FS#42739 - [gnupg] HKPS support

Attached to Project: Arch Linux
Opened by Mantas Mikulėnas (grawity) - Tuesday, 11 November 2014, 07:26 GMT
Last edited by Gaetan Bisson (vesath) - Saturday, 13 December 2014, 21:05 GMT
Task Type Bug Report
Category Packages: Testing
Status Closed
Assigned To Gaetan Bisson (vesath)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 2
Private No

Details

gnupg 2.1.0 is unable to connect to HKPS (HKP/HTTPS) keyservers.

It needs to be built with gnutls as a dependency (at least until the built-in ntbtls is finished).
This task depends upon

Closed by  Gaetan Bisson (vesath)
Saturday, 13 December 2014, 21:05 GMT
Reason for closing:  Implemented
Additional comments about closing:  gnupg-2.1.0-7 in [core]
Comment by Gaetan Bisson (vesath) - Tuesday, 11 November 2014, 18:10 GMT
Currently gnutls is in [extra] and depends on a few other packages from [extra]; I am a little reluctant to add all this to [core]. Do you have any idea whether ntbtls is expected to be ready in the near future?
Comment by Samir Nassar (snassar) - Thursday, 11 December 2014, 10:02 GMT
  • Field changed: Percent Complete (100% → 0%)
I request to have this re-opened because the packages as is broke existing functionality. Whatever dependencies GnuTLS brings into core has to be better than ntbtls which isn't even in extra.
Comment by Gaetan Bisson (vesath) - Thursday, 11 December 2014, 18:13 GMT
Who are you to say that GnuTLS "has to be better"? Are you a contributor to gnutls? To ntbtls? To gnupg? To Arch Linux?

If you have nothing constructive to contribute, there is nothing more to say. We are aware our current gnupg package does not support HKPS. Whining will do nothing to help fix that.
Comment by Samir Nassar (snassar) - Thursday, 11 December 2014, 18:27 GMT
I didn't say gnutls is better. I said, in the absense of ntbtls, having HKPS working with GnuTLS is better. Right now, GnuPG is crippled. [Edit: Removed reference to deviating from upstream due to technical inaccuracy.]
Comment by Gaetan Bisson (vesath) - Thursday, 11 December 2014, 19:36 GMT
Please. There is no deviation from upstream...

Loading...