Skip to content
Snippets Groups Projects
Commit b83114da authored by Guillem Jover's avatar Guillem Jover
Browse files

Dpkg::Backend::GnuPG: Ensure future signing interop with gpg --openpgp

GnuPG upstream has decided to get out of the standardizing process for
OpenPGP, and instead is trying to push its own proprietary fork based on
an old draft that did not have consensus within the IETF working group.

This is going to be a source of interoperability problems, but we can
mitigate them somewhat when creating signatures by requiring compliance
with the OpenPGP RFC, even if it's going to be locked into an old version,
as later ones are not planned to get implemented. More so, given that the
latest releases of GnuPG have been switched to default to the proprietary
draft.
parent eb86aaa9
No related branches found
No related tags found
1 merge request!4Update crimson to version from bookworm
......@@ -257,6 +257,7 @@ sub inline_sign {
my @exec = ($self->{cmd});
push @exec, _gpg_options_weak_digests();
push @exec, qw(--utf8-strings --textmode --armor);
push @exec, '--openpgp';
if ($key->type eq 'keyfile') {
# Promote the keyfile keyhandle to a keystore, this way we share the
# same gpg-agent and can get any password cached.
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment