Gentoo Archives: gentoo-dev

From: "William L. Thomson Jr." <wltjr@g.o>
To: gentoo-dev@l.g.o
Subject: [gentoo-dev] gnupg-1, gnupg-2, gpgme, & slight apology
Date: Wed, 09 Jan 2008 18:55:32
1 First off to get the apology out of the way. Me being a user of both
2 seahorse and gnupg, I wasn't fully aware of the mess going on in between
3 the two. So in that regard I do apologize to Alon Bar-Lev ( alonbl ).
4 Things are not so cut and dry, and I could see where one might have the
5 need for eselect there. Although there might be other options as well.
7 The story as clear and concise as I can make it. Yes upstream created
8 gnupg-1 and gnupg-2 to co-exist. However upstream did not do anything to
9 address a VERY popular wrapper to gnugp, gpgme. Presently most apps like
10 seahorse use gpgme to interface with gnupg. Instead of doing it
11 directly. At the present time you end up linking gpgme to either gnupg-1
12 or gnupg-2. No means to do both, and that's where the eselect part comes
13 into play. Ideally apps should interface directly, but upstream didn't
14 really encourage that, and it's why gpgme exists in the first place.
15 Which might die.
17 There are other issues, like gpgme executing gpg on each invocation. So
18 it's hardly ideal and from what Robin (robbat2) has told me. They might
19 be getting rid of gpgme and/or introducing a --server flag or something
20 like that for gnupg. Not 100% clear there and doesn't really matter per
21 our present problems and situations. But would be a performance benefit
22 from that change :)
24 Despite other distros shipping both gnupg-1 and gnupg-2. They are just
25 now seeing the problems. Because being binary, I don't believe gpgme was
26 ever linked against gnupg-2. So it's there for users, but apps really
27 aren't bound to it. So some like Debian are hitting this now, when we
28 ran into it a year ago.
30 Now that their is full understanding, and some clarity. It still doesn't
31 present us with a solution at this time. Seems like most all issues with
32 gnupg-2 have been worked out, but a few remain. Not sure how important
33 it is to address those. I have no doubt both Alon and Robin are working
34 on those as time permits.
36 Slots and eselect is one way to go. I mentioned to Robin, maybe doing a
37 USE flag on gpgme, to control what it's bound to, like gpg2 or gpg,
38 since the later is already a USE flag I believe. Slotting both in the
39 mean time, till the gpgme mess is cleared up. That way users could chose
40 what gpgme is linked to, and still use gnupg-2/gnupg-1 or etc. But like
41 before, totally up to those working on it, Alon and Robin.
43 Anyway just wanted to take a moment to apologize a bit. It's quite a
44 mess, and I do appreciate those in Gentoo undertaking it, and seeing it
45 through. Very sorry for any flack or abrasiveness. Just got sucked into
46 all this as just a user of said apps.
48 But really most all are problems are gpgme. Upstream is JUST now
49 starting to acknowledge that problem. When people have been pointing it
50 out for over a year :) It's a wonderful mess.
52 --
53 William L. Thomson Jr.
54 Gentoo/Java


File name MIME type
signature.asc application/pgp-signature


Subject Author
Re: [gentoo-dev] gnupg-1, gnupg-2, gpgme, & slight apology Alon Bar-Lev <alonbl@g.o>