Quoting Benjamin Cama (benjamin.cama@telecom-bretagne.eu): > Hi, > > Pulling gnupg just to extract the cleartext of a PGP signed message > seems a bit too much for me. I stumbled upon this while in > debian-installer, which didn't depend on gnupg, only pgpv, until now. > This looks really overkill. Please find attached a better fix, to me, > only using sed (and compatible with the minimal busybox sed found in > d-i). It should extract anything according to RFC 4880 cleartext signed > message format, according to my reading of it. > > I don't reopen this bug as I don't know what is the policy about it > currently, but really consider my solution, please. Thanks for your input. Julien Cristau recently committed another fix, that drops the supprot of InRelease files, in d-i, with the same reslt of turning gpg back into a Recommends. We now need to get this into wheezy, indeed.
Attachment:
signature.asc
Description: Digital signature