On 1/15/07, Jonas Karlsson <[EMAIL PROTECTED]> wrote:
> 2007/1/15, Lucas C. Villa Real <[EMAIL PROTECTED]>:
> > On 1/15/07, Jonas Karlsson <[EMAIL PROTECTED]> wrote:
> > > 2007/1/15, Lucas C. Villa Real <[EMAIL PROTECTED]>:
> > > > On 1/14/07, Jonatan Liljedahl <[EMAIL PROTECTED]> wrote:
> > > > > I often get this when trying to install a package:
> > > > >
> > > > > InstallPackage: Uncompressing to /Programs...
> > > > > which: gpgv not found, or it's not a program.
> > > > > VerifyProgram: GnuPG 1.4.x not installed.
> > > > > Traceback (most recent call last):
> > > > > File "<string>", line 9, in ?
> > > > > IOError: [Errno 2] No such file or directory: ''
> > > > > InstallPackage: Invalid signature. Package has been modified
> > > > >
> > > > > And then it's not symlinked.
> > > > > I have GnuPG 2.0.0 installed.
> > > >
> > > > I don't know why, but VerifyProgram/SignPackage depends on GnuPG
> > > > version 1.4.x. I don't know what makes our code tied to that version..
> > > > anyone?
> > > >
> > > GnuPG 2.x has a 2 on the end of each command that also exists in 1.x,
> > > so instead of gpgv it's called gpgv2 (same as gpg vs gpg2)
> >
> > So isn't it a matter of modifying our tools to use it also? Something like:
> > gpgv=`(which gpgv2 || which gpgv) 2> /dev/null`
> > gpg=`(which gpg2 || which gpg) 2> /dev/null`
> > ...
> > $gpg ${GPG_opts} ...
> >
> That should work.
>
> > I always thought there was a greater limitation on switching to v2.x..
> >
> Not more (afaik) than 2.x (1.9.x) wasn't considered stable until recently.
Ok. I'll test signing programs with 2.x tonight, then. Thanks!
--
Lucas
powered by /dev/dsp
_______________________________________________
gobolinux-devel mailing list
[email protected]
http://lists.gobolinux.org/mailman/listinfo/gobolinux-devel
