Bug #16387

hOpenpgp-tools doesn't work since GnuPG 2.1

Added by goupille 2019-01-24 14:12:34 . Updated 2019-01-24 17:11:07 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Target version:
Tails_4.0
Start date:
2019-01-24
Due date:
% Done:

100%

Feature Branch:
Type of work:
Research
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

GnuPG 2.1 is storing keys in /.gnupg/pubring.kbx, hOpenpgp-tools needs them to be in/.gnupg/pubring.gpg so it ends up in an error.

Subtasks

Related issues

Related to Tails - Feature #15291: Remove less popular packages that users could install themselves Resolved 2018-04-17

History

#1 Updated by goupille 2019-01-24 14:12:54

  • related to Feature #15291: Remove less popular packages that users could install themselves added

#2 Updated by intrigeri 2019-01-24 17:11:08

  • Status changed from Confirmed to Resolved
  • Assignee deleted (intrigeri)
  • Target version set to Tails_4.0
  • % Done changed from 0 to 100

Amusingly, this was reported in Debian (https://bugs.debian.org/868769) by… Cody Brownstein :)

This was fixed in 0.21.2-1. Buster has 0.21.2-2. I don’t think it’s worth spending time on fixing this for Tails 3.x (the fact this problem just got reported, 1.5 years after the 3.0 release which introduced this problem, suggests it’s no big deal; and IIRC there’s a workaround).

Note that this package was introduced without any kind of justification in commit:280a17d4238aa1aa2072f8b6b2c78f991b94c731, probably because it’s needed to check one’s compliance with https://riseup.net/en/security/message-security/openpgp/best-practices.

I would support a proposal to remove this package from our default set.