Post B5dHQAz24IUhNsUOoq by dvzrv@chaos.social
(DIR) More posts by dvzrv@chaos.social
(DIR) Post #B5dHQAz24IUhNsUOoq by dvzrv@chaos.social
0 likes, 0 repeats
I'm getting quite annoyed with the state of #GnuPG as a packager.Upstream silently keeps releasing 2.2 versions to this day(!) and at the same time claims 2.4 will soon be EOL (also refuses to backport security fixes for it).Meanwhile, there are no good reasons to upgrade to 2.5, unless one wants incompatibility with the entire rest of the ecosystem (see https://wiki.archlinux.org/index.php?title=GnuPG&oldid=860217#OpenPGP_compatibility).The move to #OpenPGP #RFC9580 compliant solutions can't happen early enough!Also, I'm glad we have @freepg
(DIR) Post #B5dHQBJapqwOPe6oro by dvzrv@chaos.social
0 likes, 0 repeats
Everything gets even more wild once you notice that upstream itself appears to flag the package out of date and is trying to upsell the new features.Apart from the incompatibility madness: Without the #FreePG patches, there no longer would be #systemd support (which we require!) in 2.5, because upstream removed it (what seems to me, out of spite).
(DIR) Post #B5dHQChjfZqYioPc8W by pid_eins@mastodon.social
0 likes, 1 repeats
@dvzrv oh god now you made me read the gnupg commits around systemd support. Jeezuz.