Re: gpgv udebs

2015-08-20 Thread Cyril Brulebois
Hi, Daniel Kahn Gillmor (2015-08-19): > On Wed 2015-08-12 01:51:35 +0200, Daniel Kahn Gillmor wrote: > > > i believe the installer relies on gpgv for archive manifest signature > > verification. we have gpgv-udeb for that purpose, i think. > > One more followup about gnupg and udebs-- > > The

Re: gpgv udebs

2015-08-19 Thread Daniel Kahn Gillmor
On Wed 2015-08-12 01:51:35 +0200, Daniel Kahn Gillmor wrote: > i believe the installer relies on gpgv for archive manifest signature > verification. we have gpgv-udeb for that purpose, i think. One more followup about gnupg and udebs-- The gnupg packaging currently makes a gnupg-udeb in additio

Re: gpgv udebs

2015-08-12 Thread Didier 'OdyX' Raboud
Le mercredi, 12 août 2015, 02.39:23 Cyril Brulebois a écrit : > And thanks for getting in touch with us. Indeed. > Daniel Kahn Gillmor (2015-08-11): > > i believe the installer relies on gpgv for archive manifest > > signature verification. we have gpgv-udeb for that purpose, i > > think. > >

Re: [pkg-gnupg-maint] gpgv udebs

2015-08-12 Thread Daniel Kahn Gillmor
On Wed 2015-08-12 02:38:48 -0400, Werner Koch wrote: > The use of libksba is unfortunate: > > # FIXME: Libkeybox.a links to libksba thus we need to add libksba > # here, even that it is not used by gpg. A proper solution would > # either to split up libkeybox.a or to use a separate keybox da

Re: [pkg-gnupg-maint] gpgv udebs

2015-08-12 Thread Werner Koch
On Wed, 12 Aug 2015 01:51, d...@fifthhorseman.net said: > * libksba8 is the X.509 and CMS support library used by GnuPG. we >probably don't strictly need this for the installer (our archive >signatures use OpenPGP signatures and not CMS). I can work on a The use of libksba is unfortuna

Re: gpgv udebs

2015-08-11 Thread Cyril Brulebois
Hi all, And thanks for getting in touch with us. Daniel Kahn Gillmor (2015-08-11): > i believe the installer relies on gpgv for archive manifest signature > verification. we have gpgv-udeb for that purpose, i think. That's the idea, yeah. Grepping through all of our packages → see the results

gpgv udebs

2015-08-11 Thread Daniel Kahn Gillmor
hi debian installer folks-- this message is not urgent, just a heads-up to the debian installer folks (and the pkg-gnutls folks, since libksba comes up later) from a gnupg maintainer. (i don't think i'm subscribed to debian-boot, please keep me cc'ed!) i believe the installer relies on gpgv for