Should I mark/announce GNOME as incompatible with gpg2 for now?
NIIBE Yutaka
gniibe at fsij.org
Thu Apr 2 05:31:23 CEST 2015
Hello,
This message is reply to the one in August 2014, since I keep
seeing reports from GnuPG users.
On 08/29/2014 12:24 AM, Stef Walter wrote:
> On 28.08.2014 16:31, NIIBE Yutaka wrote:
>> Hello,
>>
>> It's not new. It has been incompatible for years, already.
>>
>> On 08/28/14 19:46, Stef Walter wrote:
>>> Should I go ahead and announce that gpg2 (version 2.0.23+) is
>>> incompatible with GNOME and people should USE gnupg 1.4.x with GNOME 3.x
>>> for now?
>>
>> Please note that gpg-agent is not the "GPG password caching daemon".
>>
>> It's not new issue for smartcard/token users and SSH users for gpg2
>> (both of 2.0 and 2.1) with GNOME.
>>
>> (1) When users have smartcard/token, it doesn't work well.
>>
>> (2) When users configure the SSH-agent feature of gpg-agent, it
>> doesn't work well.
>>
>> We need to disable the features of gnome-keyring, for years.
>>
>> However, how to disable the features of gpg-agent/ssh-agent for
>> gnome-keyring has been changed in version to version. I had figured
>> out how to do that in GNOME2 and in younger GNOME 3, but now, I don't
>> know how we can disable the features in GNOME 3.12 or later (using
>> proper gpg-agent).
>
> I'm not against contributions which remove the gpg-agent and ssh-agent
> from gnome-keyring. The equivalent features and use cases should be
> provided elsewhere, and it's a done deal.
I wonder if you could consider applying the following patch (against
master of gnome-keyring git repo) as a first step.
This can be a message that the features are minor and possibly should
not be used as a default.
diff --git a/configure.ac b/configure.ac
index 6e6a92c..17120a9 100644
--- a/configure.ac
+++ b/configure.ac
@@ -337,34 +337,34 @@ fi
#
AC_ARG_ENABLE([ssh-agent],
- AC_HELP_STRING([--disable-ssh-agent],
- [Don't include SSH agent in gnome-keyring]))
+ AC_HELP_STRING([--enable-ssh-agent],
+ [Include SSH agent in gnome-keyring]))
-if test "$enable_ssh_agent" != "no"; then
+if test "$enable_ssh_agent" = "yes"; then
AC_DEFINE(WITH_SSH, 1, [Whether to build SSH agent or not])
ssh_status="yes"
else
ssh_status="no"
fi
-AM_CONDITIONAL(WITH_SSH, test "$enable_ssh_agent" != "no")
+AM_CONDITIONAL(WITH_SSH, test "$enable_ssh_agent" = "yes")
# --------------------------------------------------------------------
# GPG Agent support
#
AC_ARG_ENABLE([gpg-agent],
- AC_HELP_STRING([--disable-gpg-agent],
- [Don't include GPG agent in gnome-keyring]))
+ AC_HELP_STRING([--enable-gpg-agent],
+ [Include GPG agent in gnome-keyring]))
-if test "$enable_gpg_agent" != "no"; then
+if test "$enable_gpg_agent" = "yes"; then
AC_DEFINE(WITH_GPG, 1, [Whether to build GPG agent or not])
gpg_status="yes"
else
gpg_status="no"
fi
-AM_CONDITIONAL(WITH_GPG, test "$enable_gpg_agent" != "no")
+AM_CONDITIONAL(WITH_GPG, test "$enable_gpg_agent" = "yes")
# --------------------------------------------------------------------
# libgcrypt
--
More information about the Gnupg-devel
mailing list