Your message dated Tue, 02 Jun 2009 18:02:47 +0000
with message-id <[email protected]>
and subject line Bug#440177: fixed in libgnupg-perl 0.10-1
has caused the Debian Bug report #440177,
regarding libgnupg-perl: Can't use unprotected private keys
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
440177: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=440177
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Subject: libgnupg-perl: Can't use unprotected private keys
Package: libgnupg-perl
Version: 0.9-9
Severity: normal
Tags: patch
*** Please type your report below this line ***
When trying to use an unprotected private key (without passphrase) it fails
and exits with error:
Protocol error: expected NEED_PASSPHRASE.* got GOOD_PASSPHRASE
An example of code that can trigger the error :
#!perl
use GnuPG;
my $gpg = new GnuPG();
$gpg->encrypt(
plaintext => 'plain.txt',
output => 'encryptsigned.dat',
recipient => 'me',
sign => 1,
);
This fails when the private key is passprotected (this is right), but fails
it too when the private
key has no password.
Equivalent commandline gpg works without problem ( gpg -ser me < plain.txt>
encryptsigned.dat )
Enabling trace and digging the code shows the error meessage originates at
the 'send_passphrase' function.
I propose a simple patch that simply returns from send_passphrase when the
password is not present:
--- /usr/share/perl5/GnuPG.pm 2007-08-06 16:19:44.000000000 +0200
+++ GnuPG.pm 2007-08-06 16:19:10.000000000 +0200
@@ -325,8 +325,6 @@
sub send_passphrase($$) {
my ($self,$passwd) = @_;
-
- return unless $passwd;
# GnuPG should now tell us that it needs a passphrase
my $cmd = $self->read_from_status;
Not fully tested but it works for me.
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-4-686
Locale: LANG=es_ES.UTF-8, LC_CTYPE=es_ES.UTF-8 (charmap=UTF-8)
Versions of packages libgnupg-perl depends on:
ii gnupg 1.4.6-2 GNU privacy guard - a free PGP
rep
libgnupg-perl recommends no packages.
-- no debconf information
nullpass.patch
Description: Binary data
--- End Message ---
--- Begin Message ---
Source: libgnupg-perl
Source-Version: 0.10-1
We believe that the bug you reported is fixed in the latest version of
libgnupg-perl, which is due to be installed in the Debian FTP archive:
libgnupg-perl_0.10-1.diff.gz
to pool/main/libg/libgnupg-perl/libgnupg-perl_0.10-1.diff.gz
libgnupg-perl_0.10-1.dsc
to pool/main/libg/libgnupg-perl/libgnupg-perl_0.10-1.dsc
libgnupg-perl_0.10-1_all.deb
to pool/main/libg/libgnupg-perl/libgnupg-perl_0.10-1_all.deb
libgnupg-perl_0.10.orig.tar.gz
to pool/main/libg/libgnupg-perl/libgnupg-perl_0.10.orig.tar.gz
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated libgnupg-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 02 Jun 2009 19:43:46 +0200
Source: libgnupg-perl
Binary: libgnupg-perl
Architecture: source all
Version: 0.10-1
Distribution: unstable
Urgency: low
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description:
libgnupg-perl - Perl module interface to GnuPG using GnuPG's coprocess
interface
Closes: 121472 440177
Changes:
libgnupg-perl (0.10-1) unstable; urgency=low
.
[ gregor herrmann ]
* Take over for the Debian Perl Group on maintainer's request:
http://lists.debian.org/debian-perl/2009/01/msg00120.html
* debian/control: Added: Vcs-Svn field (source stanza); Vcs-Browser field
(source stanza); Homepage field (source stanza); ${misc:Depends} and
${perl:depends} to Depends: field. Changed: Maintainer set to Debian Perl
Group <[email protected]> (was: Peter Palfrader
<[email protected]>); add /me to Uploaders.
* Add debian/watch.
* Set Standards-Version to 3.8.0.
* Split out patches against the upstream code.
* Set debhelper compatibility level to 7; adapt
debian/{control,compat,rules}.
* debian/copyright: switch to new format.
.
[ Ryan Niebur ]
* New upstream release (closes: #440177, #121472)
* Add myself to Uploaders
* Debian Policy 3.8.1
* remove auto_retrieve_missing_subkey.patch, gnupg1.2.5.patch,
pod.patch, policy_url.patch, and strict_subs.patch, all of which are
applied upstream
Checksums-Sha1:
8dfcdc4f6057b3187afd876a9aca14e72a5aa951 1271 libgnupg-perl_0.10-1.dsc
fe8b555891ec7a569486e9868f25285861a422a5 30344 libgnupg-perl_0.10.orig.tar.gz
b831b5b511d6df5a0344395a4f173dde213f1eef 2196 libgnupg-perl_0.10-1.diff.gz
b4b8c553f677a29b2b9819d68b2398b4845e3513 35424 libgnupg-perl_0.10-1_all.deb
Checksums-Sha256:
aa38de28a5b4e97599b1fa712fab11c47266df8e8e83577c2bd1d01916a29da3 1271
libgnupg-perl_0.10-1.dsc
89bc40a955058dd6fe9321e7301d896ec56cbeb19ccb20fad1c14f6a345d9f10 30344
libgnupg-perl_0.10.orig.tar.gz
905cf4941e2fa99549d17239d83eaf6bdae90b145c91bd2e6415d86cb3df3ebd 2196
libgnupg-perl_0.10-1.diff.gz
dba718ae32a6011adb4ca2f1e32313c301ef9d39e3c65ee505a425e16c0bf523 35424
libgnupg-perl_0.10-1_all.deb
Files:
443c2617cc7d3cd3f5a25bc62284a8ce 1271 perl optional libgnupg-perl_0.10-1.dsc
b7a41e7364c1e923f28af285adabe467 30344 perl optional
libgnupg-perl_0.10.orig.tar.gz
f9b54fb970b4598847c3b59022acd613 2196 perl optional
libgnupg-perl_0.10-1.diff.gz
54a07b070b385498acaa15f29888a3f8 35424 perl optional
libgnupg-perl_0.10-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkolZVEACgkQOzKYnQDzz+TNHQCeJSEsIDqGE6PO5l9YuRPGJI8g
V/4AoOhYrmO/vCHYYcI7Z5igMZtpfiHM
=MUSz
-----END PGP SIGNATURE-----
--- End Message ---
