Re: GnuPG 2.2.36 released

2022-07-13 Thread Michael Richardson

Todd Zullinger via Gnupg-users  wrote:
> It's frustrating that the releases are signed with a cipher that cannot
> be verified on a reasonably popular distro.

At least, multiple signatures could be made.

--
Michael Richardson. o O ( IPv6 IøT consulting )
   Sandelman Software Works Inc, Ottawa and Worldwide






signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 2.2.36 released

2022-07-13 Thread Konstantin Ryabitsev via Gnupg-users
On Wed, Jul 13, 2022 at 09:22:36AM -0400, Todd Zullinger via Gnupg-users wrote:
> > Maybe it helps to report the problem of missing crypto algorithms to your
> > GNU/Linux distribution.
> 
> They aren't really missing but rather intentionally removed
> due to legal issues on Fedora/Red Hat.  This came up not so
> long ago:
> 
> https://lists.gnupg.org/pipermail/gnupg-users/2022-May/066054.html

Correct. RH considers Brainpool curves potentially patent-encumbered.

> With the current Fedora (36), it's possible to enable these
> ciphers via '--with brainpool' when building the libgcrypt
> srpm.
> 
> Hopefully the legal issues will be cleared sometime soon and
> Fedora will stop stripping brainpool.
> 
> It's frustrating that the releases are signed with a cipher
> that cannot be verified on a reasonably popular distro.

Indeed! For now, I worked around by verifying the signature on the swdb.lst
file on a system where I have gnupg22-static installed, so I was able to build
updated packages for my copr repos.

Thanks,
-Konstantin


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 2.2.36 released

2022-07-13 Thread Todd Zullinger via Gnupg-users
Bernhard Reiter wrote:
> Am Montag 11 Juli 2022 14:50:24 schrieb Konstantin Ryabitsev via Gnupg-users:
>>> See https://dev.gnupg.org/T5949#159890 for why it doesn't work for you.
>>
>> Ah, okay, that's unfortunate. I guess I'll skip this release, since I can't
>> verify it without building gnupg from scratch (without verifying it first).
> 
> Maybe it helps to report the problem of missing crypto algorithms to your
> GNU/Linux distribution.

They aren't really missing but rather intentionally removed
due to legal issues on Fedora/Red Hat.  This came up not so
long ago:

https://lists.gnupg.org/pipermail/gnupg-users/2022-May/066054.html

With the current Fedora (36), it's possible to enable these
ciphers via '--with brainpool' when building the libgcrypt
srpm.

Hopefully the legal issues will be cleared sometime soon and
Fedora will stop stripping brainpool.

It's frustrating that the releases are signed with a cipher
that cannot be verified on a reasonably popular distro.

-- 
Todd


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 2.2.36 released

2022-07-13 Thread Bernhard Reiter
Hi Ralf,

Am Donnerstag 07 Juli 2022 05:35:57 schrieb Ralph Seichter via Gnupg-users:
> GnuPG for OS X / macOS version 2.2.36 is now available via the URL
> https://sourceforge.net/projects/gpgosx/files/ .
>
> This is the first relase since Patrick Brunschwig passed stewardship of
> the project to me,

thanks for maintaining the package!

(And many thanks to Patrick for having done so before!)

Best Regards,
Bernhard

-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: GnuPG 2.2.36 released

2022-07-13 Thread Bernhard Reiter
Am Montag 11 Juli 2022 14:50:24 schrieb Konstantin Ryabitsev via Gnupg-users:
> > See https://dev.gnupg.org/T5949#159890 for why it doesn't work for you.
>
> Ah, okay, that's unfortunate. I guess I'll skip this release, since I can't
> verify it without building gnupg from scratch (without verifying it first).

Maybe it helps to report the problem of missing crypto algorithms to your
GNU/Linux distribution.


-- 
https://intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter


signature.asc
Description: This is a digitally signed message part.
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users