--- Working fine on my jessie-backports with gnupg2_2.1.11-7. > > libnpth0-dev --8<---------------cut here---------------start------------->8--- npth (1.3-1~bpo8+1) jessie-backports; urgency=medium * Rebuild for jessie-backports. * debian/control: + add myself to Uploaders:. + remove Build-Depends-Indep: and libnpth-mingw-w64-dev binary package, "/usr/bin/i686-w64-mingw32-ld: .libs/libnpth-0.dll.def:5: syntax error". * debian/gbp.conf: + add debian-branch=jessie-backports. -- Luca Capello <luca.capello@infomaniak.com> Sat, 28 Jan 2017 16:48:34 +0100 --8<---------------cut here---------------end--------------->8--- Working fine on my jessie-backports with gnupg2_2.1.11-7. I will upload the three backports above at the beginning of the next week after having tested them again at work and if no one says anything before. Daniel, what do you think about adding the jessie-backports branches I have locally to the corresponding Git repositories on Alioth? Thx, bye, Gismo / Luca -- Luca Capello Administrateur GNU/Linux Infomaniak Network SA
Attachment:
signature.asc
Description: Digital signature