[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1089843: two jetring scripts pass an obsolete switch to gpg



Package: jetring
Version: 0.31
Severity: minor

jetring-apply and jetring-review pass `--secret-keyring` to gpg to provide a
dummy location for the secret keyring, but gpg no longer supports it.
Currently, it's benign because gpg just emits a warning:

	$ schroot -c sid -- make -C example build
	make: Entering directory '/space/azazel/work/git/repos/salsa/debian/jetring/example'
	jetring-build -I debian-maintainers.gpg debian-maintainers
	[...]
	Applying debian-maintainers/add-holger ...
	gpg --import
>>>>>>>	gpg: WARNING: "--secret-keyring" is an obsolete option - it has no effect
	gpg: key 5072D036AC583520: 2 duplicate signatures removed
	gpg: key 5072D036AC583520: 1215 signatures not checked due to missing keys
	gpg: /tmp/jetring.tJozHjIwtf/trustdb.gpg: trustdb created
	gpg: key 5072D036AC583520: public key "Holger Levsen <holger@layer-acht.org>" imported
	gpg: Total number processed: 1
	gpg:               imported: 1
	gpg operation complete
	[...]

However, this switch is not required because these scripts do not handle secret
keys and set `GNUPGHOME` to a temporary directory anyway.  Therefore, it can be
removed.

Will fix and upload.

-- System Information:
Debian Release: trixie/sid
  APT prefers testing-debug
  APT policy: (990, 'testing-debug'), (990, 'testing'), (900, 'stable-updates'), (900, 'stable-security'), (900, 'stable-debug'), (900, 'stable'), (99, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.11.7-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: SELinux: enabled - Mode: Permissive - Policy name: default

Versions of packages jetring depends on:
ii  gnupg  2.2.45-2
ii  perl   5.40.0-8

jetring recommends no packages.

jetring suggests no packages.


Reply to: