pool/gpg2
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Accepting request 479376 from security:privacy

Browse Source 
- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch

OBS-URL: https://build.opensuse.org/request/show/479376
OBS-URL: https://build.opensuse.org/package/show/Base:System/gpg2?expand=0&rev=166
This commit is contained in:
Andreas Stieger 2017-03-16 09:35:18 +00:00 committed by Git OBS Bridge
parent 5b7f1aaff5
commit 4a38996a40
3 changed files with 35 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
gnupg-2.1.19-stronger-defaults.patch Normal file
View File

@ -0,0 +1,26 @@
From: Andreas Stieger <astieger@suse.com>
Date: Tue, 14 Mar 2017 20:43:20 +0000
Subject; FATE#323084: Stronger GnuPG defaults
References: FATE#323084
Upstream: no
Index: gnupg-2.1.19/g10/options.skel
===================================================================
--- gnupg-2.1.19.orig/g10/options.skel
+++ gnupg-2.1.19/g10/options.skel
@@ -137,3 +137,15 @@
# Uncomment the following option to get rid of the copyright notice
#no-greeting
+
+# SUSE recommended output options
+with-fingerprint
+keyid-format 0xlong
+no-emit-version
+
+# SUSE recommends SHA-2 family of hashes for all
+personal-digest-preferences SHA512 SHA384 SHA256 SHA224
+default-preference-list SHA512 SHA384 SHA256 AES256 AES192 AES CAST5 BZIP2 ZLIB ZIP Uncompressed
+cert-digest-algo SHA512
+digest-algo SHA512
+

7
gpg2.changes
View File

@ -1,3 +1,10 @@
-------------------------------------------------------------------
Tue Mar 14 20:41:55 UTC 2017 - astieger@suse.com
- Use stronger defaults for new users, using SHA-2 digest family
for certificates and message signatures - FATE#323084
adding gnupg-2.1.19-stronger-defaults.patch
------------------------------------------------------------------- -------------------------------------------------------------------
Tue Mar 7 12:55:14 UTC 2017 - astieger@suse.com Tue Mar 7 12:55:14 UTC 2017 - astieger@suse.com

2
gpg2.spec
View File

@ -34,6 +34,7 @@ Patch6: gnupg-dont-fail-with-seahorse-agent.patch
Patch8: gnupg-set_umask_before_open_outfile.patch Patch8: gnupg-set_umask_before_open_outfile.patch
Patch9: gnupg-detect_FIPS_mode.patch Patch9: gnupg-detect_FIPS_mode.patch
Patch11: gnupg-add_legacy_FIPS_mode_option.patch Patch11: gnupg-add_legacy_FIPS_mode_option.patch
Patch12: gnupg-2.1.19-stronger-defaults.patch
BuildRequires: expect BuildRequires: expect
BuildRequires: fdupes BuildRequires: fdupes
BuildRequires: libassuan-devel >= 2.4.3 BuildRequires: libassuan-devel >= 2.4.3
@ -86,6 +87,7 @@ gpg2 provides GPGSM, gpg-agent, and a keybox library.
%patch8 -p1 %patch8 -p1
%patch9 -p1 %patch9 -p1
%patch11 -p1 %patch11 -p1
%patch12 -p1
%build %build
date=$(date -u +%%Y-%%m-%%dT%%H:%%M+0000 -r %{SOURCE99}) date=$(date -u +%%Y-%%m-%%dT%%H:%%M+0000 -r %{SOURCE99})