[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#834070: marked as done (developers-reference: include link to Riseup's "OpenPGP Best Practices")

Your message dated Fri, 13 Jul 2018 10:05:01 +0000
with message-id <E1fduwf-000HHe-OZ@fasolo.debian.org>
and subject line Bug#834070: fixed in developers-reference 3.4.20
has caused the Debian Bug report #834070,
regarding developers-reference: include link to Riseup's "OpenPGP Best Practices"
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
834070: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834070
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: developers-reference
Version: 3.4.18
Severity: wishlist
Tags: patch

The document "OpenPGP Best Practices"[1] is often recommended to new
contributors.  It is more up-to-date than the PGP FAQ.  It would be
great to include a link to this document in the Developer's Reference.

git-am(1)-compatible patch attached.

[1] https://riseup.net/en/security/message-security/openpgp/best-practices

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.5.0-2-686-pae (SMP w/2 CPU cores)
Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

developers-reference depends on no packages.

Versions of packages developers-reference recommends:
ii  debian-policy  3.9.8.0

Versions of packages developers-reference suggests:
ii  doc-base  0.10.7

-- no debconf information

-- 
Sean Whitton

From 26639c8ed362c9e2ace65c0663a0b32876f48479 Mon Sep 17 00:00:00 2001
From: Sean Whitton <spwhitton@spwhitton.name>
Date: Thu, 11 Aug 2016 11:34:30 -0700
Subject: [PATCH] add link to "OpenPGP Best Practices"

---
 common.ent           | 1 +
 developer-duties.dbk | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/common.ent b/common.ent
index 812a800..c1bb73d 100644
--- a/common.ent
+++ b/common.ent
@@ -138,6 +138,7 @@
 <!ENTITY url-gpl "https://www.gnu.org/copyleft/gpl.html";>
 <!ENTITY url-pgp-faq "http://www.cam.ac.uk.pgp.net/pgpnet/pgp-faq/";>
 <!ENTITY url-rfc2440 "https://www.rfc-editor.org/rfc/rfc2440.txt";>
+<!ENTITY url-openpgp-best-practices "https://riseup.net/en/security/message-security/openpgp/best-practices";>
 <!ENTITY url-openprojects "https://www.freenode.net/";>
 <!ENTITY url-oftc "http://www.oftc.net/oftc/";>
 <!ENTITY url-l10n-tp "https://translationproject.org/html/welcome.html";>
diff --git a/developer-duties.dbk b/developer-duties.dbk
index 1b5643f..e0e06fd 100644
--- a/developer-duties.dbk
+++ b/developer-duties.dbk
@@ -144,7 +144,8 @@ Be very careful with your private keys.  Do not place them on any public
 servers or multiuser machines, such as the Debian servers (see <xref
 linkend="server-machines"/>).  Back your keys up; keep a copy offline.  Read
 the documentation that comes with your software; read the <ulink
-url="&url-pgp-faq;">PGP FAQ</ulink>.
+url="&url-pgp-faq;">PGP FAQ</ulink> and <ulink
+url="&url-openpgp-best-practices;">OpenPGP Best Practices</ulink>.
 </para>
 <para>
 You need to ensure not only that your key is secure against being stolen, but
-- 
2.8.1

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message --- 
Source: developers-reference
Source-Version: 3.4.20

We believe that the bug you reported is fixed in the latest version of
developers-reference, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 834070@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Raphaël Hertzog <hertzog@debian.org> (supplier of updated developers-reference package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 13 Jul 2018 11:23:40 +0200
Source: developers-reference
Binary: developers-reference developers-reference-de developers-reference-fr developers-reference-ja developers-reference-ru developers-reference-it
Architecture: source
Version: 3.4.20
Distribution: unstable
Urgency: medium
Maintainer: Developers Reference Maintainers <debian-policy@lists.debian.org>
Changed-By: Raphaël Hertzog <hertzog@debian.org>
Description:
 developers-reference - guidelines and information for Debian developers
 developers-reference-de - guidelines and information for Debian developers, in German
 developers-reference-fr - guidelines and information for Debian developers, in French
 developers-reference-it - guidelines and information for Debian developers, in Italian
 developers-reference-ja - guidelines and information for Debian developers, in Japanese
 developers-reference-ru - guidelines and information for Debian developers, in Russian
Closes: 540852 544135 604193 773544 774837 798106 834070 874291 878033 883742 888978 896191
Changes:
 developers-reference (3.4.20) unstable; urgency=medium
 .
   [ Raphaël Hertzog ]
   * Team upload.
   * Reduce the large package tracker section to a few small paragraphs
     pointing to the real documentation hosted on
     https://qa.pages.debian.net/distro-tracker/
   * Apply typo/rewording patch from Paul Hardy. Closes: #878033
   * Update IRC channel list with better examples. Closes: #773544
   * Be more specific in the recommendation to use gender-neutral
     constructions. Thanks to Johannes Schauer <j.schauer@email.de>
     for the initial patch. Closes: #774837
   * Bump the minimal size of the GPG key to 2018 bits and put link
     to keyring.debian.org. Closes: #798106
   * Recommend using "which" to test availability of a command.
     Thanks to Axel Beckert for the patch. Closes: #883742
   * Point out that a non-working email is a policy violation. Improve
     MIA explanations. Closes: #604193, #544135
     Thanks to Caitlin Matos for the patch.
   * Replace some backticks with normal quotes in japanese translation
     to fix a build failure with LaTeX 2018. Closes: #896191
     Thanks to Hilmar Preuße for the patch.
   * Simplify generation of PUBDATE by relying on SOURCE_DATE_EPOCH.
   * Drop Marc 'HE' Brockschmidt <he@debian.org> from Uploaders.
 .
   [ Ansgar Burchardt ]
   * security uploads should go to *.security.upload.d.o (closes: #874291)
 .
   [ Julien Cristau ]
   * Update Vcs-* control fields.
   * Fix upload host name (ssh.upload.debian.org, not ssh.debian.org);
     closes: #888978.  Thanks, Thorsten Alteholz!
 .
   [ Sean Whitton ]
   * Include link to Riseup's "OpenPGP Best Practices" (closes: #834070)
   * Add section "Selecting the upload urgency" to best-pkging-practices
     (Closes: #540852).
 .
   [ Aurélien COUDERC ]
   * Fix CSS text color to avoid the HTML version being unreadable when
     using a light on dark default browser stylesheet.
   * d/control: Bump Standards-Version to 4.1.5, no change needed.
Checksums-Sha1:
 ac0259aeb579d2b642fcadef0564f6b45b85a56c 2091 developers-reference_3.4.20.dsc
 92f88160a7ea832cf57a14d6d289739cca721c27 657112 developers-reference_3.4.20.tar.xz
 36282caa7e00761e861c6544737dcae079c58a4a 6037 developers-reference_3.4.20_source.buildinfo
Checksums-Sha256:
 da7a75f91f9e8a2769483676da6d3a3dcee2423d0dbe550b47076db74993a37b 2091 developers-reference_3.4.20.dsc
 50518eabe0627b301624129da698e8b8688c0300f8cf708a817ddd1a3be7582d 657112 developers-reference_3.4.20.tar.xz
 59921cf0ebfc005821010fb130be36c52578bb46cc9440d4189e724fead4b5ec 6037 developers-reference_3.4.20_source.buildinfo
Files:
 ff251472824f335d82bbbe9b87523edf 2091 doc optional developers-reference_3.4.20.dsc
 aaaa86b0147307f960caeffd5d824a7c 657112 doc optional developers-reference_3.4.20.tar.xz
 ec817eec4c2f50ae1f01f41464db9418 6037 doc optional developers-reference_3.4.20_source.buildinfo

-----BEGIN PGP SIGNATURE-----
Comment: Signed by Raphael Hertzog

iQEzBAEBCgAdFiEE1823g1EQnhJ1LsbSA4gdq+vCmrkFAltIc8YACgkQA4gdq+vC
mrmSMggAov/gFn6QOu1Kl/ASQMKYCRvdmSV0e+3ISLh7K5jrWNL/LpW9BfE7m8Vg
/goPD8VgscZyKylvGGieq9JSJQlZXzs8WeD5yHBpF3IuKVmX7lY9Dia1r2Y11Hhp
0cXrfL1hP985CWcfjHIfi4sosLGMsSj9qbs+Krinq+4Vu7T5ZRt0hoHSPP6oiHfn
m84AJq7HyEUG4WhY9WQfTs4nl2W02izTg+HV4NGMgrw+P7x+h6DBg7xfs/8jAvte
PmEEadqxlxbHrIydLTd4c8ygOELhtFRFX7P5u2MpOajxapO9E61hKc0JeGMW9ZUu
YdN959zjqEL5/FuxLJMYNpjm0HEOVQ==
=w4G9
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: