Should GnuPG 1.4.x be revived?

Brian C. Lane bcl at redhat.com
Wed Jul 21 20:44:10 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/21/2010 11:32 AM, David Shaw wrote:
> On Jul 21, 2010, at 11:45 AM, Brian C. Lane wrote:
> 
>>>> I am not interested in co-maintaining gnupg-1. However I do not oppose
>>>> to revive it in koji.
>>>
>>> Forgive my ignorance of the process, but how can I help this happen?  Aside from my own problems with the change, there are other reports of people upgrading to F13 only to find their GnuPG setup nonfunctional when their gnupg transformed into gnupg2: http://lists.gnupg.org/pipermail/gnupg-users/2010-June/038817.html
> 
>>
>> My understanding is that someone needs to update the gnupg package and
>> run it through the package review process again since it was deprecated,
>> not just orphaned.
> 
> How does this happen (i.e. who is the someone)?  I'm happy to help in any way I can, but I'm not currently a Fedora contributor.  I'm just an upstream GnuPG guy.
> 

Probably me :) I've been debating reviving it. Having someone from
upstream interested would certainly be helpful.

Take a look at the http://fedoraproject.org/wiki/Join pages for info on
how to join.

>> gnupg2 needs to not obsolete gnupg in its .spec file
>>
>> And I would also prefer it if gnupg2 didn't overload the gnupg binaries,
>> keeping things in line with upstream which meant for gnupg 1.x and 2.x
>> to be installed in parallel.
>>
>> That brings up an additional problem in that now we have had users of
>> f13 using gpg as gpg2, so a switch back might cause some friction -- but
>> I think it is the right way to do things.
> 
> I agree.  It might cause friction, but of course the status quo is causing friction for some pre-f13 people using gpg when they upgrade to f13.

Yup.

I'm willing to pick up the gnupg package since there seems to be an
interest, and folks to help out. Tonight I'll grab the f12 spec and
patches and put together a new review for f13 and rawhide.

I'm going to ask that the gpg binaries be handed back to gnupg if it is
approved. If its worth doing, its worth doing right the 1st time :)

- -- 
Brian C. Lane <bcl at redhat.com>
Red Hat / Port Orchard, WA
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iQEVAwUBTEdcGRF+jBaO/jp/AQL5bAf/VnEre1PIDYWXSPNGkWx1YHY70n26W76k
xAOYAoENzZy5w3lxp3zMAQvzDlzNRghMqI7LWRELM6Fm87GKy9Ccdhj4OPGg/lsx
QUgBueAo9tJm9VOtIM+GOwXmYIcF3hAOSivtlq6USBsnVado55NTOo3iA15Kogpi
VIKm/4nHOur/rH3kgOGulnwQIaA58Jp/IajnN4gWGxAx/h0FKATntAwwTMJRWOl/
DbzP5lm6Rf3tW8Z4GXsz1cl59EWkssqGONpT8Imr/11pCJUUf49KWAMtC8zCeVcM
Jujg9xGPefTJ/rlQNxINLOK6c2KH0PxRwu7gBsVFL3eDsnI5py6jdg==
=O5Qp
-----END PGP SIGNATURE-----


More information about the devel mailing list