tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

netpgpverify supporting newer gnupg key format



Hi,

This is a courtesy to note that I'll be committing code to make netpgpverify, and thus signed packages, work with gnupg newer than 2.0.x shortly to my TritonDataCenter fork.

This is something I've wanted for a long time but didn't know enough about PGP key formats to do anything about it, and so have had to maintain a crufty old gnupg20 build to keep signed packages working. This fails pretty hard since the libassuan 3.x update in pkgsrc a while back, and I've had various patches to try and keep it working.

Today I was trying to diagnose another issue with it, and eventually gave up and just asked an LLM to enhance netpgpverify to Just Make It Work with latest GnuPG, and it did with a single prompt in about 10 minutes.

Thus, DO NOT take this code and import into pkgsrc or NetBSD, or even view it if you don't want to be tainted. I know some folks pull patches from my fork without review, and I just want to make it absolutely clear that you should not do this in this instance as the NetBSD guidelines are very clear that no LLM code is acceptable (even though in my opinion the code changes turn out to be absolutely trivial and could not reasonably be interpreted as containing someone else's work).

Obviously this has high chance of bikeshed, so I'll pre-empt that by saying I won't be responding further on this thread. I just wanted to make sure that I am not liable in any way should someone go browsing my fork and pull things they should not.

Hopefully one day someone other than me will want to ship signed packages, and will be able to fix this independently, because trying to maintain GnuPG 2.0.x at this point is pretty untenable.

Thanks for reading,

--
Jonathan Perkin                    pkgsrc.smartos.org
Open Source Complete Cloud   www.tritondatacenter.com


Home | Main Index | Thread Index | Old Index