2024-03-08 22:44:56 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Mar 8 13:14:00 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.4.5:
|
|
|
|
* gpg,gpgv: New option --assert-pubkey-algo. [T6946]
|
|
|
|
* gpg: Emit status lines for errors in the compression layer. [T6977]
|
|
|
|
* gpg: Fix invocation with --trusted-keys and --no-options. [T7025]
|
|
|
|
* gpgsm: Allow for a longer salt in PKCS#12 files. [T6757]
|
|
|
|
* gpgtar: Make --status-fd=2 work on Windows. [T6961]
|
|
|
|
* scd: Support for the ACR-122U NFC reader. [rG1682ca9f01]
|
|
|
|
* scd: Suport D-TRUST ECC cards. [T7000,T7001]
|
|
|
|
* scd: Allow auto detaching of kernel drivers; can be disabled with
|
|
|
|
the new compatibility-flag ccid-no-auto-detach. [rGa1ea3b13e0]
|
|
|
|
* scd: Allow setting a PIN length of 6 also with a reset code for
|
|
|
|
openpgp cards. [T6843]
|
|
|
|
* agent: Allow GET_PASSPHRASE in restricted mode. [rGadf4db6e20]
|
|
|
|
* dirmngr: Trust system's root CAs for checking CRL issuers. [T6963]
|
|
|
|
* dirmngr: Fix regression in 2.4.4 in fetching keys via hkps. [T6997]
|
|
|
|
* gpg-wks-client: Make option --mirror work properly w/o specifying
|
|
|
|
domains. [rG37cc255e49]
|
|
|
|
* g13,gpg-wks-client: Allow command style options as in "g13 mount
|
|
|
|
foo". [rGa09157ccb2]
|
|
|
|
* Allow tilde expansion for the foo-program options. [T7017]
|
|
|
|
* Make the getswdb.sh tool usable outside the GnuPG tree.
|
|
|
|
* Release-info: https://dev.gnupg.org/T6960
|
|
|
|
* Update the required versions for the dependencies.
|
|
|
|
|
2024-01-26 11:36:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jan 25 18:51:03 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.4.4: [bsc#1219191]
|
|
|
|
* gpg: Do not keep an unprotected smartcard backup key on disk.
|
|
|
|
See https://gnupg.org/blog/20240125-smartcard-backup-key.html
|
|
|
|
for a security advisory. [T6944]
|
|
|
|
* gpg: Allow to specify seconds since Epoch beyond 2038 on 32-bit
|
|
|
|
platforms. [T6736]
|
|
|
|
* gpg: Fix expiration time when Creation-Date is specified. [T5252]
|
|
|
|
* gpg: Add support for Subkey-Expire-Date. [rG96b69c1866]
|
|
|
|
* gpg: Add option --with-v5-fingerprint. [T6705]
|
|
|
|
* gpg: Add sub-option ignore-attributes to --import-options.
|
|
|
|
* gpg: Add --list-filter properties sig_expires/sig_expires_d.
|
|
|
|
* gpg: Fix validity of re-imported keys. [T6399]
|
|
|
|
* gpg: Report BEGIN_ status before examining the input. [T6481]
|
|
|
|
* gpg: Don't try to compress a read-only keybox. [T6811]
|
|
|
|
* gpg: Choose key from inserted card over a non-inserted card. [T6831]
|
|
|
|
* gpg: Allow to create revocations even with non-compliant algos. [T6929]
|
|
|
|
* gpg: Fix regression in the Revoker keyword of the parameter file. [T6923]
|
|
|
|
* gpg: Improve error message for expired default keys. [T4704]
|
|
|
|
* gpgsm: Add --always-trust feature. [T6559]
|
|
|
|
* gpgsm: Support ECC certificates in de-vs mode. [T6802]
|
|
|
|
* gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
|
|
|
|
* gpgsm: No not show the pkcs#12 passphrase in debug output. [T6654]
|
|
|
|
* keyboxd: Timeout on failure to get the database lock. [T6838]
|
|
|
|
* agent: Update the key stubs only if really modified. [T6829]
|
|
|
|
* scd: Add support for certain Starcos 3.2 cards. [rG5304c9b080]
|
|
|
|
* scd: Add support for CardOS 5.4 cards. [rG812f988059]
|
|
|
|
* scd: Add support for D-Trust 4.1/4.4 cards. [rG0b85a9ac09]
|
|
|
|
* scd: Add support for Smartcafe Expert 7.0 cards. [T6919]
|
|
|
|
* scd: Add a length check for a new PIN. [T6843]
|
|
|
|
* tpm: Fix keytotpm handling in the agent. [rG9909f622f6]
|
|
|
|
* tpm: Fixes for the TPM test suite. [T6052]
|
|
|
|
* dirmngr: New option --ignore-crl-extensions. [T6545]
|
|
|
|
* dirmngr: Support config value "none" to disable the default
|
|
|
|
keyserver. [T6708]
|
|
|
|
* dirmngr: Fix handling of the HTTP Content-Length. [rGa5e33618f4]
|
|
|
|
* gpgconf: Add commands --lock and --unlock. [rG93b5ba38dc]
|
|
|
|
* gpgconf: Add keyword socketdir to gpgconf.ctl. [rG239c1fdc28]
|
|
|
|
* gpgconf: Adjust the -X command for the new VERSION file format. [T6918]
|
|
|
|
* wkd: Use export-clean for gpg-wks-client's --mirror and --create
|
|
|
|
commands. [rG2c7f7a5a278c]
|
|
|
|
* wkd: Make --add-revocs the default in gpg-wks-client. New option
|
|
|
|
--no-add-revocs. [rG10c937ee68]
|
|
|
|
* Remove duplicated backslashes when setting the homedir. [T6833]
|
|
|
|
* Ignore attempts to remove the /dev/null device. [T6556]
|
|
|
|
* Improve advisory file lock retry strategy. [T3380]
|
|
|
|
* Release-info: https://dev.gnupg.org/T6578
|
|
|
|
* Remove patch upstream:
|
|
|
|
- gnupg-Report-BEGIN_-status-before-examining-the-input.patch
|
|
|
|
|
2023-10-31 13:55:15 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Oct 30 15:01:05 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Fix the build in SLE and Leap by adding an exclude in the files
|
|
|
|
section for the dirmngr's systemd user units. [jsc#PED-7093]
|
|
|
|
|
2023-10-19 10:12:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Oct 17 10:27:15 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Do not pull revision info from GIT when autoconf is run. This
|
|
|
|
removes the -unknown suffix after the version number.
|
|
|
|
* Add gnupg-nobetasuffix.patch [bsc#1216334]
|
|
|
|
|
2023-10-17 04:51:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Oct 16 19:54:40 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Fix Emacs EasyPG behavior when parsing output:
|
|
|
|
* gpg: Report BEGIN_* status before examining the input.
|
|
|
|
* Upstream task: https://dev.gnupg.org/T6481
|
|
|
|
* Add gnupg-Report-BEGIN_-status-before-examining-the-input.patch
|
|
|
|
|
2023-10-10 17:00:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Oct 10 06:46:08 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Install the internal executables in the /usr/libexec dir instead
|
|
|
|
of /usr/lib64. These files are keyboxd, scdaemon, gpg-auth
|
|
|
|
gpg-check-pattern, gpg-pair-tool, gpg-preset-passphrase,
|
|
|
|
gpg-protect-tool, gpg-wks-client, dirmngr_ldap and tpm2daemon.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Oct 9 12:33:12 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Provide the systemd-user files since they have been removed
|
|
|
|
upstream since version 2.4.1. [bsc#1201564]
|
|
|
|
* Add gpg2-systemd-user.tar.xz
|
|
|
|
|
2023-09-25 12:24:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 21 07:36:32 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Install the systemd user units in the _userunitdir [bsc#1201564]
|
|
|
|
* Note that, there is no activation by default.
|
2023-09-26 12:55:09 +02:00
|
|
|
* Rework excludes in the spec's files section.
|
2023-09-25 12:24:20 +02:00
|
|
|
|
2023-10-10 17:00:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Aug 3 16:24:19 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Revert back to use the IBM TPM Software stack.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 5 09:10:55 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.4.3:
|
|
|
|
* gpg: Set default expiration date to 3 years. [T2701]
|
|
|
|
* gpg: Add --list-filter properties "key_expires" and
|
|
|
|
"key_expires_d". [T6529]
|
|
|
|
* gpg: Emit status line and proper diagnostics for write errors. [T6528]
|
|
|
|
* gpg: Make progress work for large files on Windows. [T6534]
|
|
|
|
* gpg: New option --no-compress as alias for -z0.
|
|
|
|
* gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]
|
|
|
|
* gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]
|
|
|
|
* gpgsm: Major rewrite of the PKCS#12 parser. [T6536]
|
|
|
|
* gpgtar: New option --no-compress.
|
|
|
|
* dirmngr: Extend the AD_QUERY command. [rG207c99567c]
|
|
|
|
* dirmngr: Disable the HTTP redirect rewriting. [T6477]
|
|
|
|
* dirmngr: New option --compatibility-flags. [rGbf04b07327]
|
|
|
|
* dirmngr: New option --ignore-crl-extensions. [T6545]
|
|
|
|
* wkd: Use export-clean for gpg-wks-client's --mirror and --create
|
|
|
|
commands. [rG2c7f7a5a27]
|
|
|
|
* wkd: Make --add-revocs the default in gpg-wks-client. New option
|
|
|
|
--no-add-revocs. [rG10c937ee68]
|
|
|
|
* scd: Make signing work for Nexus cards. [rGb83d86b988]
|
|
|
|
* scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue May 30 19:37:39 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.4.2:
|
|
|
|
* gpg: Print a warning if no more encryption subkeys are left over
|
|
|
|
after changing the expiration date. [rGef2c3d50fa]
|
|
|
|
* gpg: Fix searching for the ADSK key when adding an ADSK. [T6504]
|
|
|
|
* gpgsm: Speed up key listings on Windows. [rG08ff55bd44]
|
|
|
|
* gpgsm: Reduce the number of "failed to open policy file"
|
|
|
|
diagnostics. [rG68613a6a9d]
|
|
|
|
* agent: Make updating of private key files more robust and track
|
|
|
|
display S/N. [T6135]
|
|
|
|
* keyboxd: Avoid longish delays on Windows when listing keys.
|
|
|
|
[rG6944aefa3c]
|
|
|
|
* gpgtar: Emit extra status lines to help GPGME. [T6497]
|
|
|
|
* w32: Avoid using the VirtualStore. [T6403]
|
|
|
|
* Rebase gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Apr 28 11:58:06 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.4.1:
|
|
|
|
* If the ~/.gnupg directory does not exist, the keyboxd is now
|
|
|
|
automagically enabled. [rGd9e7488b17]
|
|
|
|
* gpg: New option --add-desig-revoker. [rG3d094e2bcf]
|
|
|
|
* gpg: New option --assert-signer. [rGc9e95b8dee]
|
|
|
|
* gpg: New command --quick-add-adsk and other ADSK features.
|
|
|
|
[T6395, https://gnupg.org/blog/20230321-adsk.html]
|
|
|
|
* gpg: New list-option "show-unusable-sigs". Also show "[self-signature]"
|
|
|
|
instead of the user-id in key signature listings. [rG103acfe9ca]
|
|
|
|
* gpg: For symmetric encryption the default S2K hash is now SHA256. [T6367]
|
|
|
|
* gpg: Detect already compressed data also when using a pipe. Also
|
|
|
|
detect JPEG and PNG file formats. [T6332]
|
|
|
|
* gpg: New subcommand "openpgp" for --card-edit. [T6462]
|
|
|
|
* gpgsm: Verification of detached signatures does now strip trailing
|
|
|
|
zeroes from the input if --assume-binary is used. [rG2a13f7f9dc]
|
|
|
|
* gpgsm: Non-armored detached signature are now created without
|
|
|
|
using indefinite form length octets. This improves compatibility
|
|
|
|
with some PDF signature verification software. [rG8996b0b655]
|
|
|
|
* gpgtar: Emit progress status lines in create mode. [T6363]
|
|
|
|
* dirmngr: The LDAP modifyTimestamp is now returned by some
|
|
|
|
keyserver commands. [rG56d309133f]
|
|
|
|
* ssh: Allow specification of the order keys are presented to ssh.
|
|
|
|
See the man page entry for --enable-ssh-support. [T5996, T6212]
|
|
|
|
* gpg: Make list-options "show-sig-subpackets" work again.
|
|
|
|
Fixes regression in 2.4.0. [rG5a223303d7]
|
|
|
|
* gpg: Fix the keytocard command for Yubikeys. [T6378]
|
|
|
|
* gpg: Do not continue an export after a cancel for the primary key. [T6093]
|
|
|
|
* gpg: Replace the --override-compliance-check hack by a real fix. [T5655]
|
|
|
|
* gpgtar: Fix decryption with input taken from stdin. [T6355]
|
|
|
|
* Rebase patches:
|
|
|
|
- gnupg-revert-rfc4880bis.patch
|
|
|
|
- gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
* Remove patch fixed upstream:
|
|
|
|
- gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch
|
|
|
|
|
2023-09-25 12:24:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Mar 10 09:03:00 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Temporarily revert back to the pre-2.4 default for key generation.
|
|
|
|
The new rfc4880bis has been set as the default in 2.4 version and
|
|
|
|
might create incompatible keys. Note that, rfc4880bis can still
|
|
|
|
be used with the option flag --rfc4880bis as in previous versions.
|
|
|
|
* More info in the gnupg-devel ML:
|
|
|
|
https://lists.gnupg.org/pipermail/gnupg-devel/2022-December/035183.html
|
|
|
|
* Reverted commit https://dev.gnupg.org/rGcaf4b3fc16e9
|
|
|
|
* Add gnupg-revert-rfc4880bis.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Mar 10 08:42:02 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Allow 8192 bit RSA keys in keygen UI when large_rsa is set
|
|
|
|
* Add gnupg-allow-large-rsa.patch
|
|
|
|
|
2023-10-10 17:00:55 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 7 08:58:03 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Fix the regression test suite fails with the IBM TPM Software
|
|
|
|
stack. Builds fine using the Intel TPM; use the swtpm and
|
|
|
|
tpm2-0-tss-devel packages instead of ibmswtpm2 and ibmtss-devel.
|
|
|
|
|
2023-09-25 12:24:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 11 11:15:54 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- Fix broken GPGME QT tests: Upstram dev task dev.gnupg.org/T6313
|
|
|
|
* The original patch has been modified to expand the changes
|
|
|
|
also to the tests/gpgme/Makefile.in file.
|
|
|
|
* Add gnupg-tests-Fix-tests-gpgme-for-in-source-tree-builds.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Dec 20 16:01:05 UTC 2022 - David Anes <david.anes@suse.com>
|
|
|
|
|
|
|
|
- Updated to require libgpg-error-devel >= 1.46
|
|
|
|
|
|
|
|
- Rebased patches:
|
|
|
|
* gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
|
|
|
|
* gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
|
|
|
|
- GnuPG 2.4.0:
|
|
|
|
* common: Fix translations in --help for gpgrt < 1.47.
|
|
|
|
* gpg: Do not continue the export after a cancel for the primary key.
|
|
|
|
* gpg: Replace use of PRIu64 in log_debug.
|
|
|
|
* Update NEWS for 2.4.0.
|
|
|
|
* tests: Fix make check with GPGME.
|
|
|
|
* agent: Allow arguments to "scd serialno" in restricted mode.
|
|
|
|
* scd:p15: Skip deleted records.
|
|
|
|
* build: Remove Windows CE support.
|
|
|
|
* wkd: Do not send/install/mirror expired user ids.
|
|
|
|
* gpgsm: Print the revocation time also with --verify.
|
|
|
|
* gpgsm: Fix "problem re-searching certificate" case.
|
|
|
|
* gpgsm: Print revocation date and reason in cert listings.
|
|
|
|
* gpgsm: Silence the "non-critical certificate policy not allowed".
|
|
|
|
* gpgsm: Always use the chain model if the root-CA requests this.
|
|
|
|
* gpg: New export option "mode1003".
|
|
|
|
* gpg: Remove a mostly duplicated function.
|
|
|
|
* tests: Simplify fake-pinentry to use the option only.
|
|
|
|
* tests: Fix fake-pinentry for Windows.
|
|
|
|
* tests: Fix make check-all.
|
|
|
|
* agent: Fix import of protected v5 keys.
|
|
|
|
* gpgsm: Change default algo to AES-256.
|
|
|
|
* tests: Put a workaround for semihosted environment.
|
|
|
|
* tests: More fix for semihosted environment.
|
|
|
|
* tests: Support semihosted environment.
|
|
|
|
* tests: Fix tests under cms.
|
|
|
|
* tests,w32: Fix for semihosted environment.
|
|
|
|
* w32: Fix for tests on semihosted environment.
|
|
|
|
* w32: Fix gnupg_unsetenv.
|
|
|
|
* wkd: New option --add-revocs and some fixes.
|
|
|
|
* wkd: Make use of --debug extprog.
|
|
|
|
* gpg: New export-filter export-revocs.
|
|
|
|
* gpg: Fix double-free in gpg --card-edit.
|
|
|
|
* gpg: Make --require-compliance work with out --status-fd.
|
|
|
|
* gpg: New option --list-filter.
|
|
|
|
* dirmngr: Silence ocsp debug output.
|
|
|
|
* tests: Fix to support --enable-all-tests and variants.
|
|
|
|
* tests:w32: Fix for non-dot file name for Windows.
|
|
|
|
* tests:gpgscm:w32: Fix for GetTempPath.
|
|
|
|
* tests: Keep .log files in objdir.
|
|
|
|
* tests: Use 233 for invalid value of FD.
|
|
|
|
* w32: Fix gnupg_tmpfile for possible failure.
|
|
|
|
* scd: Redact --debug cardio output of a VERIFY APDU.
|
|
|
|
* common: Remove Windows CE support in common.
|
|
|
|
* gpgsm: Fix colon outout of ECC encryption certificates.
|
|
|
|
* scd:nks: Fix ECC signing if key not given by keygrip.
|
|
|
|
* dirmngr: Fix verification of ECDSA signed CRLs.
|
|
|
|
* agent: Allow trustlist on Windows in Unicode homedirs.
|
|
|
|
* gpg: Fix verification of cleartext signatures with overlong lines.
|
|
|
|
* gpg: Move w32_system function.
|
|
|
|
* gpg: New option --quick-update-pref.
|
|
|
|
* gpg: New list-options show-pref and show-pref-verbose.
|
|
|
|
* tests: Add tests to check that OCB is only used for capable keys.
|
|
|
|
* gpg: Make --list-packets work w/o --no-armor for plain OCB packets.
|
|
|
|
* tests: Add symmetric decryption tests.
|
|
|
|
* tests: Add tr:assert-same function.
|
|
|
|
* agent: Avoid blanks in the ssh key's comment.
|
|
|
|
* build: Update m4 files.
|
|
|
|
* gpg: Merge --rfc4880bis features into --gnupg.
|
|
|
|
* gpg: Allow only OCB for AEAD encryption.
|
|
|
|
* gpg: New option --compatibility-flags.
|
|
|
|
* gpgsm: Also announce AES256-CBC in signatures.
|
|
|
|
* gpg: Fix trusted introducer for user-ids with only the mbox.
|
|
|
|
* gpg: Import stray revocation certificates.
|
|
|
|
* agent: Automatically convert to extended key format by KEYATTR.
|
|
|
|
* card: New commands "gpg" and "gpgsm".
|
|
|
|
* card: Also show fingerprints of known X.509 certificates.
|
|
|
|
* scd:nks: Support non-ESIGN signing with the Signature Card v2.
|
|
|
|
* gpgsm: Allow ECC encryption keys with just keyAgreement specified.
|
|
|
|
* gpgsm: Use macro constants for cert_usage_p.
|
|
|
|
* build: Update gpg-error.m4.
|
|
|
|
* agent,common,dirmngr,tests,tools: Remove spawn PREEXEC argument.
|
|
|
|
* gpg: Move NETLIBS after GPG_ERROR_LIBS.
|
|
|
|
* gpg: Use GCRY_KDF_ONESTEP_KDF with newer libgcrypt in future.
|
|
|
|
* common,w32: Fix struct stat on Windows.
|
|
|
|
* agent,w32: Support Win32-OpenSSH emulation by gpg-agent.
|
|
|
|
* common: Don't use FD2INT for POSIX-only code.
|
|
|
|
* dirmngr: Fix build with no LDAP support.
|
|
|
|
|
2022-10-17 20:43:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Oct 17 11:35:11 UTC 2022 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- GnuPG 2.3.8:
|
|
|
|
* gpg: Do not consider unknown public keys as non-compliant while
|
|
|
|
decrypting.
|
|
|
|
* gpg: Avoid to emit a compliance mode line if Libgcrypt is
|
|
|
|
non-compliant.
|
|
|
|
* gpg: Improve --edit-key setpref command to ease c+p.
|
|
|
|
* gpg: Emit an ERROR status if --quick-set-primary-uid fails and
|
|
|
|
allow to pass the user ID by hash.
|
|
|
|
* gpg: Actually show symmetric+pubkey encrypted data as de-vs
|
|
|
|
compliant. Add extra compliance checks for symkey_enc packets.
|
|
|
|
* gpg: In de-vs mode use SHA-256 instead of SHA-1 as implicit
|
|
|
|
preference.
|
|
|
|
* gpgsm: Fix reporting of bad passphrase error during PKCS#11
|
|
|
|
import.
|
|
|
|
* agent: Fix a regression in "READKEY --format=ssh".
|
|
|
|
* agent: New option --need-attr for KEYINFO.
|
|
|
|
* agent: New attribute "Remote-list" for use by KEYINFO.
|
|
|
|
* scd: Fix problem with Yubikey 5.4 firmware.
|
|
|
|
* dirmngr: Fix CRL Distribution Point fallback to other schemes.
|
|
|
|
* dirmngr: New LDAP server flag "areconly" (A-record-only).
|
|
|
|
* dirmngr: Fix upload of multiple keys for an LDAP server specified
|
|
|
|
using the colon format.
|
|
|
|
* dirmngr: Use LDAP schema v2 when a Base DN is specified.
|
|
|
|
* dirmngr: Avoid caching expired certificates.
|
|
|
|
* wkd: Fix path traversal attack in gpg-wks-server. Add the mail
|
|
|
|
address to the pending request data.
|
|
|
|
* wkd: New command --mirror for gpg-wks-client.
|
|
|
|
* gpg-auth: New tool for authentication.
|
|
|
|
* New common.conf option no-autostart.
|
|
|
|
* Silence warnings from AllowSetForegroundWindow unless
|
|
|
|
GNUPG_EXEC_DEBUG_FLAGS is used.
|
|
|
|
* Rebase gnupg-detect_FIPS_mode.patch
|
|
|
|
* Remove patch upstream:
|
|
|
|
- gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch
|
|
|
|
|
2022-08-08 22:32:26 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 8 18:00:44 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- Fix YubiKey 5 Nano support (boo#1202201), add
|
|
|
|
gnupg-2.3.7-scd-openpgp-Fix-workaround-for-Yubikey-heuristics.patch
|
|
|
|
|
2022-05-16 11:13:17 +02:00
|
|
|
-------------------------------------------------------------------
|
2022-07-18 09:38:55 +02:00
|
|
|
Tue Jul 12 22:06:02 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.3.7:
|
|
|
|
* CVE-2022-34903: garbled status messages could trick gpgme and
|
|
|
|
other parsers to accept faked status lines [boo#1201225]
|
|
|
|
* A number of bug fixes to the gpg command line interface
|
|
|
|
* gpgsm gained a number of new options and got some rework on
|
|
|
|
the PKCS#12 parser to support DFN issues keys
|
|
|
|
* The gpg agent got some added options and UI tweaks
|
|
|
|
* smart card support got a number of bug fixes, and improved
|
|
|
|
support for Technology Nexus cards and Yubikey
|
|
|
|
* The Telesec ESIGN application is now supported
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2022-05-16 11:13:17 +02:00
|
|
|
Mon May 16 09:12:06 UTC 2022 - Marcus Meissner <meissner@suse.com>
|
|
|
|
|
|
|
|
- added tpm support, added a new subpackage gpg2-tpm
|
|
|
|
|
2022-05-06 09:34:40 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Apr 25 19:09:32 UTC 2022 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.3.6:
|
|
|
|
* Up to five times faster verification of detached signatures,
|
|
|
|
doubled detached signing speed, threefold decryption speedup
|
|
|
|
for large files, nearly double the AES256.OCB encryption speed
|
|
|
|
* Add support for GeNUA cards
|
|
|
|
* Added and improved options for crypto options, and all-around
|
|
|
|
bug fixes
|
|
|
|
|
2021-12-22 17:48:47 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Dec 22 16:08:08 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.3.4:
|
|
|
|
* gpg: New option --min-rsa-length
|
|
|
|
* gpg: New option --forbid-gen-key
|
|
|
|
* gpg: New option --override-compliance-check
|
|
|
|
* gpgconf: New command --show-configs
|
|
|
|
* agent,dirmngr,keyboxd: New option --steal-socket
|
|
|
|
* gpg: Fix printing of binary notations
|
|
|
|
* gpg: Remove stale ultimately trusted keys from the trustdb
|
|
|
|
* gpg: Fix indentation of --print-mds and --print-md sha512
|
|
|
|
* gpg: Emit gpg 2.2 compatible Ed25519 signature
|
|
|
|
* gpgsm: Detect circular chains in --list-chain
|
|
|
|
* dirmngr: Make reading resolv.conf more robust
|
|
|
|
* dirmngr: Ask keyservers to provide the key fingerprints
|
|
|
|
* gpgconf: Allow changing gpg's deprecated keyserver option
|
|
|
|
* gpg-wks-server: Fix created file permissions
|
|
|
|
* scd: Support longer data for ssh-agent authentication with
|
|
|
|
openpgp cards
|
|
|
|
* scd: Modify DEVINFO behavior to support looping forever
|
|
|
|
* Silence warning about the rootdir under Unices w/o a mounted
|
|
|
|
/proc file system
|
|
|
|
* Fix possible build problems about missing include files
|
|
|
|
|
2021-10-15 14:24:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Oct 12 19:20:50 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.3.3:
|
|
|
|
* agent: Fix segv in GET_PASSPHRASE (regression)
|
|
|
|
* dirmngr: Fix Let's Encrypt certificate chain validation
|
|
|
|
* gpg: Change default and maximum AEAD chunk size to 4 MiB
|
|
|
|
* gpg: Print a warning when importing a bad cv25519 secret key
|
|
|
|
* gpg: Fix --list-packets for undecryptable AEAD packets
|
|
|
|
* gpg: Verify backsigs for v5 keys correctly
|
|
|
|
* keyboxd: Fix checksum computation for no UBID entry on disk
|
|
|
|
* keyboxd: Fix "invalid object" error with cv448 keys
|
|
|
|
* dirmngr: New option --ignore-cert
|
|
|
|
* agent: Fix calibrate_get_time use of clock_gettime
|
|
|
|
* Support a gpgconf.ctl file under Unix and use this for the
|
|
|
|
regression tests
|
|
|
|
|
2021-08-27 13:48:41 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 25 10:01:38 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- GnuPG 2.3.2:
|
|
|
|
* gpg: Allow fingerprint based lookup with --locate-external-key.
|
|
|
|
* gpg: Allow decryption w/o public key but with correct card inserted.
|
|
|
|
* gpg: Auto import keys specified with --trusted-keys.
|
|
|
|
* gpg: Do not use import-clean for LDAP keyserver imports.
|
|
|
|
* gpg: Fix mailbox based search via AKL keyserver method.
|
|
|
|
* gpg: Fix memory corruption with --clearsign introduced with 2.3.1.
|
|
|
|
* gpg: Use a more descriptive prompt for symmetric decryption.
|
|
|
|
* gpg: Improve speed of secret key listing.
|
|
|
|
* gpg: Support keygrip search with traditional keyring.
|
|
|
|
* gpg: Let --fetch-key return an exit code on failure.
|
|
|
|
* gpg: Emit the NO_SECKEY status again for decryption.
|
|
|
|
* gpgsm: Support decryption of password based encryption (pwri).
|
|
|
|
* gpgsm: Support AES-GCM decryption.
|
|
|
|
* gpgsm: Let --dump-cert --show-cert also print an OpenPGP fingerprint.
|
|
|
|
* gpgsm: Fix finding of issuer in use-keyboxd mode.
|
|
|
|
* gpgsm: New option --ldapserver as an alias for --keyserver.
|
|
|
|
* agent: Use SHA-256 for SSH fingerprint by default.
|
|
|
|
* agent: Fix calling handle_pincache_put.
|
|
|
|
* agent: Fix importing protected secret key.
|
|
|
|
* agent: Fix a regression in agent_get_shadow_info_type.
|
|
|
|
* agent: Add translatable text for Caps Lock hint.
|
|
|
|
* agent: New option --pinentry-formatted-passphrase.
|
|
|
|
* agent: Add checkpin inquiry for pinentry.
|
|
|
|
* agent: New option --check-sym-passphrase-pattern.
|
|
|
|
* agent: Use the sysconfdir for a pattern file.
|
|
|
|
* agent: Make QT_QPA_PLATFORMTHEME=qt5ct work for the pinentry.
|
|
|
|
* dirmngr: LDAP search by a mailbox now ignores revoked keys.
|
|
|
|
* dirmngr: For KS_SEARCH return the fingerprint also with LDAP.
|
|
|
|
* dirmngr: Allow for non-URL specified ldap keyservers.
|
|
|
|
* dirmngr: New option --ldapserver.
|
|
|
|
* dirmngr: Fix regression in KS_GET for mail address pattern.
|
|
|
|
* card: New option --shadow for the list command.
|
|
|
|
* tests: Make sure the built keyboxd is used.
|
|
|
|
* scd: Fix computing shared secrets for 512 bit curves.
|
|
|
|
* scd: Fix unblock PIN by a Reset Code with KDF.
|
|
|
|
* scd: Fix PC/SC removed card problem.
|
|
|
|
* scd: Recover the partial match for PORTSTR for PC/SC.
|
|
|
|
* scd: Make sure to release the PC/SC context.
|
|
|
|
* scd: Fix zero-byte handling in ECC.
|
|
|
|
* scd: Fix serial number detection for Yubikey 5.
|
|
|
|
* scd: Add basic support for AET JCOP cards.
|
|
|
|
* scd: Detect external interference when --pcsc-shared is in use.
|
|
|
|
* scd: Fix access to the list of cards.
|
|
|
|
* gpgconf: Do not list a disabled tpm2d.
|
|
|
|
* gpgconf: Make runtime changes with different homedir work.
|
|
|
|
* keyboxd: Fix searching for exact mail adddress.
|
|
|
|
* keyboxd: Fix searching with multiple patterns.
|
|
|
|
* tools: Extend gpg-check-pattern.
|
|
|
|
* wkd: Fix client issue with leading or trailing spaces in user-ids.
|
|
|
|
* Pass XDG_SESSION_TYPE and QT_QPA_PLATFORM envvars to Pinentry.
|
|
|
|
* Change the default keyserver to keyserver.ubuntu.com. This is a
|
|
|
|
temporary change due to the shutdown of the SKS keyserver pools.
|
|
|
|
|
2021-06-21 16:51:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 11 12:19:16 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
|
|
|
|
|
|
|
|
- GnuPG 2.3.1:
|
|
|
|
* The new configuration file common.conf is now used to enable
|
|
|
|
the use of the key database daemon with "use-keyboxd". Using
|
|
|
|
this option in gpg.conf and gpgsm.conf is supported for a
|
|
|
|
transitional period. See doc/example/common.conf for more.
|
|
|
|
* gpg: Force version 5 key creation for ed448 and cv448 algorithms.
|
|
|
|
* gpg: By default do not use the self-sigs-only option when
|
|
|
|
importing from an LDAP keyserver.
|
|
|
|
* gpg: Lookup a missing public key of the active card via LDAP.
|
|
|
|
* gpgsm: New command --show-certs.
|
|
|
|
* scd: Fix CCID driver for SCM SPR332/SPR532.
|
|
|
|
* scd: Further improvements for PKCS#15 cards.
|
|
|
|
* New configure option --with-tss to allow the selection of the
|
|
|
|
TSS library.
|
|
|
|
- Rebase patches:
|
|
|
|
* gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
* gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
|
|
|
|
* gnupg-dont-fail-with-seahorse-agent.patch
|
|
|
|
* gnupg-set_umask_before_open_outfile.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jun 11 12:15:37 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.3.0:
|
|
|
|
* A new experimental key database daemon is provided. To enable
|
|
|
|
it put "use-keyboxd" into gpg.conf and gpgsm.conf. Keys are stored
|
|
|
|
in a SQLite database and make key lookup much faster.
|
|
|
|
* New tool gpg-card as a flexible frontend for all types of
|
|
|
|
supported smartcards.
|
|
|
|
* New option --chuid for gpg, gpgsm, gpgconf, gpg-card, and
|
|
|
|
gpg-connect-agent.
|
|
|
|
* The gpg-wks-client tool is now installed under bin; a wrapper for
|
|
|
|
its old location at libexec is also installed.
|
|
|
|
* tpm2d: New daemon to physically bind keys to the local machine.
|
|
|
|
* gpg: Switch to ed25519/cv25519 as default public key algorithms.
|
|
|
|
* gpg: Verification results now depend on the --sender option and
|
|
|
|
the signer's UID subpacket.
|
|
|
|
* gpg: Do not use any 64-bit block size cipher algorithm for
|
|
|
|
encryption. Use AES as last resort cipher preference instead of
|
|
|
|
3DES. This can be reverted using --allow-old-cipher-algos.
|
|
|
|
* gpg: Support AEAD encryption mode using OCB or EAX.
|
|
|
|
* gpg: Support v5 keys and signatures.
|
|
|
|
* gpg: Support curve X448 (ed448, cv448).
|
|
|
|
* gpg: Allow use of group names in key listings.
|
|
|
|
* gpg: New option --full-timestrings to print date and time.
|
|
|
|
* gpg: New option --force-sign-key.
|
|
|
|
* gpg: New option --no-auto-trust-new-key.
|
|
|
|
* gpg: The legacy key discovery method PKA is no longer supported.
|
|
|
|
The command --print-pka-records and the PKA related import and
|
|
|
|
export options have been removed.
|
|
|
|
* gpg: Support export of Ed448 Secure Shell keys.
|
|
|
|
* gpgsm: Add basic ECC support.
|
|
|
|
* gpgsm: Support creation of EdDSA certificates. [#4888]
|
|
|
|
* agent: Allow the use of "Label:" in a key file to customize the
|
|
|
|
pinentry prompt.
|
|
|
|
* agent: Support ssh-agent extensions for environment variables.
|
|
|
|
With a patched version of OpenSSH this avoids the need for the
|
|
|
|
"updatestartuptty" kludge.
|
|
|
|
* scd: Improve support for multiple card readers and tokens.
|
|
|
|
* scd: Support PIV cards.
|
|
|
|
* scd: Support for Rohde&Schwarz Cybersecurity cards.
|
|
|
|
* scd: Support Telesec Signature Cards v2.0
|
|
|
|
* scd: Support multiple application on certain smartcard.
|
|
|
|
* scd: New option --application-priority.
|
|
|
|
* scd: New option --pcsc-shared; see man page for important notes.
|
|
|
|
* dirmngr: Support a gpgNtds parameter in LDAP keyserver URLs.
|
|
|
|
* The symcryptrun tool, a wrapper for the now obsolete external
|
|
|
|
Chiasmus tool, has been removed.
|
|
|
|
* Full Unicode support for the command line.
|
|
|
|
- dropped legacy commands: gpg-zip
|
|
|
|
|
2021-06-11 11:17:32 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Apr 7 20:56:23 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- Remove the "files-are-digests" option from the openSUSE package.
|
|
|
|
This feature was not upstream and only used in the OBS signing
|
|
|
|
daemon. The recommended upstream feature for separating the data
|
|
|
|
to be signed from the private keys is gpg agent forwarding,
|
|
|
|
available from 2.1. Drop gnupg-2.2.8-files-are-digests.patch
|
|
|
|
|
2021-01-15 11:22:29 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 12 22:45:11 UTC 2021 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.27:
|
|
|
|
* gpgconf: Fix case with neither local nor global gpg.conf
|
|
|
|
* gpgconf: Fix description of two new options
|
|
|
|
- includes changes from 2.2.26:
|
|
|
|
* gpg: New AKL method "ntds"
|
|
|
|
* gpg: Fix --trusted-key with fingerprint arg
|
|
|
|
* scd: Fix writing of ECC keys to an OpenPGP card
|
|
|
|
* scd: Make an USB error fix specific to SPR532 readers
|
|
|
|
* dirmngr: With new LDAP keyservers store the new attributes.
|
|
|
|
Never store the useless pgpSignerID. Fix a long standing
|
|
|
|
bug storing some keys on an ldap server.
|
|
|
|
* dirmngr: Support the new Active Direcory LDAP schema for
|
|
|
|
keyservers
|
|
|
|
* dirmngr: Allow LDAP OpenPGP searches via fingerprint
|
|
|
|
* dirmngr: Do not block other threads during keyserver LDAP calls
|
|
|
|
* Support global configuration files
|
|
|
|
* Fix the iconv fallback handling to UTF-8
|
|
|
|
|
2020-11-26 10:55:58 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Nov 23 22:36:17 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.25:
|
|
|
|
* scd: Fix regression in 2.2.24 requiring gpg --card-status
|
|
|
|
before signing or decrypting
|
|
|
|
* gpgsm: Using Libksba 1.5.0 signatures with a rarely used
|
|
|
|
combination of attributes can now be verified
|
|
|
|
|
2020-09-03 19:55:58 +02:00
|
|
|
-------------------------------------------------------------------
|
2020-11-18 10:45:38 +01:00
|
|
|
Tue Nov 17 21:52:38 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.24:
|
|
|
|
* gpg: New command --quick-revoke-sig
|
|
|
|
* gpg: Do not use weak digest algos if selected by recipient
|
|
|
|
preference during sign+encrypt
|
|
|
|
* gpg: Switch to AES256 for symmetric encryption in de-vs mode
|
|
|
|
* gpg: Silence weak digest warnings with --quiet
|
|
|
|
* gpg: Print new status line CANCELED_BY_USER for a cancel during
|
|
|
|
symmetric encryption
|
|
|
|
* gpg: Fix the encrypt+sign hash algo preference selection for
|
|
|
|
ECDSA. This is in particular needed for keys created from
|
|
|
|
existing smartcard based keys
|
|
|
|
* agent: Fix secret key import of GnuPG 2.3 generated Ed25519
|
|
|
|
keys
|
|
|
|
* agent: Keep some permissions of private-keys-v1.d
|
|
|
|
* dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
|
|
|
|
gnutls builds
|
|
|
|
* dirmngr: Fix the pool keyserver case for a single host in the
|
|
|
|
pool
|
|
|
|
* scd: Fix the use case of verify_chv2 by CHECKPIN
|
|
|
|
* scd: Various improvements to the ccid-driver
|
|
|
|
* scd: Minor fixes for Yubikey
|
|
|
|
* gpgconf: New option --show-versions
|
|
|
|
* i18n: Complete overhaul and completion of the Italian
|
|
|
|
translation
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2020-09-03 19:55:58 +02:00
|
|
|
Thu Sep 3 17:16:41 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.23:
|
2020-09-03 20:07:32 +02:00
|
|
|
* gpg: fix AHEAD preference list overflow boo#1176034 / CVE-2020-25125
|
2020-09-03 19:55:58 +02:00
|
|
|
* gpg: fix possible segv in the key cleaning code
|
|
|
|
* gpgsm: fix a minor RFC2253 parser gub
|
|
|
|
* scdaemon: Fix a PIN verify failure on certain OpenPGP card
|
|
|
|
implementations
|
|
|
|
|
2020-09-02 17:10:22 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Sep 1 21:09:57 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.22:
|
|
|
|
* gpg: Change the default key algorithm to rsa3072
|
|
|
|
* gpg: Add regular expression support for Trust Signatures on
|
|
|
|
all platforms
|
|
|
|
* gpg: Ignore --personal-digest-prefs for ECDSA keys
|
|
|
|
* gpgsm: Make rsaPSS a de-vs compliant scheme
|
|
|
|
* gpgsm: Show also the SHA256 fingerprint in key listings
|
|
|
|
* gpgsm: Do not require a default keyring for --gpgconf-list
|
|
|
|
* gpg-agent: Default to extended key format and record the
|
|
|
|
creation time of keys
|
|
|
|
Add new option --disable-extended-key-format
|
|
|
|
* gpg-agent: Support the WAYLAND_DISPLAY envvar
|
|
|
|
* gpg-agent: Allow using --gpgconf-list even if HOME does not
|
|
|
|
exist
|
|
|
|
* gpg-agent: Make the Pinentry work even if the envvar TERM is
|
|
|
|
set to the empty string
|
|
|
|
* scdaemon: Add a workaround for Gnuk tokens <= 2.15 which
|
|
|
|
wrongly incremented the error counter when using the
|
|
|
|
"verify" command of "gpg --edit-key" with only the signature
|
|
|
|
key being present
|
|
|
|
* dirmngr: Better handle systems with disabled IPv6
|
|
|
|
* gpgpslit: Install tool. It was not installed in the past to
|
|
|
|
avoid conflicts with the version installed by GnuPG 1.4
|
|
|
|
* gpgtar: Make --files-from and --null work as documented
|
|
|
|
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream
|
|
|
|
|
2020-07-09 13:50:14 +02:00
|
|
|
-------------------------------------------------------------------
|
2020-07-14 13:02:45 +02:00
|
|
|
Tue Jul 14 10:22:22 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
|
|
|
|
- Add gnupg-gpgme-t-encrypt-sym.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2020-07-09 13:50:14 +02:00
|
|
|
Thu Jul 9 11:36:57 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.21:
|
|
|
|
* gpg: Improve symmetric decryption speed by about 25%
|
|
|
|
* gpg: Support decryption of AEAD encrypted data packets
|
|
|
|
* gpg: Add option --no-include-key-block
|
|
|
|
* gpg: Allow for extra padding in ECDH
|
|
|
|
* gpg: Only a single pinentry is shown for symmetric encryption if
|
|
|
|
the pinentry supports this
|
|
|
|
* gpg: Print a note if no keys are given to --delete-key
|
|
|
|
* gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
|
|
|
|
shown
|
|
|
|
* gpgsm: Certificates without a CRL distribution point are now
|
|
|
|
considered valid without looking up a CRL. The new option
|
|
|
|
--enable-issuer-based-crl-check can be used to revert to the
|
|
|
|
former behaviour
|
|
|
|
* gpgsm: Support rsaPSS signature verification
|
|
|
|
* gpgsm: Unless CRL checking is disabled lookup a missing issuer
|
|
|
|
certificate using the certificate's authorityInfoAccess
|
|
|
|
* gpgsm: Print the certificate's serial number also in decimal
|
|
|
|
notation
|
|
|
|
* gpgsm: Fix possible NULL-deref in messages of --gen-key
|
|
|
|
* scd: Support the CardOS 5 based D-Trust Card 3.1
|
|
|
|
* dirmngr: Allow http URLs with "LOOKUP --url"
|
|
|
|
* wkd: Take name of sendmail from configure. Fixes an OpenBSD
|
|
|
|
specific bug
|
|
|
|
|
2020-04-30 16:04:35 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Apr 30 13:59:33 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
|
|
|
|
- Refresh patches:
|
|
|
|
* gnupg-2.2.8-files-are-digests.patch
|
|
|
|
* gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
|
2020-03-21 09:06:35 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Mar 20 20:17:44 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- GnuPG 2.2.20:
|
|
|
|
* Protect the error counter against overflow to guarantee that the
|
|
|
|
tools can't be tricked into returning success after an error
|
|
|
|
* gpg: Make really sure that --verify-files always returns an error
|
|
|
|
* gpg: Fix key listing --with-secret if a pattern is given
|
|
|
|
* gpg: Fix detection of certain keys used as default-key
|
|
|
|
* gpg: Fix default-key selection when a card is available
|
|
|
|
* gpg: Fix key expiration and key usage for keys created with a
|
|
|
|
creation date of zero
|
|
|
|
* gpgsm: Fix import of some CR,LF terminated certificates
|
|
|
|
* gpg: New options --include-key-block and --auto-key-import to
|
|
|
|
allow encrypted replies after an initial signed message
|
|
|
|
* gpg: Allow the use of a fingerprint with --trusted-key
|
|
|
|
* gpg: New property "fpr" for use by --export-filter
|
|
|
|
* scdaemon: Disable the pinpad if a KDF DO is used
|
|
|
|
* dirmngr: Improve finding OCSP certificates
|
|
|
|
- drop gpg2-gcc10-build-fno-common.patch, upstream
|
|
|
|
|
2020-03-13 13:49:16 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Mar 13 10:39:09 UTC 2020 - Fabian Vogt <fvogt@suse.com>
|
|
|
|
|
|
|
|
- Split dirmngr into a subpackage to avoid a hard dependency of
|
|
|
|
gpg2 on libgnutls
|
|
|
|
|
2020-02-19 10:09:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 19 08:48:34 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Fix build with GCC-10: [bsc#1160394]
|
|
|
|
* Always use EXTERN_UNLESS_MAIN_MODULE pattern
|
|
|
|
* In GCC-10, the default option -fcommon will change to -fno-common
|
|
|
|
- Add gpg2-gcc10-build-fno-common.patch
|
|
|
|
|
2020-01-13 09:40:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jan 10 17:47:24 UTC 2020 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Accept key updates even without UIDs [bsc#1143158]
|
|
|
|
- Add patches:
|
|
|
|
* gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
|
|
|
|
* gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
|
|
|
|
* gnupg-add-test-cases-for-import-without-uid.patch
|
|
|
|
|
2019-11-28 12:22:11 +01:00
|
|
|
-------------------------------------------------------------------
|
2019-12-09 08:32:12 +01:00
|
|
|
Sat Dec 7 15:20:41 UTC 2019 - Andreas Stieger <andreas.stieger@gmx.de>
|
|
|
|
|
|
|
|
- update to 2.2.19:
|
|
|
|
* gpg: Fix double free when decrypting for hidden recipients
|
|
|
|
* gpg: Use auto-key-locate for encryption even for mail addressed
|
|
|
|
given with angle brackets
|
|
|
|
* gpgsm: Add special case for certain expired intermediate
|
|
|
|
certificates
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-11-28 12:22:11 +01:00
|
|
|
Wed Nov 27 15:42:22 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.2.18 [bsc#1157900, CVE-2019-14855]
|
|
|
|
* gpg: Changed the way keys are detected on a smartcards; this
|
|
|
|
allows the use of non-OpenPGP cards. In the case of a not very
|
|
|
|
likely regression the new option --use-only-openpgp-card is
|
|
|
|
available. [#4681]
|
|
|
|
* gpg: The commands --full-gen-key and --quick-gen-key now allow
|
|
|
|
direct key generation from supported cards. [#4681]
|
|
|
|
* gpg: Prepare against chosen-prefix SHA-1 collisions in key
|
|
|
|
signatures. This change removes all SHA-1 based key signature
|
|
|
|
newer than 2019-01-19 from the web-of-trust. Note that this
|
|
|
|
includes all key signature created with dsa1024 keys. The new
|
|
|
|
option --allow-weak-key-signatues can be used to override the new
|
|
|
|
and safer behaviour. [#4755,CVE-2019-14855]
|
|
|
|
* gpg: Improve performance for import of large keyblocks. [#4592]
|
|
|
|
* gpg: Implement a keybox compression run. [#4644]
|
|
|
|
* gpg: Show warnings from dirmngr about redirect and certificate
|
|
|
|
problems (details require --verbose as usual).
|
|
|
|
* gpg: Allow to pass the empty string for the passphrase if the
|
|
|
|
'--passphase=' syntax is used. [#4633]
|
|
|
|
* gpg: Fix printing of the KDF object attributes.
|
|
|
|
* gpg: Avoid surprises with --locate-external-key and certain
|
|
|
|
--auto-key-locate settings. [#4662]
|
|
|
|
* gpg: Improve selection of best matching key. [#4713]
|
|
|
|
* gpg: Delete key binding signature when deletring a subkey.
|
|
|
|
[#4665,#4457]
|
|
|
|
* gpg: Fix a potential loss of key sigantures during import with
|
|
|
|
self-sigs-only active. [#4628]
|
|
|
|
* gpg: Silence "marked as ultimately trusted" diagnostics if
|
|
|
|
option --quiet is used. [#4634]
|
|
|
|
* gpg: Silence some diagnostics during in key listsing even with
|
|
|
|
option --verbose. [#4627]
|
|
|
|
* gpg, gpgsm: Change parsing of agent's pkdecrypt results. [#4652]
|
|
|
|
* gpgsm: Support AES-256 keys.
|
|
|
|
* gpgsm: Fix a bug in triggering a keybox compression run if
|
|
|
|
--faked-system-time is used.
|
|
|
|
* dirmngr: System CA certificates are no longer used for the SKS
|
|
|
|
pool if GNUTLS instead of NTBTLS is used as TLS library. [#4594]
|
|
|
|
* dirmngr: On Windows detect usability of IPv4 and IPv6 interfaces
|
|
|
|
to avoid long timeouts. [#4165]
|
|
|
|
* scd: Fix BWI value for APDU level transfers to make Gemalto Ezio
|
|
|
|
Shield and Trustica Cryptoucan work. [#4654,#4566]
|
|
|
|
* wkd: gpg-wks-client --install-key now installs the required policy
|
|
|
|
file.
|
|
|
|
- Rebase patches:
|
|
|
|
* gnupg-2.2.8-files-are-digests.patch
|
|
|
|
* gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
|
2019-10-21 11:54:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 19 12:05:13 UTC 2019 - Ludwig Nussel <lnussel@suse.de>
|
|
|
|
|
|
|
|
- Do not recommend lang package. The lang package already has a
|
|
|
|
supplements.
|
|
|
|
|
2019-06-20 06:09:17 +02:00
|
|
|
-------------------------------------------------------------------
|
2019-07-11 13:35:13 +02:00
|
|
|
Thu Jul 11 09:51:49 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.2.17 [bsc#1141093]
|
|
|
|
* gpg: Do not try the import fallback if the options are already used.
|
|
|
|
* gpg: Fix regression in option "self-sigs-only".
|
|
|
|
* gpg: With --auto-key-retrieve prefer WKD over keyservers.
|
|
|
|
* gpg: Add "self-sigs-only" and "import-clean" to the keyserver options.
|
|
|
|
* gpg: Avoid printing false AKL error message.
|
|
|
|
* gpg: New command --locate-external-key.
|
|
|
|
* gpg: Make the get_pubkey_byname interface easier to understand.
|
|
|
|
* gpg: Fallback to import with self-sigs-only on too large keyblocks.
|
|
|
|
* gpg: New import and keyserver option "self-sigs-only"
|
|
|
|
* gpg: Make read_block in import.c more flexible.
|
|
|
|
* dirmngr: fix handling of HTTPS redirections during HKP.
|
|
|
|
* dirmngr: Avoid endless loop in case of HTTP error 503.
|
|
|
|
* dirmngr: Do not rewrite the redirection for the "openpgpkey" subdomain.
|
|
|
|
* dirmngr: Support the new WKD draft with the openpgpkey subdomain.
|
|
|
|
* wkd: Change client/server limit back to 64 KiB.
|
|
|
|
* tools: gpgconf: Killing order is children-first.
|
|
|
|
* Return better error code for some getinfo IPC commands.
|
|
|
|
* po: Update Russian translation.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2019-06-20 06:09:17 +02:00
|
|
|
Wed Jun 19 21:02:05 UTC 2019 - Jason Sikes <jsikes@suse.de>
|
|
|
|
|
|
|
|
- Fix secure memory being disabled before fips checks in libgcrypt [boo#1137307]
|
|
|
|
* Added gnupg-2.2.16-secmem.patch
|
|
|
|
|
2019-05-30 10:23:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu May 30 08:00:37 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.2.16
|
|
|
|
* gpg: Fixed i18n markup of some strings.
|
|
|
|
* gpg: Allow deletion of subkeys with --delete-[secret-]key.
|
|
|
|
* gpg: Do not bail on an invalid packet in the local keyring.
|
|
|
|
* gpg: Do not allow creation of user ids larger than our parser allows.
|
|
|
|
* gpg: Do not delete any keys if --dry-run is passed.
|
|
|
|
* gpg: Fix using --decrypt along with --use-embedded-filename.
|
|
|
|
* gpg: Improve the photo image viewer selection.
|
|
|
|
* gpg: enable OpenPGP export of cleartext keys with comments.
|
|
|
|
* gpg: Do not print a hint to use the deprecated --keyserver option.
|
|
|
|
* gpg: Change update_keysig_packet to replace SHA-1 by SHA-256.
|
|
|
|
* gpg: Use just the addrspec from the Signer's UID.
|
|
|
|
* gpg: Accept also armored data from the WKD.
|
|
|
|
* gpg: Set a limit of 5 to the number of keys imported from the WKD.
|
|
|
|
* gpg: Don't use EdDSA algo ID for ECDSA curves.
|
|
|
|
* agent: Stop scdaemon after reload when disable_scdaemon.
|
|
|
|
* agent: For SSH key, don't put NUL-byte at the end.
|
|
|
|
* agent: correct length for uri and comment on 64-bit big-endian platforms
|
|
|
|
* dirmngr: Allow for other hash algorithms than SHA-1 in OCSP.
|
|
|
|
* dirmngr: Improve domaininfo cache update algorithm.
|
|
|
|
* dirmngr: Better error code for http status 413.
|
|
|
|
* g10: Fix possible null dereference.
|
|
|
|
* g10: Fix double free when locating by mbox.
|
|
|
|
* g10: Fix symmetric cipher algo constant for ECDH.
|
|
|
|
* sm: Avoid confusing diagnostic for the default key.
|
|
|
|
* sm: Fix a warning in an es_fopencooie function.
|
|
|
|
* gpgconf: Before --launch check that the config file is fine.
|
|
|
|
* gpgconf: Support --homedir for --launch.
|
|
|
|
* build: Update m4/iconv.m4.
|
|
|
|
* doc: correct documentation for gpgconf --kill.
|
|
|
|
* scd: Add dummy option --application-priority.
|
|
|
|
* common: Fix AWK portability.
|
|
|
|
|
2019-03-28 10:20:17 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 28 08:48:36 UTC 2019 - Karol Babioch <kbabioch@suse.de>
|
|
|
|
|
2019-03-28 11:26:54 +01:00
|
|
|
- Update to 2.2.15
|
2019-03-28 10:20:17 +01:00
|
|
|
* sm: Allow decryption even if expired keys are configured.
|
|
|
|
* agent: Change command KEYINFO to print ssh fingerprints with other
|
|
|
|
hash algos.
|
|
|
|
* dirmngr: Fix build problems on Solaris due to the use of reserved
|
|
|
|
symbol names.
|
|
|
|
* wkd: New commands --print-wkd-hash and --print-wkd-url for
|
|
|
|
gpg-wks-client.
|
|
|
|
|
2019-03-19 13:28:29 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Mar 19 12:11:23 UTC 2019 - Karol Babioch <kbabioch@suse.de>
|
|
|
|
|
|
|
|
- Update to 2.2.14:
|
|
|
|
* gpg: Allow import of PGP desktop exported secret keys. Also avoid
|
|
|
|
importing secret keys if the secret keyblock is not valid.
|
|
|
|
* gpg: Do not error out on version 5 keys in the local keyring.
|
|
|
|
* gpg: Make invalid primary key algo obvious in key listings.
|
|
|
|
* sm: Do not mark a certificate in a key listing as de-vs compliant
|
|
|
|
if its use for a signature will not be possible.
|
|
|
|
* sm: Fix certificate creation with key on card.
|
|
|
|
* sm: Create rsa3072 bit certificates by default.
|
|
|
|
* sm: Print Yubikey attestation extensions with --dump-cert.
|
|
|
|
* agent: Fix cancellation handling for scdaemon.
|
|
|
|
* agent: Support --mode=ssh option for CLEAR_PASSPHRASE.
|
|
|
|
* scd: Fix flushing of the CA-FPR DOs in app-openpgp.
|
|
|
|
* scd: Avoid a conflict error with the "undefined" app.
|
|
|
|
* dirmngr: Add CSRF protection exception for protonmail.
|
|
|
|
* dirmngr: Fix build problems with gcc 9 in libdns.
|
|
|
|
* gpgconf: New option --show-socket for use wity --launch.
|
|
|
|
* gpgtar: Make option -C work for archive creation.
|
|
|
|
- Removed patches that are included upstream by now:
|
|
|
|
- 0001-libdns-Avoid-using-compound-literals.patch
|
|
|
|
- 0002-libdns-Avoid-using-compound-literals-2.patch
|
|
|
|
- 0003-libdns-Avoid-using-compound-literals-3.patch
|
|
|
|
- 0004-libdns-Avoid-using-compound-literals-4.patch
|
|
|
|
- 0005-libdns-Avoid-using-compound-literals-5.patch
|
|
|
|
- 0006-libdns-Avoid-using-compound-literals-6.patch
|
|
|
|
- 0007-libdns-Avoid-using-compound-literals-7.patch
|
|
|
|
- 0008-libdns-Avoid-using-compound-literals-8.patch
|
|
|
|
|
2019-02-27 09:22:45 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 26 11:35:29 UTC 2019 - Pedro Monreal Gonzalez <pmonrealgonzalez@suse.com>
|
|
|
|
|
|
|
|
- Fix build with gcc9 [bsc#1121223]
|
|
|
|
* Avoid using compound literals
|
|
|
|
- Upstream bug: https://dev.gnupg.org/T4367
|
|
|
|
* Added upstream patches:
|
|
|
|
- 0001-libdns-Avoid-using-compound-literals.patch
|
|
|
|
- 0002-libdns-Avoid-using-compound-literals-2.patch
|
|
|
|
- 0003-libdns-Avoid-using-compound-literals-3.patch
|
|
|
|
- 0004-libdns-Avoid-using-compound-literals-4.patch
|
|
|
|
- 0005-libdns-Avoid-using-compound-literals-5.patch
|
|
|
|
- 0006-libdns-Avoid-using-compound-literals-6.patch
|
|
|
|
- 0007-libdns-Avoid-using-compound-literals-7.patch
|
|
|
|
- 0008-libdns-Avoid-using-compound-literals-8.patch
|
|
|
|
|
2019-02-26 18:21:53 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Feb 22 19:30:29 UTC 2019 - olaf@aepfle.de
|
|
|
|
|
|
|
|
- Allow coredumps in X11 desktop sessions (bsc#1124847)
|
|
|
|
gpg-agent unconditionally disables coredumps, which is not
|
|
|
|
supposed to happen in the code path that does just exec(argv[])
|
|
|
|
gnupg-gpg-agent-ulimit.patch
|
|
|
|
|
2019-02-13 07:56:04 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 13 06:12:32 UTC 2019 - Karol Babioch <kbabioch@suse.de>
|
|
|
|
|
|
|
|
- Update to 2.2.13:
|
|
|
|
* gpg: Implement key lookup via keygrip (using the & prefix).
|
|
|
|
* gpg: Allow generating Ed25519 key from existing key.
|
|
|
|
* gpg: Emit an ERROR status line if no key was found with -k.
|
|
|
|
* gpg: Stop early when trying to create a primary Elgamal key.
|
|
|
|
* gpgsm: Print the card's key algorithms along with their keygrips
|
|
|
|
in interactive key generation.
|
|
|
|
* agent: Clear bogus pinentry cache in the error case.
|
|
|
|
* scd: Support "acknowledge button" feature.
|
|
|
|
* scd: Fix for USB INTERRUPT transfer.
|
|
|
|
* wks: Do no use compression for the the encrypted challenge and response.
|
|
|
|
|
|
|
|
Release-info: https://dev.gnupg.org/T4290
|
|
|
|
See-also: gnupg-announce/2019q1/000434.html
|
|
|
|
|
2018-12-15 10:09:24 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Dec 14 16:11:56 UTC 2018 - atoptsoglou@suse.com
|
|
|
|
|
2019-02-13 07:56:04 +01:00
|
|
|
- Update to 2.2.12:
|
2018-12-15 10:09:24 +01:00
|
|
|
* tools: New commands --install-key and --remove-key for
|
|
|
|
gpg-wks-client. This allows to prepare a Web Key Directory on a
|
|
|
|
local file system for later upload to a web server.
|
|
|
|
* gpg: New --list-option "show-only-fpr-mbox". This makes the use
|
|
|
|
of the new gpg-wks-client --install-key command easier on Windows.
|
|
|
|
* gpg: Improve processing speed when --skip-verify is used.
|
|
|
|
* gpg: Fix a bug where a LF was accidentally written to the console.
|
|
|
|
* gpg: --card-status now shwos whether a card has the new KDF
|
|
|
|
feature enabled.
|
|
|
|
* agent: New runtime option --s2k-calibration=MSEC. New configure
|
|
|
|
option --with-agent-s2k-calibration=MSEC. [#3399]
|
|
|
|
* dirmngr: Try another keyserver from the pool on receiving a 502,
|
|
|
|
503, or 504 error. [#4175]
|
|
|
|
* dirmngr: Avoid possible CSRF attacks via http redirects. A HTTP
|
|
|
|
query will not anymore follow a 3xx redirect unless the Location
|
|
|
|
header gives the same host. If the host is different only the
|
|
|
|
host and port is taken from the Location header and the original
|
|
|
|
path and query parts are kept.
|
|
|
|
* dirmngr: New command FLUSHCRL to flush all CRLS from disk and
|
|
|
|
memory. [#3967]
|
|
|
|
|
2018-11-08 21:43:23 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Nov 8 15:35:27 UTC 2018 - Cristian Rodríguez <crrodriguez@opensuse.org>
|
|
|
|
|
|
|
|
- Code no longer uses libcurl, remove from buildrequires.
|
|
|
|
|
2018-11-07 08:22:17 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 6 12:05:35 UTC 2018 - Karol Babioch <kbabioch@suse.com>
|
|
|
|
|
|
|
|
- Update to 2.2.11:
|
|
|
|
* gpgsm: Fix CRL loading when intermediate certicates are not yet trusted.
|
|
|
|
* gpgsm: Fix an error message about the digest algo.
|
|
|
|
* gpg: Fix a wrong warning due to new sign usage check introduced with 2.2.9.
|
|
|
|
* gpg: Print the "data source" even for an unsuccessful keyserver query.
|
|
|
|
* gpg: Do not store the TOFU trust model in the trustdb.
|
|
|
|
* scd: Fix cases of "Bad PIN" after using "forcesig".
|
|
|
|
* agent: Fix possible hang in the ssh handler.
|
|
|
|
* dirmngr: Tack the unmodified mail address to a WKD request.
|
|
|
|
* dirmngr: Tweak diagnostic about missing LDAP server file.
|
|
|
|
* dirmngr: In verbose mode print the OCSP responder id.
|
|
|
|
* dirmngr: Fix parsing of the LDAP port.
|
|
|
|
* wks: Add option --directory/-C to the server.
|
|
|
|
* wks: Add option --with-colons to the client.
|
|
|
|
* Fix EBADF when gpg et al. are called by broken CGI scripts.
|
|
|
|
* Fix some minor memory leaks and bugs.
|
|
|
|
|
2018-10-09 11:24:41 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Oct 4 04:09:12 UTC 2018 - Bernhard Wiedemann <bwiedemann@suse.com>
|
|
|
|
|
|
|
|
- Make package build reproducible (boo#1047218)
|
|
|
|
|
2018-07-25 08:15:59 +02:00
|
|
|
-------------------------------------------------------------------
|
2018-08-30 16:23:51 +02:00
|
|
|
Thu Aug 30 14:14:08 UTC 2018 - kbabioch@suse.com
|
|
|
|
|
|
|
|
- Update to 2.2.10:
|
2018-08-30 16:24:22 +02:00
|
|
|
* Refresh expired keys originating from the WKD
|
|
|
|
* Use a 256 KiB limit for a WKD imported key
|
|
|
|
* New option --known-notation
|
|
|
|
* dirmngr: Validate SRV records in WKD queries
|
2018-08-30 16:23:51 +02:00
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2018-07-25 08:15:59 +02:00
|
|
|
Wed Jul 25 05:50:42 UTC 2018 - tchvatal@suse.com
|
|
|
|
|
|
|
|
- Add basic udev rules for smartcards to be used with
|
|
|
|
scdaemon, taken from debian:
|
|
|
|
* scdaemon.udev
|
|
|
|
|
2018-07-13 09:19:53 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jul 13 07:13:12 UTC 2018 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.9:
|
|
|
|
* dirmngr: Fix recursive resolver mode and other bugs in the
|
|
|
|
libdns code
|
|
|
|
* dirmngr: When using libgpg-error 1.32 or later a GnuPG build
|
|
|
|
with NTBTLS support does not anymore block for dozens of
|
|
|
|
seconds before returning data.
|
|
|
|
* gpg: Fix bug in --show-keys which actually imported revocation
|
|
|
|
certificates
|
|
|
|
* gpg: Ignore too long user-ID and comment packets
|
|
|
|
* gpg: Fix crash due to bad German translation. Improved printf
|
|
|
|
format compile time check.
|
|
|
|
* gpg: Handle missing ISSUER sub packet gracefully in the presence of
|
|
|
|
the new ISSUER_FPR
|
|
|
|
* gpg: Allow decryption using several passphrases in most cases.
|
|
|
|
* gpg: Command --show-keys now enables the list options
|
|
|
|
show-unusable-uids, show-unusable-subkeys, show-notations and
|
|
|
|
show-policy-urls by default.
|
|
|
|
* gpg: Command --show-keys now prints revocation certificates.
|
|
|
|
* gpg: Add revocation reason to the "rev" and "rvs" records of the
|
|
|
|
option --with-colons. [#1173]
|
|
|
|
* gpg: Export option export-clean does now remove certain expired
|
|
|
|
subkeys; export-minimal removes all expired subkeys.
|
|
|
|
* gpg: New "usage" property for the drop-subkey filters.
|
|
|
|
|
2018-06-08 15:05:19 +02:00
|
|
|
-------------------------------------------------------------------
|
2018-06-08 16:38:26 +02:00
|
|
|
Fri Jun 8 14:37:06 UTC 2018 - kbabioch@suse.com
|
2018-06-08 15:05:19 +02:00
|
|
|
|
2018-06-08 14:49:21 +02:00
|
|
|
- Update to version 2.2.8:
|
|
|
|
* gpg: Decryption of messages not using the MDC mode will now lead to a
|
|
|
|
hard failure even if a legacy cipher algorithm was used. The option
|
|
|
|
--ignore-mdc-error can be used to turn this failure into a warning. Take
|
|
|
|
care: Never use that option unconditionally or without a prior warning.
|
|
|
|
* gpg: The MDC encryption mode is now always used regardless of the
|
|
|
|
cipher algorithm or any preferences. For testing --rfc2440 can be
|
|
|
|
used to create a message without an MDC.
|
|
|
|
* gpg: Sanitize the diagnostic output of the original file name in
|
2018-06-08 16:30:19 +02:00
|
|
|
verbose mode (bsc#1096745, CVE-2018-12020)
|
2018-06-08 14:49:21 +02:00
|
|
|
* gpg: Detect suspicious multiple plaintext packets in a more reliable way.
|
|
|
|
* gpg: Fix the duplicate key signature detection code.
|
|
|
|
* gpg: The options --no-mdc-warn, --force-mdc, --no-force-mdc,
|
|
|
|
--disable-mdc and --no-disable-mdc have no more effect.
|
|
|
|
* agent: Add DBUS_SESSION_BUS_ADDRESS and a few other envvars to the
|
|
|
|
list of startup environment variables.
|
2018-06-08 16:38:26 +02:00
|
|
|
- Refresh gnupg-2.0.18-files-are-digests.patch
|
|
|
|
to gnupg-2.2.8-files-are-digests.patch
|
2018-06-08 14:49:21 +02:00
|
|
|
|
2018-05-04 16:24:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri May 4 14:15:27 UTC 2018 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.7:
|
|
|
|
* gpg: New option --no-symkey-cache to disable the passphrase
|
|
|
|
cache for symmetrical en- and decryption.
|
|
|
|
* gpg: The ERRSIG status now prints the fingerprint if that is
|
|
|
|
part of the signature
|
|
|
|
* gpg: Relax emitting of FAILURE status lines
|
|
|
|
* gpg: Add a status flag to "sig" lines printed with --list-sigs
|
|
|
|
* gpg: Fix "Too many open files" when using --multifile
|
|
|
|
* ssh: Return an error for unknown ssh-agent flags
|
|
|
|
* dirmngr: Fix a CNAME problem with pools and TLS. Also use a
|
|
|
|
fixed mapping of keys.gnupg.net to sks-keyservers.net
|
|
|
|
* dirmngr: Try resurrecting dead hosts earlier (from 3h to 1.5h)
|
|
|
|
* dirmngr: Fallback to CRL if no default OCSP responder is
|
|
|
|
configured
|
|
|
|
* dirmngr: Implement CRL fetching via https. Here a redirection
|
|
|
|
to http is explictly allowed
|
|
|
|
* agent,dirmngr: New sub-command "getenv" for "getinfo" to ease
|
|
|
|
debugging
|
|
|
|
|
2018-04-10 09:10:42 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 10 06:32:22 UTC 2018 - kbabioch@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.6:
|
|
|
|
* gpg,gpgsm: New option --request-origin to pretend requests coming
|
|
|
|
from a browser or a remote site.
|
|
|
|
* gpg: Fix race condition on trustdb.gpg updates due to too early
|
|
|
|
released lock.
|
|
|
|
* gpg: Emit FAILURE status lines in almost all cases.
|
|
|
|
* gpg: Implement --dry-run for --passwd to make checking a key's
|
|
|
|
passphrase straightforward.
|
|
|
|
* gpg: Make sure to only accept a certification capable key for key
|
|
|
|
signatures.
|
|
|
|
* gpg: Better user interaction in --card-edit for the factory-reset
|
|
|
|
sub-command.
|
|
|
|
* gpg: Improve changing key attributes in --card-edit by adding an
|
|
|
|
explicit "key-attr" sub-command.
|
|
|
|
* gpg: Print the keygrips in the --card-status.
|
|
|
|
* scd: Support KDF DO setup.
|
|
|
|
* scd: Fix suspend/resume handling in the CCID driver.
|
|
|
|
* agent: Evict cached passphrases also via a timer.
|
|
|
|
* agent: Use separate passphrase caches depending on the request
|
|
|
|
origin.
|
|
|
|
* ssh: Support signature flags.
|
|
|
|
* dirmngr: Handle failures related to missing IPv6 support
|
|
|
|
gracefully.
|
|
|
|
* Allow the use of UNC directory names as homedir. [#3818]
|
|
|
|
- Dropped gnupg-CVE-2018-9234.patch since it is included upstream
|
|
|
|
|
2018-04-05 10:51:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Apr 5 08:38:58 UTC 2018 - kbabioch@suse.com
|
|
|
|
|
|
|
|
- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
|
|
|
|
can only be done with the master key, and not a signing subkey.
|
|
|
|
(bnc#1088255 CVE-2018-9234)
|
|
|
|
|
2018-02-25 13:21:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Feb 25 12:14:54 UTC 2018 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.5:
|
|
|
|
* gpg: Allow the use of the "cv25519" and "ed25519" short names
|
|
|
|
in addition to the canonical curve names in --batch --gen-key
|
|
|
|
* gpg: Make sure to print all secret keys with option --list-only
|
|
|
|
and --decrypt
|
|
|
|
* gpg: Fix the use of future-default with --quick-add-key for
|
|
|
|
signing keys
|
|
|
|
* gpg: Select a secret key by checking availability under
|
|
|
|
gpg-agent
|
|
|
|
* gpg: Fix reversed prompt texts for --only-sign-text-ids
|
|
|
|
* gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
|
|
|
|
systems
|
|
|
|
* gpgsm: Fix regression since 2.1 in --export-secret-key-raw
|
|
|
|
which got $d mod (q-1)$ wrong
|
|
|
|
* scd: Support the KDF Data Object of the OpenPGP card 3.3
|
|
|
|
* scd: Fix a regression in the internal CCID driver for certain
|
|
|
|
card readers
|
|
|
|
* dirmngr: Improve returned error description on failure of DNS
|
|
|
|
resolving
|
|
|
|
* wks: Implement command --install-key for gpg-wks-server.
|
|
|
|
|
2018-02-26 10:33:35 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Feb 22 15:10:33 UTC 2018 - fvogt@suse.com
|
|
|
|
|
|
|
|
- Use %license (boo#1082318)
|
|
|
|
|
2017-12-21 16:21:47 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Dec 21 09:44:03 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.4:
|
|
|
|
* gpg: Change default preferences to prefer SHA512.
|
|
|
|
* gpg: Print a warning when more than 150 MiB are encrypted using
|
|
|
|
a cipher with 64 bit block size.
|
|
|
|
* gpg: Print a warning if the MDC feature has not been used for a
|
|
|
|
message.
|
|
|
|
* gpg: Fix regular expression of domain addresses in trust
|
|
|
|
signatures
|
|
|
|
* agent: New option --auto-expand-secmem to help with high
|
|
|
|
numbers of concurrent connections. Requires libgcrypt 1.8.2
|
|
|
|
for having an effect.
|
|
|
|
* dirmngr: Cache responses of WKD queries.
|
|
|
|
* gpgconf: Add option --status-fd.
|
|
|
|
* wks: Add commands --check and --remove-key to gpg-wks-server
|
|
|
|
* Increase the backlog parameter of the daemons to 64 and add
|
|
|
|
option --listen-backlog.
|
|
|
|
- Not enabled features:
|
|
|
|
* New configure option --enable-run-gnupg-user-socket to first
|
|
|
|
try a socket directory which is not removed by systemd at
|
|
|
|
session end.
|
|
|
|
|
2017-11-21 09:28:41 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 21 08:25:48 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.3:
|
|
|
|
* dirmngr: Fix crash in case of a CRL loading error
|
|
|
|
* gpgtar: Fix wrong behaviour of --set-filename
|
|
|
|
* gpg: Silence AKL retrieval messages
|
|
|
|
* agent: Use clock or clock_gettime for calibration
|
|
|
|
* agent: Improve robustness of the shutdown pending state
|
|
|
|
|
2017-11-07 21:16:25 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 7 20:08:04 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.2:
|
|
|
|
* gpg: Avoid duplicate key imports by concurrently running gpg
|
|
|
|
processes
|
|
|
|
* gpg: Fix creating on-disk subkey with on-card primary key
|
|
|
|
* gpg: Fix validity retrieval for multiple keyrings
|
|
|
|
* gpg: Fix --dry-run and import option show-only for secret keys
|
|
|
|
* gpg: Print "sec" or "sbb" for secret keys with import option
|
|
|
|
import-show
|
|
|
|
* gpg: Make import less verbose
|
|
|
|
* gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
|
|
|
|
parameter "Subkey-Grip" to unattended key generation
|
|
|
|
* gpg: Improve "factory-reset" command for OpenPGP cards
|
|
|
|
* gpg: Ease switching Gnuk tokens into ECC mode by using the magic
|
|
|
|
keysize value 25519
|
|
|
|
* gpgsm: Fix --with-colon listing in crt records for fields > 12.
|
|
|
|
* gpgsm: Do not expect X.509 keyids to be unique
|
|
|
|
* agent: Fix stucked Pinentry when using --max-passphrase-days
|
|
|
|
* agent: New option --s2k-count
|
|
|
|
* dirmngr: Do not follow https-to-http redirects
|
|
|
|
* dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
|
|
|
|
* gpgconf: Ignore non-installed components for commands
|
|
|
|
--apply-profile and --apply-defaults
|
|
|
|
* Add configure option --enable-werror
|
|
|
|
|
2017-09-19 22:27:32 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Sep 19 19:12:53 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.1:
|
|
|
|
* gpg: Fix formatting of the user id in batch mode key generation
|
|
|
|
if only "name-email" is given.
|
|
|
|
* gpgv: Fix annoying "not suitable for" warnings.
|
|
|
|
* wks: Convey only the newest user id to the provider. This is
|
|
|
|
the case if different names are used with the same addr-spec.
|
|
|
|
* wks: Create a complying user id for provider policy mailbox-only.
|
|
|
|
* wks: Add workaround for posteo.de.
|
|
|
|
* scd: Fix the use of large ECC keys with an OpenPGP card.
|
|
|
|
* dirmngr: Use system provided root certificates if no specific
|
|
|
|
HKP certificates are configured. If bu
|
|
|
|
|
2017-08-28 19:36:56 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 28 17:21:30 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.2.0:
|
|
|
|
* New long term stable branch, replacing the 2.0.x series
|
|
|
|
* gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
|
|
|
|
is again the default boo#1054088
|
|
|
|
* Fixed a few minor bugs
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Aug 12 16:56:26 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.23:
|
|
|
|
* gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
|
|
|
|
are now used by default. Note: this enables keyserver and Web Key
|
|
|
|
Directory operators to notice when a signature from a locally
|
|
|
|
non-available key is being verified for the first time or when
|
|
|
|
you intend to encrypt to a mail address without having the key
|
|
|
|
locally. This new behaviour will eventually make key discovery
|
|
|
|
much easier and mostly automatic. Disable this by adding
|
|
|
|
no-auto-key-retrieve
|
|
|
|
auto-key-locate local
|
|
|
|
to your gpg.conf.
|
|
|
|
* agent: Option --no-grab is now the default. The new option --grab
|
|
|
|
allows to revert this.
|
|
|
|
* gpg: New import option "show-only".
|
|
|
|
* gpg: New option --disable-dirmngr to entirely disable network
|
|
|
|
access for gpg.
|
|
|
|
* gpg,gpgsm: Tweaked DE-VS compliance behaviour.
|
|
|
|
* New configure flag --enable-all-tests to run more extensive tests
|
|
|
|
during "make check".
|
|
|
|
* gpgsm: The keygrip is now always printed in colon mode as
|
|
|
|
documented in the man page.
|
|
|
|
|
2017-07-28 21:33:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jul 28 19:29:52 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.22:
|
|
|
|
* gpg: Extend command --quick-set-expire to allow for setting the
|
|
|
|
expiration time of subkeys.
|
|
|
|
* gpg: By default try to repair keys during import. New sub-option
|
|
|
|
no-repair-keys for --import-options.
|
|
|
|
* gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
|
|
|
|
* gpg: New options --key-origin and --with-key-origin. Store the
|
|
|
|
time of the last key update from keyservers, WKD, or DANE.
|
|
|
|
* agent: New option --ssh-fingerprint-digest.
|
|
|
|
* dimngr: Lower timeouts on keyserver connection attempts and made
|
|
|
|
it configurable.
|
|
|
|
* dirmngr: Tor will now automatically be detected and used. The
|
|
|
|
option --no-use-tor disables Tor detection.
|
|
|
|
* dirmngr: Now detects a changed /etc/resolv.conf.
|
|
|
|
* agent,dirmngr: Initiate shutdown on removal of the GnuPG home
|
|
|
|
directory.
|
|
|
|
* gpg: Avoid caching passphrase for failed symmetric encryption.
|
|
|
|
* agent: Support for unprotected ssh keys.
|
|
|
|
* dirmngr: Fixed name resolving on systems using only v6
|
|
|
|
nameservers.
|
|
|
|
* dirmngr: Allow the use of TLS over http proxies.
|
|
|
|
* wks: New man pages for client and server.
|
|
|
|
|
2017-05-22 11:46:20 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri May 19 11:59:24 UTC 2017 - marco.strigl@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.21:
|
|
|
|
* modified gnupg-2.0.18-files-are-digests.patch to work with
|
|
|
|
obs-sign again bsc#1039899
|
|
|
|
|
2017-05-15 22:55:07 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon May 15 20:49:25 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.21:
|
|
|
|
* gpg,gpgsm: Fix corruption of old style keyring.gpg files,
|
|
|
|
regression in 2.1.20
|
|
|
|
* gpg,dirmngr: Removed the skeleton config file support
|
|
|
|
New installations no longer generate a configuration file.
|
|
|
|
In the absence of a file, SHA-2 family hashes are used.
|
|
|
|
Existing configurations are not touched.
|
|
|
|
drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
|
|
|
|
* gpg: Fixed import filter property match bug.
|
|
|
|
* scd: Removed Linux support for Cardman 4040 PCMCIA reader.
|
|
|
|
* scd: Fixed some corner case bugs in resume/suspend handling.
|
|
|
|
* Many minor bug fixes and code cleanup.
|
|
|
|
|
2017-04-05 11:54:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 4 14:00:36 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.20:
|
|
|
|
* gpg: New properties 'expired', 'revoked', and 'disabled' for the
|
|
|
|
import and export filters.
|
|
|
|
* gpg: New command --quick-set-primary-uid.
|
|
|
|
* gpg: New compliance field for the --with-colon key listing.
|
|
|
|
* gpg: Changed the key parser to generalize the processing of local
|
|
|
|
meta data packets.
|
|
|
|
* gpg: Fixed assertion failure in the TOFU trust model.
|
|
|
|
* gpg: Fixed exporting of zero length user ID packets.
|
|
|
|
* scd: Improved support for multiple readers.
|
|
|
|
* scd: Fixed timeout handling for key generation.
|
|
|
|
* agent: New option --enable-extended-key-format.
|
|
|
|
* dirmngr: Do not add a keyserver to a new dirmngr.conf. Dirmngr
|
|
|
|
uses a default keyserver.
|
|
|
|
* dimngr: Do not treat TLS warning alerts as severe error when
|
|
|
|
building with GNUTLS.
|
|
|
|
* dirmngr: Actually take /etc/hosts in account.
|
|
|
|
* wks: Fixed client problems on Windows. Published keys are now set
|
|
|
|
to world-readable.
|
|
|
|
* tests: Fixed creation of temporary directories.
|
|
|
|
* A socket directory for a non standard GNUGHOME is now created on
|
|
|
|
the fly under /run/user. Thus "gpgconf --create-socketdir" is now
|
|
|
|
optional. The use of "gpgconf --remove-socketdir" to clean up
|
|
|
|
obsolete socket directories is however recommended to avoid
|
|
|
|
cluttering /run/user with useless directories.
|
|
|
|
* Fixed build problems on some platforms.
|
|
|
|
|
2017-03-16 10:35:18 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Mar 14 20:41:55 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- Use stronger defaults for new users, using SHA-2 digest family
|
|
|
|
for certificates and message signatures - FATE#323084
|
|
|
|
adding gnupg-2.1.19-stronger-defaults.patch
|
|
|
|
|
2017-03-07 15:31:11 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Mar 7 12:55:14 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.19:
|
|
|
|
* gpg: Print a warning if Tor mode is requested but the Tor
|
|
|
|
daemon is not running.
|
|
|
|
* gpg: New status code DECRYPTION_KEY to print the actual private
|
|
|
|
key used for decryption.
|
|
|
|
* gpgv: New options --log-file and --debug.
|
|
|
|
* gpg-agent: Revamp the prompts to ask for card PINs.
|
|
|
|
* scd: Support for multiple card readers.
|
|
|
|
* scd: Removed option --debug-disable-ticker. Ticker is used
|
|
|
|
only when it is required to watch removal of device/card.
|
|
|
|
* scd: Improved detection of card inserting and removal.
|
|
|
|
* dirmngr: New option --disable-ipv4.
|
|
|
|
* dirmngr: New option --no-use-tor to explicitly disable the use
|
|
|
|
of Tor.
|
|
|
|
* dirmngr: The option --allow-version-check is now required even
|
|
|
|
if the option --use-tor is also used.
|
|
|
|
* dirmngr: Handle a missing nsswitch.conf gracefully.
|
|
|
|
* dirmngr: Avoid PTR lookups for keyserver pools. The are only
|
|
|
|
done for the debug command "keyserver --hosttable".
|
|
|
|
* dirmngr: Rework the internal certificate cache to support
|
|
|
|
classes of certificates. Load system provided certificates on
|
|
|
|
startup.
|
|
|
|
* Add options --tls, --no-crl, and --systrust to the "VALIDATE"
|
|
|
|
command.
|
|
|
|
* dirmngr: Add support for the ntbtls library.
|
|
|
|
* wks: Create mails with a "WKS-Phase" header. Fix detection of
|
|
|
|
Draft-2 mode.
|
|
|
|
* Many other bug fixes and new regression tests.
|
|
|
|
- dirmngr: use system certificate store
|
|
|
|
|
2017-03-02 13:53:32 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 2 10:12:09 UTC 2017 - jengelh@inai.de
|
|
|
|
|
|
|
|
- Rewrite descriptions
|
|
|
|
|
2017-01-24 20:38:21 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 24 16:32:04 UTC 2017 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.18:
|
|
|
|
* gpg: Remove bogus subkey signature while cleaning a key (with
|
|
|
|
export-clean, import-clean, or --edit-key's sub-command clean)
|
|
|
|
* gpg: Allow freezing the clock with --faked-system-time.
|
|
|
|
* gpg: New --export-option flag "backup", new --import-option flag
|
|
|
|
"restore".
|
|
|
|
* gpg-agent: Fixed long delay due to a regression in the progress
|
|
|
|
callback code.
|
|
|
|
* scd: Lots of code cleanup and internal changes.
|
|
|
|
* scd: Improved the internal CCID driver.
|
|
|
|
* dirmngr: Fixed problem with the DNS glue code (removal of the
|
|
|
|
trailing dot in domain names).
|
|
|
|
* dirmngr: Make sure that Tor is actually enabled after changing the
|
|
|
|
conf file and sending SIGHUP or "gpgconf --reload dirmngr".
|
|
|
|
* dirmngr: Fixed Tor access to IPv6 addresses. Note that current
|
|
|
|
versions of Tor may require that the flag "IPv6Traffic" is used
|
|
|
|
with the option "SocksPort" in torrc to actually allow IPv6
|
|
|
|
traffic.
|
|
|
|
* dirmngr: Fixed HKP for literally given IPv6 addresses.
|
|
|
|
* dirmngr: Enabled reverse DNS lookups via Tor.
|
|
|
|
* dirmngr: Added experimental SRV record lookup for WKD.
|
|
|
|
See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
|
|
|
|
* dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
|
|
|
|
lookups. Avoid SRV record lookup when a port is explicitly
|
|
|
|
specified. This fixes a regression from the 1.4 and 2.0 behavior.
|
|
|
|
* dirmngr: Gracefully handle a missing /etc/nsswitch.conf. Ignore
|
|
|
|
negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
|
|
|
|
* dirmngr: Better debug output for flags "dns" and "network".
|
|
|
|
* dirmngr: On reload mark all known HKP servers alive.
|
|
|
|
* gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
|
|
|
|
* tools: gpg-wks-client now ignores a missing policy file on the
|
|
|
|
server.
|
|
|
|
* Avoid unnecessary ambiguity error message in the option parsing.
|
|
|
|
* Further improvements of the regression test suite.
|
|
|
|
* Fixed building with --disable-libdns configure option.
|
|
|
|
* Fixed a crash running the tests on 32 bit architectures.
|
|
|
|
* Fixed spurious failures on BSD system in the spawn functions.
|
|
|
|
This affected for example gpg-wks-client and gpgconf.
|
|
|
|
|
2017-01-09 10:33:05 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jan 9 09:18:48 UTC 2017 - tchvatal@suse.com
|
|
|
|
|
2017-01-09 10:54:30 +01:00
|
|
|
- Remove the fixme, condition around fdupes
|
2017-01-09 10:33:05 +01:00
|
|
|
|
2016-12-20 20:34:32 +01:00
|
|
|
-------------------------------------------------------------------
|
2016-12-27 19:34:21 +01:00
|
|
|
Sun Dec 25 15:12:44 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- add runtime dependency to match runtime version check for libksba
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2016-12-20 20:34:32 +01:00
|
|
|
Tue Dec 20 18:58:55 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.17:
|
|
|
|
* gpg: By default new keys expire after 2 years.
|
|
|
|
* gpg: New command --quick-set-expire to conveniently change the
|
|
|
|
expiration date of keys.
|
|
|
|
* gpg: Option and command names have been changed for easier
|
|
|
|
comprehension. The old names are still available as aliases.
|
|
|
|
* gpg: Improved the TOFU trust model.
|
|
|
|
* gpg: New option --default-new-key-algo.
|
|
|
|
* scd: Support OpenPGP card V3 for RSA.
|
|
|
|
* dirmngr: Support for the ADNS library has been removed. Now using
|
|
|
|
bundled libdns, enabling Tor support on all platforms.
|
|
|
|
New option --standard-resolver can be used to disable this code
|
|
|
|
at runtime.
|
|
|
|
* dirmngr: Lazily launch ldap reaper thread.
|
|
|
|
* tools: New options --check and --status-fd for gpg-wks-client.
|
|
|
|
* The UTF-8 byte order mark is now skipped when reading conf files.
|
|
|
|
* Fixed many bugs and regressions.
|
|
|
|
* Major improvements to the test suite. For example it is possible
|
|
|
|
to run the external test suite of GPGME.
|
|
|
|
|
2016-11-19 23:26:09 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Nov 19 22:07:13 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.16:
|
|
|
|
* gpg: New algorithm for selecting the best ranked public key when
|
|
|
|
using a mail address with -r, -R, or --locate-key.
|
|
|
|
* gpg: New option --with-tofu-info to print a new "tfs" record in
|
|
|
|
colon formatted key listings.
|
|
|
|
* gpg: New option --compliance as an alternative way to specify
|
|
|
|
options like --rfc2440, --rfc4880, et al.
|
|
|
|
* gpg: Many changes to the TOFU implementation.
|
|
|
|
* gpg: Improve usability of --quick-gen-key.
|
|
|
|
* gpg: In --verbose mode print a diagnostic when a pinentry is
|
|
|
|
launched.
|
|
|
|
* gpg: Remove code which warns for old versions of gnome-keyring.
|
|
|
|
* gpg: New option --override-session-key-fd.
|
|
|
|
* gpg: Option --output does now work with --verify.
|
|
|
|
* gpgv: New option --output to allow saving the verified data.
|
|
|
|
* gpgv: New option --enable-special-filenames.
|
|
|
|
* agent, dirmngr: New --supervised mode for use by systemd and alike.
|
|
|
|
* agent: By default listen on all available sockets using standard
|
|
|
|
names.
|
|
|
|
* agent: Invoke scdaemon with --homedir.
|
|
|
|
* dirmngr: On Linux now detects the removal of its own socket and
|
|
|
|
terminates.
|
|
|
|
* scd: Support ECC key generation.
|
|
|
|
* scd: Support more card readers.
|
|
|
|
* dirmngr: New option --allow-version-check to download a software
|
|
|
|
version database in the background.
|
|
|
|
* dirmngr: Use system provided CAs if no --hkp-cacert is given.
|
|
|
|
* dirmngr: Use a default keyserver if none is explicitly set
|
|
|
|
* gpgconf: New command --query-swdb to check software versions
|
|
|
|
against an copy of an online database.
|
|
|
|
* gpgconf: Print the socket directory with --list-dirs.
|
|
|
|
* tools: The WKS tools now support draft version -02.
|
|
|
|
* tools: Always build gpg-wks-client and install under libexec.
|
|
|
|
* tools: New option --supported for gpg-wks-client.
|
|
|
|
* The log-file option now accepts a value "socket://" to log to the
|
|
|
|
socket named "S.log" in the standard socket directory.
|
|
|
|
* Provide fake pinentries for use by tests cases of downstream
|
|
|
|
developers.
|
|
|
|
* Fixed many bugs and regressions.
|
|
|
|
* Many changes and improvements for the test suite.
|
|
|
|
- drop upstreamed patches:
|
|
|
|
* 0001-common-Follow-up-to-14479e2-fix-void-return-in-non-v.patch
|
|
|
|
* gnupg-2.1.15-bsc993324-status-output.patch
|
|
|
|
|
2016-09-13 15:56:48 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Sep 13 13:50:52 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- avoid mixing up status and colon line output - bsc#993324
|
|
|
|
add gnupg-2.1.15-bsc993324-status-output.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Sep 1 08:23:28 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- enable web key discovery tools
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 31 13:06:28 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- Add an explicit runtime dependency on libgcrypt >= 1.7.0 to
|
|
|
|
match runtime version check
|
|
|
|
|
2016-08-22 11:24:09 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Aug 19 21:22:22 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.15:
|
|
|
|
* gpg: Remove the --tofu-db-format option and support for the
|
|
|
|
split TOFU database.
|
|
|
|
* gpg: Add option --sender to prepare for coming features.
|
|
|
|
* gpg: Add option --input-size-hint to help progress indicators.
|
|
|
|
* gpg: Extend the PROGRESS status line with the counted unit.
|
|
|
|
* gpg: Avoid publishing the GnuPG version by default with --armor.
|
|
|
|
* gpg: Properly ignore legacy keys in the keyring cache.
|
|
|
|
* gpg: Always print fingerprint records in --with-colons mode.
|
|
|
|
* gpg: Make sure that keygrips are printed for each subkey in
|
|
|
|
--with-colons mode.
|
|
|
|
* gpg: New import filter "drop-sig".
|
|
|
|
* gpgsm: Fix a bug in the machine-readable key listing.
|
|
|
|
* gpg,gpgsm: Block signals during keyring updates to limits the
|
|
|
|
effects of a Ctrl-C at the wrong time.
|
|
|
|
* g13: Add command --umount and other fixes for dm-crypt.
|
|
|
|
* agent: Fix regression in SIGTERM handling.
|
|
|
|
* agent: Cleanup of the ssh-agent code.
|
|
|
|
* agent: Allow import of overly long keys.
|
|
|
|
* scd: Fix problems with card removal.
|
|
|
|
* dirmngr: Remove all code for running as a system service.
|
|
|
|
* tools: Make gpg-wks-client conforming to the specs.
|
|
|
|
* tests: Improve the output of the new regression test tool.
|
|
|
|
* tests: Distribute the standalone test runner.
|
|
|
|
* tests: Run each test in a clean environment.
|
|
|
|
* Spelling and grammar fixes.
|
|
|
|
- fix build error, adding
|
|
|
|
0001-common-Follow-up-to-14479e2-fix-void-return-in-non-v.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Aug 14 14:12:40 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.14:
|
|
|
|
* gpg: Removed options --print-dane-records and --print-pka-records.
|
|
|
|
The new export options "export-pka" and "export-dane" can instead
|
|
|
|
be used with the export command.
|
|
|
|
* gpg: New options --import-filter and --export-filter.
|
|
|
|
* gpg: New import options "import-show" and "import-export".
|
|
|
|
* gpg: New option --no-keyring.
|
|
|
|
* gpg: New command --quick-revuid.
|
|
|
|
* gpg: New options -f/--recipient-file and -F/--hidden-recipient-file
|
|
|
|
to directly specify encryption keys.
|
|
|
|
* gpg: New option --mimemode to indicate that the content is a MIME
|
|
|
|
part. Does only enable --textmode right now.
|
|
|
|
* gpg: New option --rfc4880bis to allow experiments with proposed
|
|
|
|
changes to the current OpenPGP specs.
|
|
|
|
* gpg: Fix regression in the "fetch" sub-command of --card-edit.
|
|
|
|
* gpg: Fix regression since 2.1 in option --try-all-secrets.
|
|
|
|
* gpgv: Change default options for extra security.
|
|
|
|
* gpgsm: No more root certificates are installed by default.
|
|
|
|
* agent: "updatestartuptty" does now affect more environment
|
|
|
|
variables.
|
|
|
|
* scd: The option --homedir does now work with scdaemon.
|
|
|
|
* scd: Support some more GEMPlus card readers.
|
|
|
|
* gpgtar: Fix handling of '-' as file name.
|
|
|
|
* gpgtar: New commands --create and --extract.
|
|
|
|
* gpgconf: Tweak for --list-dirs to better support shell scripts.
|
|
|
|
* tools: Add programs gpg-wks-client and gpg-wks-server to implement
|
|
|
|
a Web Key Service. The configure option --enable-wks-tools is
|
|
|
|
required to build them; they should be considered Beta software.
|
|
|
|
* tests: Complete rework of the openpgp part of the test suite. The
|
|
|
|
test scripts have been changed from Bourne shell scripts to Scheme
|
|
|
|
programs. A customized scheme interpreter (gpgscm) is included.
|
|
|
|
This change was triggered by the need to run the test suite on
|
|
|
|
non-Unix platforms.
|
|
|
|
* The rendering of the man pages has been improved.
|
|
|
|
- drop upstream gnupg-make_--try-all-secrets_work.patch
|
|
|
|
|
2016-08-04 17:57:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Aug 4 12:17:14 UTC 2016 - tchvatal@suse.com
|
|
|
|
|
|
|
|
- Fix date call as the curlified parameter for sure are not parsed
|
|
|
|
correctly by escaping it with %
|
|
|
|
|
2016-08-04 12:12:03 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 3 11:56:58 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- Fix upstream bug 1985: --try-all-secrets doesn't work when
|
|
|
|
decrypting messages encrypted with --hidden-recipient, fixes unit
|
|
|
|
tests of the duplicity package.
|
|
|
|
Adding gnupg-make_--try-all-secrets_work.patch
|
|
|
|
- record the fact that gpg-error 1.21 is required
|
|
|
|
|
2016-06-16 22:47:53 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 16 20:21:39 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.13:
|
|
|
|
* gpg: New command --quick-addkey. Extend the --quick-gen-key
|
|
|
|
command.
|
|
|
|
* gpg: New --keyid-format "none" which is now also the default.
|
|
|
|
* gpg: New option --with-subkey-fingerprint.
|
|
|
|
* gpg: Include Signer's UID subpacket in signatures if the secret key
|
|
|
|
has been specified using a mail address and the new option
|
|
|
|
--disable-signer-uid is not used.
|
|
|
|
* gpg: Allow unattended deletion of a secret key.
|
|
|
|
* gpg: Allow export of non-passphrase protected secret keys.
|
|
|
|
* gpg: New status lines KEY_CONSIDERED and NOTATION_FLAGS.
|
|
|
|
* gpg: Change status line TOFU_STATS_LONG to use '~' as
|
|
|
|
a non-breaking-space character.
|
|
|
|
* gpg: Speedup key listings in Tofu mode.
|
|
|
|
* gpg: Make sure that the current and total values of a PROGRESS
|
|
|
|
status line are small enough.
|
|
|
|
* gpgsm: Allow the use of AES192 and SERPENT ciphers.
|
|
|
|
* dirmngr: Adjust WKD lookup to current specs.
|
|
|
|
* dirmngr: Fallback to LDAP v3 if v2 is is not supported.
|
|
|
|
* gpgconf: New commands --create-socketdir and --remove-socketdir,
|
|
|
|
new option --homedir.
|
|
|
|
* If a /run/user/$UID directory exists, that directory is now used
|
|
|
|
for IPC sockets instead of the GNUPGHOME directory. This fixes
|
|
|
|
problems with NFS and too long socket names and thus avoids the
|
|
|
|
need for redirection files.
|
|
|
|
* Speedup fd closing after a fork.
|
|
|
|
- drop upstreamed gnupg-fix-signature-checking.patch
|
|
|
|
|
2016-06-02 18:46:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 2 16:01:40 UTC 2016 - pjanouch@suse.de
|
|
|
|
|
|
|
|
- add gnupg-fix-signature-checking.patch (bsc#981020)
|
|
|
|
https://bugs.gnupg.org/gnupg/issue2351
|
|
|
|
|
2016-05-10 13:27:26 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed May 4 15:37:12 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.12:
|
|
|
|
* gpg: New --edit-key sub-command "change-usage" for testing
|
|
|
|
purposes.
|
|
|
|
* gpg: Out of order key-signatures are now systematically detected
|
|
|
|
and fixed by --edit-key.
|
|
|
|
* gpg: Improved detection of non-armored messages.
|
|
|
|
* gpg: Removed the extra prompt needed to create Curve25519 keys.
|
|
|
|
* gpg: Improved user ID selection for --quick-sign-key.
|
|
|
|
* gpg: Use the root CAs provided by the system with --fetch-key.
|
|
|
|
* gpg: Add support for the experimental Web Key Directory key
|
|
|
|
location service.
|
|
|
|
* gpg: Improve formatting of Tofu messages and emit new Tofu specific
|
|
|
|
status lines.
|
|
|
|
* gpgsm: Add option --pinentry-mode to support a loopback pinentry.
|
|
|
|
* gpgsm: A new pubring.kbx is now created with the header blob so
|
|
|
|
that gpg can detect that the keybox format needs to be used.
|
|
|
|
* agent: Add read support for the new private key protection format
|
|
|
|
openpgp-s2k-ocb-aes.
|
|
|
|
* agent: Add read support for the new extended private key format.
|
|
|
|
* agent: Default to --allow-loopback-pinentry and add option
|
|
|
|
--no-allow-loopback-pinentry.
|
|
|
|
* scd: Changed to use the new libusb 1.0 API for the internal CCID
|
|
|
|
driver.
|
|
|
|
* dirmngr: The dirmngr-client does now auto-detect the PEM format.
|
|
|
|
* g13: Add experimental support for dm-crypt.
|
|
|
|
* The man pages for gpg and gpgv are now installed under the correct
|
|
|
|
name (gpg2 or gpg - depending on a configure option).
|
|
|
|
|
2016-03-07 13:44:00 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Mar 6 08:17:00 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.11:
|
|
|
|
* gpg: New command --export-ssh-key to replace the gpgkey2ssh tool.
|
|
|
|
* gpg: Allow to generate mail address only keys with --gen-key.
|
|
|
|
* gpg: "--list-options show-usage" is now the default.
|
|
|
|
* gpg: Make lookup of DNS CERT records holding an URL work.
|
|
|
|
* gpg: Emit PROGRESS status lines during key generation.
|
|
|
|
* gpg: Don't check for ambigious or non-matching key specification in
|
|
|
|
the config file or given to --encrypt-to. This feature will return
|
|
|
|
in 2.3.x.
|
|
|
|
* gpg: Lock keybox files while updating them.
|
|
|
|
* gpg: Fix possible keyring corruption. (bug#2193)
|
|
|
|
* gpg: Fix regression of "bkuptocard" sub-command in --edit-key and
|
|
|
|
remove "checkbkupkey" sub-command introduced with 2.1. (bug#2169)
|
|
|
|
* gpg: Fix internal error in gpgv when using default keyid-format.
|
|
|
|
* gpg: Fix --auto-key-retrieve to work with dirmngr.conf configured
|
|
|
|
keyservers. (bug#2147).
|
|
|
|
* agent: New option --pinentry-timeout.
|
|
|
|
* scd: Fix regression for generating RSA keys on card.
|
|
|
|
* dirmmgr: All configured keyservers are now searched.
|
|
|
|
* dirmngr: Install CA certificate for hkps.pool.sks-keyservers.net.
|
|
|
|
Use this certiticate even if --hkp-cacert is not used.
|
|
|
|
* gpgtar: Add actual encryption code. gpgtar does now fully replace
|
|
|
|
gpg-zip.
|
|
|
|
* gpgtar: Fix filename encoding problem on Windows.
|
|
|
|
* Print a warning if a GnuPG component is using an older version of
|
|
|
|
gpg-agent, dirmngr, or scdaemon.
|
|
|
|
- disable running test which no longer work
|
|
|
|
- remove 0001-gpg-Improve-the-keyblock-cache-s-transparency.patch
|
|
|
|
is now upstream
|
|
|
|
- the PIE options are implemented in the upstream build, and spec
|
|
|
|
code broke the build. The only remaining broken executable was
|
|
|
|
gpgsplit, which was removed from the package
|
|
|
|
|
2016-01-26 23:08:25 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 26 20:23:18 UTC 2016 - astieger@suse.com
|
|
|
|
|
|
|
|
- add g13, an experimental tool for accessing encrypted storage
|
|
|
|
with with GnuPG (cards)
|
|
|
|
|
2016-01-20 11:38:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 19 13:56:58 UTC 2016 - vcizek@suse.com
|
|
|
|
|
|
|
|
- fix fingerprint ambiguity (bsc#958891)
|
|
|
|
* https://bugs.gnupg.org/gnupg/issue2198
|
|
|
|
* add 0001-gpg-Improve-the-keyblock-cache-s-transparency.patch
|
|
|
|
|
2015-12-08 15:36:53 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Dec 6 14:14:45 UTC 2015 - p.drouand@gmail.com
|
|
|
|
|
|
|
|
- Move to pkgconfig() packaging style
|
|
|
|
|
2015-12-04 16:26:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Dec 4 13:35:40 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.10 adds TOFU (Trust-On-First-USe) and anonymous key
|
|
|
|
retrival via Tor.
|
|
|
|
* gpg: New trust models "tofu" and "tofu+pgp".
|
|
|
|
* gpg: New command --tofu-policy. New options --tofu-default-policy
|
|
|
|
and --tofu-db-format.
|
|
|
|
* gpg: New option --weak-digest to specify hash algorithms which
|
|
|
|
should be considered weak.
|
|
|
|
* gpg: Allow the use of multiple --default-key options; take the last
|
|
|
|
available key.
|
|
|
|
* gpg: New option --encrypt-to-default-key.
|
|
|
|
* gpg: New option --unwrap to only strip the encryption layer.
|
|
|
|
* gpg: New option --only-sign-text-ids to exclude photo IDs from key
|
|
|
|
signing.
|
|
|
|
* gpg: Check for ambigious or non-matching key specification in the
|
|
|
|
config file or given to --encrypt-to.
|
|
|
|
* gpg: Show the used card reader with --card-status.
|
|
|
|
* gpg: Print export statistics and an EXPORTED status line.
|
|
|
|
* gpg: Allow selecting subkeys by keyid in --edit-key.
|
|
|
|
* gpg: Allow updating the expiration time of multiple subkeys at
|
|
|
|
once.
|
|
|
|
* dirmngr: New option --use-tor. For full support this requires
|
|
|
|
libassuan version 2.4.2 and a patched version of libadns
|
|
|
|
(e.g. adns-1.4-g10-7 as used by the standard Windows installer).
|
|
|
|
* dirmngr: New option --nameserver to specify the nameserver used in
|
|
|
|
Tor mode.
|
|
|
|
* dirmngr: Keyservers may again be specified by IP address.
|
|
|
|
* dirmngr: Fixed problems in resolving keyserver pools.
|
|
|
|
* dirmngr: Fixed handling of premature termination of TLS streams so
|
|
|
|
that large numbers of keys can be refreshed via hkps.
|
|
|
|
* gpg: Fixed a regression in --locate-key [since 2.1.9].
|
|
|
|
* gpg: Fixed another bug for keyrings with legacy keys.
|
|
|
|
* gpgsm: Allow combinations of usage flags in --gen-key.
|
|
|
|
* Make tilde expansion work with most options.
|
|
|
|
* Many other cleanups and bug fixes.
|
|
|
|
|
2015-11-25 11:09:52 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 24 10:27:58 UTC 2015 - vcizek@suse.com
|
|
|
|
|
|
|
|
- enable tests for PPC64 again,
|
|
|
|
the problem from bsc#935887 went away
|
|
|
|
|
2015-12-04 16:26:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Nov 20 16:03:03 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- Improve upgrade to gpg2 from security:privacy w.r.t. libassuan
|
|
|
|
run-time dependencies (boo#955982)
|
|
|
|
|
2015-10-10 13:48:45 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Oct 10 11:39:55 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.9:
|
|
|
|
* gpg: Allow fetching keys via OpenPGP DANE (--auto-key-locate).\
|
|
|
|
New option --print-dane-records.
|
|
|
|
* gpg: Fix for a problem with PGP-2 keys in a keyring.
|
|
|
|
* gpg: Fail with an error instead of a warning if a modern cipher
|
|
|
|
algorithm is used without a MDC.
|
|
|
|
* agent: New option --pinentry-invisible-char.
|
|
|
|
* agent: Always do a RSA signature verification after creation.
|
|
|
|
* agent: Fix a regression in ssh-add-ing Ed25519 keys.
|
|
|
|
* agent: Fix ssh fingerprint computation for nistp384 and EdDSA.
|
|
|
|
* agent: Fix crash during passprase entry on some platforms.
|
|
|
|
* scd: Change timeout to fix problems with some 2.1 cards.
|
|
|
|
* dirmngr: Displayed name is now Key Acquirer.
|
|
|
|
* dirmngr: Add option --keyserver. Deprecate that option for gpg.
|
|
|
|
Install a dirmngr.conf file from a skeleton for new installations.
|
|
|
|
- update gnupg-add_legacy_FIPS_mode_option.patch for context change
|
|
|
|
|
2015-09-11 09:41:47 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Sep 11 06:02:23 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.8:
|
|
|
|
* gpg: Sending very large keys to the keyservers works again.
|
|
|
|
* gpg: Validity strings in key listings are now again translatable.
|
|
|
|
* gpg: Emit FAILURE status lines to help GPGME.
|
|
|
|
* gpg: Does not anymore link to Libksba to reduce dependencies.
|
|
|
|
* gpgsm: Export of secret keys via Assuan is now possible.
|
|
|
|
* agent: Raise the maximum passphrase length from 100 to 255 bytes.
|
|
|
|
* agent: Fix regression using EdDSA keys with ssh.
|
|
|
|
* Does not anymore use a build timestamp by default.
|
|
|
|
* The fallback encoding for broken locale settings changed
|
|
|
|
from Latin-1 to UTF-8.
|
|
|
|
* Many code cleanups and improved internal documentation.
|
|
|
|
* Various minor bug fixes.
|
|
|
|
|
2015-08-12 21:49:22 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 12 10:58:48 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.7:
|
|
|
|
* gpg: Support encryption with Curve25519 if Libgcrypt 1.7 is used.
|
|
|
|
* gpg: In the --edit-key menu: Removed the need for "toggle", changed
|
|
|
|
how secret keys are indicated, new commands "fpr *" and "grip".
|
|
|
|
* gpg: More fixes related to legacy keys in a keyring.
|
|
|
|
* gpgv: Does now also work with a "trustedkeys.kbx" file.
|
|
|
|
* scd: Support some feature from the OpenPGP card 3.0 specs.
|
|
|
|
* scd: Improved ECC support
|
|
|
|
* agent: New option --force for the DELETE_KEY command.
|
|
|
|
* Dropped deprecated gpgsm-gencert.sh
|
|
|
|
* Various other bug fixes.
|
|
|
|
|
2015-07-02 16:27:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jul 2 14:26:21 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- do not run checks on ppc64 for now
|
|
|
|
|
2015-07-01 16:21:08 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 1 14:15:28 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.6:
|
|
|
|
* agent: New option --verify for the PASSWD command.
|
|
|
|
* gpgsm: Add command option "offline" as an alternative to
|
|
|
|
--disable-dirmngr.
|
|
|
|
* gpg: Do not prompt multiple times for a password in pinentry
|
|
|
|
loopback mode.
|
|
|
|
* Allow the use of debug category names with --debug.
|
|
|
|
* Using gpg-agent and gpg/gpgsm with different locales will now show
|
|
|
|
the correct translations in Pinentry.
|
|
|
|
* gpg: Improve speed of --list-sigs and --check-sigs.
|
|
|
|
* gpg: Make --list-options show-sig-subpackets work again.
|
|
|
|
* gpg: Fix an export problem for old keyrings with PGP-2 keys.
|
|
|
|
* scd: Support PIN-pads on more readers.
|
|
|
|
* dirmngr: Properly cleanup zombie LDAP helper processes and avoid
|
|
|
|
hangs on dirmngr shutdown.
|
|
|
|
* Various other bug fixes.
|
|
|
|
- remove documentation make workaround, fixed upstream
|
|
|
|
|
2015-06-28 17:25:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Jun 28 13:14:03 UTC 2015 - schwab@linux-m68k.org
|
|
|
|
|
|
|
|
- Enable workaround for missing dependencies everywhere
|
|
|
|
|
2015-06-16 09:33:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 15 13:20:33 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- fix build with openSUSE 13.2 and earlier, call make to
|
|
|
|
compensate for incorrect documentation dependencies.
|
|
|
|
|
2015-06-11 16:52:46 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 11 14:32:09 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- GnuPG 2.1.5:
|
|
|
|
* Support for an external passphrase cache.
|
|
|
|
* Support for the forthcoming version 3 OpenPGP smartcard.
|
|
|
|
* Manuals now show the actual used file names.
|
|
|
|
* Prepared for improved integration with Emacs.
|
|
|
|
* Code cleanups and minor bug fixes.
|
|
|
|
|
2015-05-17 13:50:57 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun May 17 08:24:15 UTC 2015 - meissner@suse.com
|
|
|
|
|
|
|
|
- info deinstall needs to be in %preun
|
|
|
|
|
2015-05-12 20:59:59 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue May 12 18:04:36 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- update to 2.1.4:
|
|
|
|
* gpg: Add command --quick-adduid to non-interacitivly add a new
|
|
|
|
user id to an existing key.
|
|
|
|
* gpg: Do no enable honor-keyserver-url by default. Make it work
|
|
|
|
if enabled.
|
|
|
|
* gpg: Display the serial number in the --card-staus output again.
|
|
|
|
* agent: Support for external password managers.
|
|
|
|
Add option --no-allow-external-cache.
|
|
|
|
* scdaemon: Improved handling of extended APDUs.
|
|
|
|
* Make HTTP proxies work again.
|
|
|
|
* All network access including DNS as been moved to Dirmngr.
|
|
|
|
* Allow building without LDAP support.
|
|
|
|
* Fixed lots of smaller bugs.
|
|
|
|
|
2015-04-11 21:08:10 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Apr 11 18:59:42 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- update to 2.1.3:
|
|
|
|
* gpg: LDAP keyservers are now supported by 2.1.
|
|
|
|
* gpg: New option --with-icao-spelling.
|
|
|
|
* gpg: New option --print-pka-records. Changed the PKA method to
|
|
|
|
use CERT records and hashed names.
|
|
|
|
* gpg: New command --list-gcrypt-config. New parameter "curve"
|
|
|
|
for --list-config.
|
|
|
|
* gpg: Print a NEWSIG status line like gpgsm always did.
|
|
|
|
* gpg: Print MPI values with --list-packets and --verbose.
|
|
|
|
* gpg: Write correct MPI lengths with ECC keys.
|
|
|
|
* gpg: Skip legacy PGP-2 keys while searching.
|
|
|
|
(drop 0001-gpg-Skip-legacy-keys-while-searching-keyrings.patch
|
|
|
|
now upstream)
|
|
|
|
* gpg: Improved searching for mail addresses when using a keybox.
|
|
|
|
* gpgsm: Changed default algos to AES-128 and SHA-256.
|
|
|
|
* gpgtar: Fixed extracting files with sizes of a multiple of 512.
|
|
|
|
* dirmngr: Fixed SNI handling for hkps pools.
|
|
|
|
(drop hkps-fix-host-name-verification-when-using-pools.patch
|
|
|
|
now upstream)
|
|
|
|
* dirmngr: extra-certs and trusted-certs are now always loaded
|
|
|
|
from the sysconfig dir instead of the homedir.
|
|
|
|
* Fixed possible problems due to compiler optimization, two minor
|
|
|
|
regressions, and other bugs.
|
|
|
|
- refreshed for context changes:
|
|
|
|
* gnupg-2.0.18-files-are-digests.patch
|
|
|
|
* gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
|
2015-03-23 14:47:16 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Mar 23 11:48:24 UTC 2015 - idonmez@suse.com
|
|
|
|
|
|
|
|
- Add hkps-fix-host-name-verification-when-using-pools.patch to
|
|
|
|
fix hkps support w/ pools. Upstream commit dc10d46.
|
|
|
|
|
2015-03-19 17:30:03 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 19 15:56:12 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- Ensure secure memory can be used with default 64k memlock limit
|
|
|
|
Fixes [boo#915931], removes gnupg-large_keys.patch
|
|
|
|
- Removed gnupg-remove_development_version_warning.patch, obsolete
|
|
|
|
- Removed gnupg-2.0.4-install_tools.diff, replaced by spec install
|
|
|
|
- Removed autoconf requirement and autoreconf calls thus obsoleted
|
|
|
|
|
2015-02-25 11:39:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 24 08:10:22 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- Fix invalid packet read error when reading keyrings [boo#914625]
|
|
|
|
add 0001-gpg-Skip-legacy-keys-while-searching-keyrings.patch
|
|
|
|
|
2015-02-12 09:37:54 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 11 21:48:13 UTC 2015 - astieger@suse.com
|
|
|
|
|
|
|
|
- update to 2.1.2:
|
|
|
|
* gpg: The parameter 'Passphrase' for batch key generation works
|
|
|
|
again.
|
|
|
|
* gpg: Using a passphrase option in batch mode now has the
|
|
|
|
expected effect on --quick-gen-key.
|
|
|
|
* gpg: Improved reporting of unsupported PGP-2 keys.
|
|
|
|
* gpg: Added support for algo names when generating keys using
|
|
|
|
--command-fd.
|
|
|
|
* gpg: Fixed DoS based on bogus and overlong key packets.
|
|
|
|
* agent: When setting --default-cache-ttl the value
|
|
|
|
for --max-cache-ttl is adjusted to be not lower than the former.
|
|
|
|
* agent: Fixed problems with the new --extra-socket.
|
|
|
|
* agent: Made --allow-loopback-pinentry changeable with gpgconf.
|
|
|
|
* agent: Fixed importing of unprotected openpgp keys.
|
|
|
|
* agent: Now tries to use a fallback pinentry if the standard
|
|
|
|
pinentry is not installed.
|
|
|
|
* scd: Added support for ECDH.
|
|
|
|
* Fixed several bugs related to bogus keyrings and improved some
|
|
|
|
other code.
|
|
|
|
- in gnupg-2.0.18-files-are-digests.patch, change buffer_to_u32 to
|
|
|
|
buf32_to_u32 from host2net.h to match upstream changes
|
|
|
|
- now requires automake 1.14
|
|
|
|
|
2014-12-29 07:05:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Dec 26 21:15:55 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.1.1:
|
|
|
|
* gpg: Detect faulty use of --verify on detached signatures.
|
|
|
|
* gpg: New import option "keep-ownertrust".
|
|
|
|
* gpg: New sub-command "factory-reset" for --card-edit.
|
|
|
|
* gpg: A stub key for smartcards is now created by --card-status.
|
|
|
|
* gpg: Fixed regression in --refresh-keys.
|
|
|
|
* gpg: Fixed regresion in %g and %p codes for --sig-notation.
|
|
|
|
* gpg: Fixed best matching hash algo detection for ECDSA and EdDSA.
|
|
|
|
* gpg: Improved perceived speed of secret key listisngs.
|
|
|
|
* gpg: Print number of skipped PGP-2 keys on import.
|
|
|
|
* gpg: Removed the option aliases --throw-keyid and --notation-data;
|
|
|
|
use --throw-keyids and --set-notation instead.
|
|
|
|
* gpg: New import option "keep-ownertrust".
|
|
|
|
* gpg: Skip too large keys during import.
|
|
|
|
* gpg,gpgsm: New option --no-autostart to avoid starting gpg-agent or
|
|
|
|
dirmngr.
|
|
|
|
* gpg-agent: New option --extra-socket to provide a restricted
|
|
|
|
command set for use with remote clients.
|
|
|
|
* gpgconf --kill does not anymore start a service only to kill it.
|
|
|
|
* gpg-pconnect-agent: Add convenience option --uiserver.
|
|
|
|
* More translations (but most of them are not complete).
|
|
|
|
* To support remotely mounted home directories, the IPC sockets may
|
|
|
|
now be redirected. This feature requires Libassuan 2.2.0.
|
|
|
|
* Improved portability and the usual bunch of bug fixes.
|
|
|
|
- removed patch not part of upstream release:
|
|
|
|
gnupg-2.1.0-boo-907198-openpgp_oid_to_str-buffer-overflow.patch
|
|
|
|
- refresh for context changes:
|
|
|
|
gnupg-2.0.18-files-are-digests.patch
|
|
|
|
gnupg-2.0.4-install_tools.diff
|
|
|
|
- refresh for upstream code changes:
|
|
|
|
gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
gnupg-detect_FIPS_mode.patch (MD5 removed)
|
|
|
|
|
2014-12-03 23:40:59 +01:00
|
|
|
-------------------------------------------------------------------
|
2014-12-25 19:12:17 +01:00
|
|
|
Thu Dec 25 18:09:11 UTC 2014 - dev@stellardeath.org
|
2014-12-25 18:08:58 +01:00
|
|
|
|
|
|
|
- Support for large RSA keys
|
|
|
|
This involves compiling with --enable-large-rsa and
|
|
|
|
--enable-large-secmem, as well as patching the number
|
|
|
|
of secmem bytes and IPC bytes to slightly larger values.
|
|
|
|
See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=739424
|
2014-12-25 19:12:17 +01:00
|
|
|
* added gnupg-large_keys.patch
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Dec 3 22:37:59 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update build requirement versions that changed with 2.1.0
|
2014-12-25 18:08:58 +01:00
|
|
|
|
2014-11-26 20:36:09 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Nov 26 19:21:15 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- fix buffer overflow in OID to string conversion function
|
|
|
|
[boo#907198], adding
|
|
|
|
gnupg-2.1.0-boo-907198-openpgp_oid_to_str-buffer-overflow.patch
|
|
|
|
|
2014-11-13 22:15:23 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Nov 11 16:10:04 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
- obsolete dirmngr (shipped with gpg since 2.1.0)
|
|
|
|
- spec cleanup after previous update
|
|
|
|
- get rid of "THIS IS A DEVELOPMENT VERSION" warning
|
|
|
|
http://lists.gnupg.org/pipermail/gnupg-devel/2014-November/029065.html
|
|
|
|
* added gnupg-remove_development_version_warning.patch
|
|
|
|
|
2014-11-11 11:52:31 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Nov 6 17:32:39 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
- upgrade to 2.1.0 (modern)
|
|
|
|
- The file "secring.gpg" is not anymore used to store the secret
|
|
|
|
keys. Merging of secret keys is now supported.
|
|
|
|
- All support for PGP-2 keys has been removed for security reasons.
|
|
|
|
- The standard key generation interface is now much leaner. This
|
|
|
|
will help a new user to quickly generate a suitable key.
|
|
|
|
- Support for Elliptic Curve Cryptography (ECC) is now available.
|
|
|
|
- Commands to create and sign keys from the command line without any
|
|
|
|
extra prompts are now available.
|
|
|
|
- The Pinentry may now show the new passphrase entry and the
|
|
|
|
passphrase confirmation entry in one dialog.
|
|
|
|
- There is no more need to manually start the gpg-agent. It is now
|
|
|
|
started by any part of GnuPG as needed.
|
|
|
|
- Problems with importing keys with the same long key id have been
|
|
|
|
addressed.
|
|
|
|
- The Dirmngr is now part of GnuPG proper and also takes care of
|
|
|
|
accessing keyserver.
|
|
|
|
- Keyserver pools are now handled in a smarter way.
|
|
|
|
- A new format for locally storing the public keys is now used.
|
|
|
|
This considerable speeds up operations on large keyrings.
|
|
|
|
- Revocation certificates are now created by default.
|
|
|
|
- Card support has been updated, new readers and token types are
|
|
|
|
supported.
|
|
|
|
- The format of the key listing has been changed to better identify
|
|
|
|
the properties of a key.
|
|
|
|
- The gpg-agent may now be used on Windows as a Pageant replacement
|
|
|
|
for Putty in the same way it is used for years on Unix as
|
|
|
|
ssh-agent replacement.
|
|
|
|
- Creation of X.509 certificates has been improved. It is now also
|
|
|
|
possible to export them directly in PKCS#8 and PEM format for use
|
|
|
|
on TLS servers.
|
|
|
|
- dropped patches:
|
|
|
|
* gnupg-2.0.20-automake113.diff
|
|
|
|
* gnupg-2.0.18-tmpdir.diff (socket is created in homedir now)
|
|
|
|
- refresh most of the remaining patches
|
|
|
|
- added new BuildRequires: gnutls-devel, pkg-config, npth-devel
|
|
|
|
|
2014-08-12 22:32:53 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Aug 12 20:19:45 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.26:
|
|
|
|
* gpg: Fix a regression in 2.0.24 if a subkey id is given
|
|
|
|
to --recv-keys et al.
|
|
|
|
* gpg: Cap attribute packets at 16MB.
|
|
|
|
* gpgsm: Auto-create the ".gnupg" home directory in the same
|
|
|
|
way gpg does.
|
|
|
|
* scdaemon: Allow for certificates > 1024 when using PC/SC.
|
|
|
|
- remove URL from package keyring, upstream file metadata changes
|
|
|
|
|
2014-07-01 23:33:00 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jul 1 21:05:55 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- gnupg-add_legacy_FIPS_mode_option.patch (part of [bnc#856312])
|
|
|
|
mentions GCRYCTL_INACTIVATE_FIPS_FLAG, raising the requirement
|
|
|
|
for gcrypt from 1.4.0 (from configure) to 1.6.1 where said flag
|
|
|
|
was introduced. Require this version to build.
|
|
|
|
|
2014-06-30 21:09:15 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 30 18:52:36 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.25:
|
|
|
|
* gpg: Fix a regression in 2.0.24 if more than one keyid is given
|
|
|
|
to --recv-keys et al.
|
|
|
|
* gpg: Cap RSA and Elgamal keysize at 4096 bit also for unattended
|
|
|
|
key generation.
|
|
|
|
* gpgsm: Fix a DISPLAY related problem with
|
|
|
|
--export-secret-key-p12.
|
|
|
|
* scdaemon: Support reader Gemalto IDBridge CT30.
|
|
|
|
|
2014-06-25 07:12:17 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jun 24 22:25:12 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.24
|
|
|
|
Contains a security fix to stop a possible DoS using garbled
|
|
|
|
compressed data packets which can be used to put gpg into an
|
|
|
|
infinite loop. [bnc#884130] [CVE-2014-4617]
|
|
|
|
* gpg: Avoid DoS due to garbled compressed data packets.
|
|
|
|
- further:
|
|
|
|
* gpg: Screen keyserver responses to avoid importing unwanted
|
|
|
|
keys from rogue servers.
|
|
|
|
* gpg: The validity of user ids is now shown by default. To
|
|
|
|
revert this add "list-options no-show-uid-validity" to gpg.conf
|
|
|
|
* gpg: Print more specific reason codes with the INV_RECP status.
|
|
|
|
* gpg: Allow loading of a cert only key to an OpenPGP card.
|
|
|
|
* gpg-agent: Make ssh support for ECDSA keys work with Libgcrypt
|
|
|
|
1.6.
|
|
|
|
|
2014-06-04 09:49:19 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jun 3 21:55:34 UTC 2014 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.23:
|
|
|
|
* gpg: Reject signatures made using the MD5 hash algorithm unless the
|
|
|
|
new option --allow-weak-digest-algos or --pgp2 are given.
|
|
|
|
* gpg: Do not create a trustdb file if --trust-model=always is used.
|
|
|
|
* gpg: Only the major version number is by default included in the
|
|
|
|
armored output.
|
|
|
|
* gpg: Print a warning if the Gnome-Keyring-Daemon intercepts the
|
|
|
|
communication with the gpg-agent.
|
|
|
|
* gpg: The format of the fallback key listing ("gpg KEYFILE") is now more
|
|
|
|
aligned to the regular key listing ("gpg -k").
|
|
|
|
* gpg: The option--show-session-key prints its output now before the
|
|
|
|
decryption of the bulk message starts.
|
|
|
|
* gpg: New %U expando for the photo viewer.
|
|
|
|
* gpgsm: Improved handling of re-issued CA certificates.
|
|
|
|
* scdaemon: Various fixes for pinpad equipped card readers.
|
|
|
|
* Minor bug fixes.
|
|
|
|
- Packaging changes:
|
|
|
|
* add gpgtar utility
|
|
|
|
* update and use use source URL for tarball signing key
|
|
|
|
* removed gnupg-2.0.9-RSA_ES.patch, applied upstream
|
|
|
|
* updated for context changes:
|
|
|
|
gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
gnupg-2.0.18-files-are-digests.patch
|
|
|
|
gnupg-dont-fail-with-seahorse-agent.patch
|
|
|
|
|
2014-05-01 12:48:32 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Apr 29 12:06:03 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
- add patch by Stephan Mueller which adds an option to enable
|
|
|
|
legacy ciphers in FIPS mode
|
|
|
|
* added gnupg-add_legacy_FIPS_mode_option.patch
|
|
|
|
(part of bnc#856312)
|
|
|
|
- added BuildRequires: makeinfo (to build info pages from the
|
|
|
|
patched gnupg.texi)
|
|
|
|
|
2014-02-15 11:10:41 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Feb 14 16:14:14 UTC 2014 - vcizek@suse.com
|
|
|
|
|
|
|
|
- install scdaemon to /usr/bin (bnc#863645)
|
|
|
|
|
2013-10-05 17:00:23 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Oct 5 11:44:42 UTC 2013 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.22 [bnc#844175]
|
|
|
|
* Fixed possible infinite recursion in the compressed packet
|
|
|
|
parser. [CVE-2013-4402]
|
|
|
|
* Improved support for some card readers.
|
|
|
|
* Prepared building with the forthcoming Libgcrypt 1.6.
|
|
|
|
* Protect against rogue keyservers sending secret keys.
|
|
|
|
- remove gpg2-CVE-2013-4351.patch, committed upstream
|
|
|
|
|
2013-09-16 19:37:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 16 11:08:55 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
- fix CVE-2013-4351 (bnc#840510)
|
|
|
|
|
2013-08-20 14:21:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 19 17:59:48 UTC 2013 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.21
|
|
|
|
* gpg-agent: By default the users are now asked via the Pinentry
|
|
|
|
whether they trust an X.509 root key. To prohibit interactive
|
|
|
|
marking of such keys, the new option --no-allow-mark-trusted may
|
|
|
|
be used.
|
|
|
|
* gpg-agent: The command KEYINFO has options to add info from
|
|
|
|
sshcontrol.
|
|
|
|
* The included ssh agent does now support ECDSA keys.
|
|
|
|
- now requires libgpg-error 1.11
|
|
|
|
- update gnupg-2.0.9-langinfo.patch for upstream whitespace changes
|
|
|
|
- drop gnupg-broken-curl-test.patch, no longer required
|
|
|
|
|
2013-06-17 14:50:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 17 12:48:24 UTC 2013 - coolo@suse.com
|
|
|
|
|
|
|
|
- revert usage of gpg-offline to avoid cycles
|
|
|
|
|
2013-06-17 14:41:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 17 12:40:10 UTC 2013 - coolo@suse.com
|
|
|
|
|
|
|
|
- add gnupg-2.0.20-automake113.diff to fix build with automake 1.13
|
|
|
|
|
2013-05-16 12:06:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue May 14 14:00:45 UTC 2013 - vcizek@suse.com
|
|
|
|
|
|
|
|
- set safe umask before creating a plaintext file (bnc#780943)
|
|
|
|
added gpg2-set_umask_before_open_outfile.patch
|
|
|
|
- select proper ciphers when running in FIPS mode (bnc#808958)
|
|
|
|
added gnupg-detect_FIPS_mode.patch
|
|
|
|
|
2013-03-27 16:24:40 +01:00
|
|
|
-------------------------------------------------------------------
|
2013-05-12 18:46:27 +02:00
|
|
|
Fri May 10 19:33:24 UTC 2013 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to 2.0.20
|
|
|
|
* Decryption using smartcards keys > 3072 bit does now work.
|
|
|
|
* New meta option ignore-invalid-option to allow using the same
|
|
|
|
option file by other GnuPG versions.
|
|
|
|
* gpg: The hash algorithm is now printed for sig records in key listings.
|
|
|
|
* gpg: Skip invalid keyblock packets during import to avoid a DoS.
|
|
|
|
* gpg: Correctly handle ports from DNS SRV records.
|
|
|
|
* keyserver: Improve use of SRV records
|
|
|
|
* gpg-agent: Avoid tty corruption when killing pinentry.
|
|
|
|
* scdaemon: Improve detection of card insertion and removal.
|
|
|
|
* scdaemon: Rename option --disable-keypad to --disable-pinpad.
|
|
|
|
* scdaemon: Better support for CCID readers. Now, the internal CCID
|
|
|
|
driver supports readers without the auto configuration feature.
|
|
|
|
* scdaemon: Add pinpad input for PC/SC, if your reader has pinpad and
|
|
|
|
it supports variable length PIN input, and you specify
|
|
|
|
--enable-pinpad-varlen option.
|
|
|
|
* scdaemon: New option --enable-pinpad-varlen.
|
|
|
|
* scdaemon: Install into libexecdir to avoid accidental execution
|
|
|
|
from the command line.
|
|
|
|
* Assorted bug fixes.
|
|
|
|
- refresh gnupg-2.0.9-RSA_ES.patch
|
|
|
|
- verify gpg signature of source tarball
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2013-03-27 16:24:40 +01:00
|
|
|
Wed Mar 27 12:16:19 UTC 2013 - mmeister@suse.com
|
|
|
|
|
|
|
|
- Added url as source.
|
|
|
|
Please see http://en.opensuse.org/SourceUrls
|
|
|
|
|
2013-01-16 09:24:58 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jan 11 20:26:50 UTC 2013 - lazy.kent@opensuse.org
|
|
|
|
|
|
|
|
- BuildRequires: libbz2-devel (support BZIP2 compression
|
|
|
|
algorithm) (bnc#798175).
|
|
|
|
|
2012-04-18 13:28:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Apr 18 10:55:34 UTC 2012 - vcizek@suse.com
|
|
|
|
|
|
|
|
- Mention some of the changes in Greg's version update
|
|
|
|
|
2012-03-27 22:59:37 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Mar 27 20:38:27 UTC 2012 - gregkh@opensuse.org
|
|
|
|
|
|
|
|
- update to upstream 2.0.19
|
2012-04-18 13:28:18 +02:00
|
|
|
* GPG now accepts a space separated fingerprint as a user ID. This
|
|
|
|
allows to copy and paste the fingerprint from the key listing.
|
|
|
|
* GPG now uses the longest key ID available. Removed support for the
|
|
|
|
original HKP keyserver which is not anymore used by any site.
|
|
|
|
* Rebuild the trustdb after changing the option --min-cert-level.
|
|
|
|
* Ukrainian translation.
|
|
|
|
* Honor option --cert-digest-algo when creating a cert.
|
|
|
|
* Emit a DECRYPTION_INFO status line.
|
|
|
|
* Improved detection of JPEG files.
|
2012-03-27 22:59:37 +02:00
|
|
|
|
2011-12-06 12:07:42 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Dec 6 10:58:36 UTC 2011 - vcizek@suse.com
|
|
|
|
|
|
|
|
- fixed licence to GPL-3.0+ (bnc#734878)
|
|
|
|
|
2011-11-30 14:14:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Nov 30 09:55:47 UTC 2011 - coolo@suse.com
|
|
|
|
|
|
|
|
- add automake as buildrequire to avoid implicit dependency
|
|
|
|
|
2011-10-01 21:41:38 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Oct 1 15:53:04 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- Test suite hangs in qemu-arm, workaround.
|
|
|
|
|
2011-08-31 12:03:36 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 31 10:00:35 UTC 2011 - puzel@suse.com
|
|
|
|
|
|
|
|
- link with -pie
|
|
|
|
|
2011-08-08 00:04:43 +02:00
|
|
|
-------------------------------------------------------------------
|
2011-08-19 07:00:05 +02:00
|
|
|
Fri Aug 19 01:11:42 UTC 2011 - crrodriguez@opensuse.org
|
|
|
|
|
|
|
|
- libcurl.m4 tests were broken, resulting in the usage
|
|
|
|
of a "fake" internal libcurl.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2011-08-08 00:04:43 +02:00
|
|
|
Sat Aug 6 20:19:09 UTC 2011 - andreas.stieger@gmx.de
|
|
|
|
|
|
|
|
- update to upstream 2.0.18
|
|
|
|
* Bug fix for newer versions of Libgcrypt.
|
|
|
|
* Support the SSH confirm flag and show SSH fingerprints in ssh
|
|
|
|
related pinentries.
|
|
|
|
* Improved dirmngr/gpgsm interaction for OCSP.
|
|
|
|
* Allow generation of card keys up to 4096 bit.
|
|
|
|
- refresh patch gnupg-2.0.10-tmpdir.diff -> gnupg-2.0.18-tmpdir.diff
|
|
|
|
- refresh patch gnupg-files-are-digests.patch -> gnupg-2.0.18-files-are-digests.patch
|
|
|
|
|
2011-03-15 10:49:14 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Mar 15 09:29:42 UTC 2011 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to gnupg-2.0.17
|
|
|
|
* Allow more hash algorithms with the OpenPGP v2 card.
|
|
|
|
* The gpg-agent now tests for a new gpg-agent.conf on a HUP.
|
|
|
|
* Fixed output of "gpgconf --check-options".
|
|
|
|
* Fixed a bug where Scdaemon sends a signal to Gpg-agent running
|
|
|
|
in non-daemon mode.
|
|
|
|
* Fixed TTY management for pinentries and session variable update
|
|
|
|
problem.
|
|
|
|
- drop gnupg-CVE-2010-2547.patch (in upstream)
|
|
|
|
|
2011-01-07 15:00:57 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jan 7 13:24:17 CET 2011 - sbrabec@suse.cz
|
|
|
|
|
|
|
|
- Removed obsolete BuildRequires of opensc-devel.
|
|
|
|
|
2010-11-01 09:34:36 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Oct 31 12:37:02 UTC 2010 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- Use %_smp_mflags
|
|
|
|
|
2010-07-30 14:51:31 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jul 28 09:39:00 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- gnupg-CVE-2010-2547.patch (bnc#625947)
|
|
|
|
- renumber patches
|
|
|
|
|
2010-07-20 08:41:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jul 19 21:49:40 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to gnupg-2.0.16
|
|
|
|
* If the agent's --use-standard-socket option is active, all tools
|
|
|
|
try to start and daemonize the agent on the fly. In the past this
|
|
|
|
was only supported on W32; on non-W32 systems the new configure
|
|
|
|
option --use-standard-socket may now be used to use this feature by
|
|
|
|
default.
|
|
|
|
* The gpg-agent commands KILLAGENT and RELOADAGENT are now available
|
|
|
|
on all platforms.
|
|
|
|
* Minor bug fixes.
|
|
|
|
- drop gnupg-2.0.14-s2kcount.patch (builds fine without it now)
|
|
|
|
|
2010-07-19 23:58:25 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jun 7 09:40:32 UTC 2010 - adrian@suse.de
|
|
|
|
|
|
|
|
- add special provides to make sure that obs signd gets correct gpg version
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Apr 9 12:47:11 UTC 2010 - chris@computersalat.de
|
|
|
|
|
|
|
|
- fix deps
|
|
|
|
o libassuan-devel >= 2.0.0
|
|
|
|
o pth / libpth-devel >= 1.3.7
|
|
|
|
- added BuildReq libcurl-devel >= 7.10
|
|
|
|
- removed BuildReq openldap2
|
|
|
|
is already solved by openldap2-devel
|
|
|
|
- removed unrecognized configure options
|
|
|
|
--enable-external-hkp, --enable-shared, --enable-static-rnd
|
|
|
|
|
2010-04-07 18:08:16 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Apr 7 14:19:11 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- add gnupg-dont-fail-with-seahorse-agent.patch (bnc#589994)
|
|
|
|
|
2010-04-01 15:29:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Mar 31 13:47:00 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to gnupg-2.0.15
|
|
|
|
* New command --passwd for GPG.
|
|
|
|
* Fixes a regression in 2.0.14 which prevented unprotection of new
|
|
|
|
or changed gpg-agent passphrases.
|
|
|
|
* Make use of libassuan 2.0 which is available as a DSO.
|
|
|
|
|
2010-03-26 01:11:48 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Mar 22 15:09:24 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- fix files-are-digests patch (bnc#469229)
|
|
|
|
|
2010-02-18 13:58:28 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 17 13:29:18 CET 2010 - dimstar@opensuse.org
|
|
|
|
|
|
|
|
- Update to version 2.0.14:
|
|
|
|
+ The default for --include-cert is now to include all
|
|
|
|
certificates in the chain except for the root certificate.
|
|
|
|
+ Numerical values may now be used as an alternative to the
|
|
|
|
debug-level keywords.
|
|
|
|
+ The GPGSM --audit-log feature is now more complete.
|
|
|
|
+ GPG now supports DNS lookups for SRV, PKA and CERT on W32.
|
|
|
|
+ New GPGSM option --ignore-cert-extension.
|
|
|
|
+ New and changed passphrases are now created with an iteration
|
|
|
|
count requiring about 100ms of CPU work.
|
|
|
|
- Add gnupg-2.0.14-s2kcount.patch: use fixed s2k-count number
|
|
|
|
otherwise the gpg2 would want to consult gpg-agent which is not
|
|
|
|
yet installed in the mock chroot (Patch shamelessly stolen from
|
|
|
|
Fedora).
|
|
|
|
|
2010-01-28 15:15:49 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jan 28 14:15:24 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- fix build for older distributions
|
|
|
|
|
2010-03-22 16:13:26 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 27 16:30:41 UTC 2010 - puzel@novell.com
|
|
|
|
|
|
|
|
- port files-are-digests patch from gpg1 (bnc#469229)
|
|
|
|
|
2009-12-16 16:50:59 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Dec 15 20:56:35 CET 2009 - jengelh@medozas.de
|
|
|
|
|
|
|
|
- enable parallel building
|
|
|
|
- SPARC needs large PIE model
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Dec 6 08:52:32 UTC 2009 - coolo@novell.com
|
|
|
|
|
|
|
|
- change -lang require to recommended
|
|
|
|
|
2009-11-16 18:35:33 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Nov 13 14:37:58 UTC 2009 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to gnupg-2.0.13
|
|
|
|
* GPG now generates 2048 bit RSA keys by default. The default hash
|
|
|
|
algorithm preferences has changed to prefer SHA-256 over SHA-1.
|
|
|
|
2048 bit DSA keys are now generated to use a 256 bit hash algorithm
|
|
|
|
* The envvars XMODIFIERS, GTK_IM_MODULE and QT_IM_MODULE are now
|
|
|
|
passed to the Pinentry to make SCIM work.
|
|
|
|
* The GPGSM command --gen-key features a --batch mode and implements
|
|
|
|
all features of gpgsm-gencert.sh in standard mode.
|
|
|
|
* New option --re-import for GPGSM's IMPORT server command.
|
|
|
|
* Enhanced writing of existing keys to OpenPGP v2 cards.
|
|
|
|
* Add hack to the internal CCID driver to allow the use of some
|
|
|
|
Omnikey based card readers with 2048 bit keys.
|
|
|
|
* GPG now repeatly asks the user to insert the requested OpenPGP
|
|
|
|
card. This can be disabled with --limit-card-insert-tries=1.
|
|
|
|
* Minor bug fixes.
|
|
|
|
- drop gnupg-2.0.4-default-tty.diff
|
|
|
|
|
2009-06-20 01:33:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 18 13:22:00 CEST 2009 - puzel@novell.com
|
|
|
|
|
|
|
|
- update to gnupg-2.0.12
|
|
|
|
* GPGSM now always lists ephemeral certificates if specified by
|
|
|
|
fingerprint or keygrip.
|
|
|
|
* New command "KEYINFO" for GPG_AGENT. GPGSM now also returns
|
|
|
|
information about smartcards.
|
|
|
|
* Made sure not to leak file descriptors if running gpg-agent with a
|
|
|
|
command. Restore the signal mask to solve a problem in Mono.
|
|
|
|
* Changed order of the confirmation questions for root certificates
|
|
|
|
and store negative answers in trustlist.txt.
|
|
|
|
* Better synchronization of concurrent smartcard sessions.
|
|
|
|
* Support 2048 bit OpenPGP cards.
|
|
|
|
* Support Telesec Netkey 3 cards.
|
|
|
|
* The gpg-protect-tool now uses gpg-agent via libassuan.
|
|
|
|
* Changed code to avoid a possible Mac OS X system freeze.
|
|
|
|
- drop gpg2-fix-rtsignals.patch (fixed upstream)
|
|
|
|
- drop gnupg-1.9.22-ccid-driver-fix.diff (unused)
|
|
|
|
|
2009-06-12 17:33:52 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 11 11:19:58 CEST 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- change BuildRequires: (pth-devel -> libpth-devel)
|
|
|
|
|
2009-03-20 19:37:13 +01:00
|
|
|
-------------------------------------------------------------------
|
2009-06-02 12:28:15 +02:00
|
|
|
Mon Jun 1 11:26:12 CEST 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- BuildRequires: pth-devel
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2009-03-20 19:37:13 +01:00
|
|
|
Wed Mar 18 13:51:30 CET 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- add gpg2-fix-rtsignals.patch (bnc#481463)
|
|
|
|
|
2009-03-05 16:45:23 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 5 13:39:42 CET 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- update to 2.0.11
|
|
|
|
* Fixed a problem in SCDAEMON which caused unexpected card resets.
|
|
|
|
* SCDAEMON is now aware of the Geldkarte.
|
|
|
|
* The SCDAEMON option --allow-admin is now used by default.
|
|
|
|
* GPGCONF now restarts SCdaemon if necessary.
|
|
|
|
* The default cipher algorithm in GPGSM is now again 3DES. This is
|
|
|
|
due to interoperability problems with Outlook 2003 which still
|
|
|
|
can't cope with AES.
|
|
|
|
- dropped gnupg-2.0.10-fix-convert.patch (upstream)
|
|
|
|
- dropped gnupg-2.0.10-fix-missing-option.patch (upstream)
|
|
|
|
- disabled gnupg-1.9.22-ccid-driver-fix.diff (does not apply and it is
|
|
|
|
not clear what it is good for)
|
|
|
|
|
2009-03-02 16:33:31 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Mar 2 15:53:22 CET 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- gnupg-2.0.10-fix-missing-option.patch (bnc#477362)
|
|
|
|
|
2009-01-22 13:04:18 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jan 19 16:16:11 CET 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- add gnupg-2.0.10-fix-convert.patch
|
|
|
|
- fix broken 'make check' on ppc, s390 and s390x
|
|
|
|
|
2009-01-13 18:57:46 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 13 10:38:38 CET 2009 - puzel@suse.cz
|
|
|
|
|
|
|
|
- update to 2.0.10
|
|
|
|
* New keyserver helper gpg2keys_kdns as generic DNS CERT
|
|
|
|
lookup.
|
|
|
|
* New mechanisms "local" and "nodefault" for --auto-key-locate.
|
|
|
|
Fixed a few problems with this option.
|
|
|
|
* New command --locate-keys.
|
|
|
|
* New options --with-sig-list and --with-sig-check.
|
|
|
|
* The option "-sat" is no longer an alias for --clearsign.
|
|
|
|
* The option --fixed-list-mode is now implicitly used and obsolete.
|
|
|
|
* New control statement %ask-passphrase for the unattended key
|
|
|
|
generation.
|
|
|
|
* The algorithm to compute the SIG_ID status has been changed.
|
|
|
|
* [gpgsm] Now uses AES by default.
|
|
|
|
* [gpgsm] Made --output option work with --export-secret-key-p12.
|
|
|
|
* [gpg-agent] Terminate process if the own listening socket is not
|
|
|
|
anymore served by ourself.
|
|
|
|
* [gpg-connect-agent] Accept commands given as command line arguments.
|
|
|
|
* The gpg-preset-passphrase mechanism works again. An arbitrary
|
|
|
|
string may now be used for a custom cache ID.
|
|
|
|
* Admin PINs are cached again (bug in 2.0.9).
|
|
|
|
* Support for version 2 OpenPGP cards.
|
|
|
|
|
|
|
|
- specfile changes:
|
|
|
|
* require libadns
|
|
|
|
* explicit versions for some BuildRequires
|
|
|
|
* BuildRequires libgpg-error
|
|
|
|
* changed license to GPL v3
|
|
|
|
* /etc/gnupg/gnupg.conf is now (noreplace)
|
|
|
|
* documentation is installed with install
|
|
|
|
|
2008-06-22 02:49:11 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jun 11 11:06:09 CEST 2008 - puzel@suse.cz
|
|
|
|
|
|
|
|
- fix [bnc#305725] - UTF-8 problems
|
|
|
|
* non latin characters displayed incorrectly by pinentry-*
|
|
|
|
|
2008-04-06 05:55:31 +02:00
|
|
|
-------------------------------------------------------------------
|
2008-05-22 00:04:27 +02:00
|
|
|
Wed May 21 14:01:14 CEST 2008 - puzel@suse.cz
|
|
|
|
|
|
|
|
- added missing gpgconf.conf (bnc#391347)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
2008-04-06 05:55:31 +02:00
|
|
|
Fri Mar 28 16:14:33 CET 2008 - pcerny@suse.cz
|
|
|
|
|
|
|
|
- update to 2.0.9
|
|
|
|
* fixes CVE-2008-1530 (bnc#374254)
|
|
|
|
* removing gnupg-2.0.8-from-upstream.diff (included in release)
|
|
|
|
* removing gnupg-2.0.4-oldkey.diff (accepted by upstream)
|
|
|
|
* removing gnupg-2.0.8-warningfixes.diff
|
|
|
|
(also appears in upstream)
|
|
|
|
- patch gnupg-2.0.9-RSA_ES.patch
|
|
|
|
* adding back support for deprecated RSA_E, RSA_S algorithms
|
|
|
|
(bnc#342979)
|
|
|
|
|
2008-03-27 22:01:48 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Mar 26 22:07:29 CET 2008 - coolo@suse.de
|
|
|
|
|
|
|
|
- require the split out lang package
|
|
|
|
|
2008-03-26 16:13:07 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sun Mar 23 12:10:56 CET 2008 - coolo@suse.de
|
|
|
|
|
|
|
|
- splitting out a third of the package by using a lang subpack
|
|
|
|
|
2008-02-15 01:20:58 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 12 19:24:37 CET 2008 - bk@suse.de
|
|
|
|
|
|
|
|
- install gpg-zip and gpgsplit again and use -pie for randomisation
|
|
|
|
|
2008-02-08 18:45:44 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 6 18:16:34 CET 2008 - bk@suse.de
|
|
|
|
|
|
|
|
- add selected upstream fixes and fix gcc and rpmlint warnings
|
|
|
|
|
2008-01-10 14:14:30 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 8 10:48:30 CET 2008 - sassmann@suse.de
|
|
|
|
|
|
|
|
- update to GnuPG-2.0.8
|
|
|
|
- adapted patches to apply properly
|
|
|
|
* gnupg-1.9.18-tmpdir.diff
|
|
|
|
* gnupg-2.0.4-install_tools.diff
|
|
|
|
- gnupg-2.0.5.fixes-from-svn-20070812.diff commented out,
|
|
|
|
included in upstream 2.0.8
|
|
|
|
- use optflags during build
|
|
|
|
|
2007-09-13 18:44:44 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Sep 12 22:40:46 CEST 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- fix #304749 - gpg2 unable to use old secret key
|
|
|
|
|
2007-09-11 18:18:39 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 10 20:13:07 CEST 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- fix gpg2 crash on accessing key (#307666)
|
|
|
|
- fix gpg doesn't work on the console (#302323)
|
|
|
|
|
2007-10-26 01:46:05 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Aug 10 11:50:20 CEST 2007 - bk@suse.de
|
|
|
|
|
|
|
|
- update to GnuPG-2.0.5 - requries libassuan-1.0.2!
|
|
|
|
* Switched license to GPLv3.
|
|
|
|
* Fixed bug when using the --p12-charset without --armor.
|
|
|
|
* The command --gen-key may now be used instead of the
|
|
|
|
gpgsm-gencert.sh script.
|
|
|
|
* Changed key generation to reveal less information about the
|
|
|
|
machine. Bug fixes for gpg2's card key generation.
|
|
|
|
- enable make check to test against build issues in the crypto engine
|
|
|
|
- cleanup disabled nld patch for linking with -lgpg-error-nld
|
|
|
|
- use %find_lang to label the locale files properly with %lang
|
|
|
|
- add opensc-devel to BuildRequrires to enanble smartcard support
|
|
|
|
- del Makefile.in patches where we patch Makefile.am and run automake
|
|
|
|
- cleanup the standrd GNU INSTALL and the empty VERSION from %doc
|
|
|
|
|
2007-07-27 01:43:04 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jul 26 13:16:22 CEST 2007 - sbrabec@suse.cz
|
|
|
|
|
|
|
|
- Build with libassuan-devel.
|
|
|
|
|
2007-06-21 21:56:01 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 21 20:31:44 CEST 2007 - ro@suse.de
|
|
|
|
|
|
|
|
- install compat symlinks for gpg2 and gpgv2
|
|
|
|
- install gpg-zip and gpgsplit
|
|
|
|
- added openldap2 to buildrequires (for gpgkeys_ldap)
|
|
|
|
- added fPIE/pie to CFLAGS/LDFLAGS for gpgsplit
|
|
|
|
|
2007-05-23 23:18:51 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed May 23 19:02:45 CEST 2007 - dmueller@suse.de
|
|
|
|
|
|
|
|
- add libusb-devel build requires
|
|
|
|
|
2007-05-16 16:20:18 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed May 16 14:27:28 CEST 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- remove gpg from Require's (#273491)
|
|
|
|
|
2007-05-11 15:35:54 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri May 11 13:20:19 CEST 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- updated to 2.0.4 stable snapshot
|
|
|
|
|
2007-04-04 20:30:29 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Apr 4 12:42:06 CEST 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- update to 2.0.3
|
|
|
|
- fixed #251605 - VUL-0: signing issues within GNUPG
|
|
|
|
- removed outdated patches
|
|
|
|
|
2007-03-30 02:08:34 +02:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Mar 30 01:58:56 CEST 2007 - ro@suse.de
|
|
|
|
|
|
|
|
- added zlib-devel to buildreq
|
|
|
|
|
2007-02-15 18:18:20 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 14 15:14:44 CET 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- fix file conflicts with gpg (#242133)
|
|
|
|
|
2007-01-30 00:52:49 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jan 30 00:34:50 CET 2007 - ro@suse.de
|
|
|
|
|
|
|
|
- fix build (exclude possible debuginfo directory)
|
|
|
|
|
2007-01-29 16:59:51 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jan 29 16:22:15 CET 2007 - ltinkl@suse.cz
|
|
|
|
|
|
|
|
- fix #221212 - gpg2 is not updated and do not contain documentation
|
|
|
|
- fix #233525 - gpg1/2: bug in vasprintf() implementation
|
|
|
|
|
2007-01-16 00:15:33 +01:00
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Nov 30 16:59:25 CET 2006 - anicka@suse.cz
|
|
|
|
|
|
|
|
- fix overflow in openfile.c (CVE-2006-6169, #224108)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Sep 11 13:44:21 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- updated gnupg to new version 1.9.22
|
|
|
|
Enhanced pkcs#12 support
|
|
|
|
Support for the CardMan 4040 PCMCIA
|
|
|
|
Collected bug fixes
|
|
|
|
- updated pth library to 2.0.7
|
|
|
|
- changed using pinetry-qt to pinentry
|
|
|
|
- removed -cfb.diff -signature.patch -cap_large_uid.patch patches
|
|
|
|
they are no longer needed
|
|
|
|
- change patch -warnings-fix.diff -ccid-driver-fix.diff
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Aug 17 11:55:09 CEST 2006 - pnemec@suse.de
|
|
|
|
|
|
|
|
- remove unused package in build requires
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Aug 9 09:32:56 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- fix spec file to build with new gettext 0.15
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 7 11:06:19 CEST 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- fixed security fix with large uid CVE-2006-3746 [#195569]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Feb 23 17:07:18 CET 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- fixed signature security problem CVE-2006-0455 (bugzilla#150742)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Feb 2 15:37:22 CET 2006 - pnemec@suse.cz
|
|
|
|
|
|
|
|
- fixed install info in spec file
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jan 26 15:52:26 CET 2006 - sbrabec@suse.cz
|
|
|
|
|
|
|
|
- Added missing %install_info.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 25 21:36:18 CET 2006 - mls@suse.de
|
|
|
|
|
|
|
|
- converted neededforbuild to BuildRequires
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Aug 5 12:52:44 CEST 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- updated to version to 1.9.18
|
|
|
|
- removed obsoleted gcc patch
|
|
|
|
- added patch tmpdir.diff for using $TMPDIR by gpg-agent [#bug95732]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jul 12 14:17:11 CEST 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- updated to version to 1.9.17
|
|
|
|
- updated pth to version 2.0.4
|
|
|
|
- removed obsoleted patch agent-cache-fix.diff
|
|
|
|
- fixed ccid-driver.c
|
|
|
|
- fixed gcc4
|
|
|
|
- explicitly enabled gpg building in configure
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Mar 24 13:55:34 CET 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- fixed caching passphrase in gpg-agent [#71975]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Mar 22 18:11:12 CET 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- fixed on 64bit archs [#72440]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 23 15:16:55 CET 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- security fix for cfb-cipher issue [#65862]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Jan 12 16:02:00 CET 2005 - postadal@suse.cz
|
|
|
|
|
|
|
|
- update to version 1.9.14
|
|
|
|
- removed obsoleted patch automake-fixes.diff
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Sep 28 08:52:32 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- link against libpth staticaly to make S/MIME support in kmail
|
|
|
|
usable. Hopefully we can convert this to a native thread implementation
|
|
|
|
later. (#46260)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Sat Jul 31 15:07:26 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- update to version 1.9.10
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Jul 20 09:01:50 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- remove openct and opensc packages from nfb
|
|
|
|
(we will need thread support, when enabling card reader support,
|
|
|
|
but it isn't anyway implemented yet in gpg2)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Jul 12 17:55:32 CEST 2004 - adrian@suse.de
|
|
|
|
|
|
|
|
- use GnuPG 2 sources version 1.9.9
|
|
|
|
- opensc support misses some functions atm, support disabled for now
|
|
|
|
- threading is disabled, since we do not have a pth package for now
|
|
|
|
- prepare for nld
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Feb 26 13:27:08 CET 2004 - postadal@suse.cz
|
|
|
|
|
|
|
|
- adapted some functions to the libgcrypt version 1.1.91 [#34987]
|
|
|
|
- added libgpg-error to needforbuild flag
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Wed Feb 18 14:02:47 CET 2004 - kukuk@suse.de
|
|
|
|
|
|
|
|
- Don't build against libpth.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 10 16:00:08 CET 2004 - postadal@suse.cz
|
|
|
|
|
|
|
|
- fixed code that broke strict aliasing
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Dec 5 14:35:32 CET 2003 - garloff@suse.de
|
|
|
|
|
|
|
|
- disable core dumpe in child after forking. [#33499]
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 11 14:48:50 CEST 2003 - adrian@suse.de
|
|
|
|
|
|
|
|
- cleanup #neededforbuild and requires
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Aug 4 15:28:41 CEST 2003 - ro@suse.de
|
|
|
|
|
|
|
|
- added openct to neededforbuild
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Fri Jul 18 14:23:15 CEST 2003 - mc@suse.de
|
|
|
|
|
|
|
|
- build against opensc
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Thu Jun 19 19:04:45 CEST 2003 - schwab@suse.de
|
|
|
|
|
|
|
|
- Add %install_info.
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Mon Mar 17 15:25:30 CET 2003 - adrian@suse.de
|
|
|
|
|
|
|
|
- add signal handler to check if the parent is still alive and
|
|
|
|
exit if not
|
|
|
|
- use pinentry-qt by default (/usr/bin/pinentry do not exist)
|
|
|
|
|
|
|
|
-------------------------------------------------------------------
|
|
|
|
Tue Feb 11 15:38:30 CET 2003 - mc@suse.de
|
|
|
|
|
|
|
|
- initial release
|
|
|
|
|