severity 307895 wishlist
tags 307895 +confirmed
thanks

On Fri, May 06, 2005 at 01:04:29AM -0700, Josh Triplett wrote:
> Package: debpool
> Version: 0.2.2
> Tags: patch
> 
> debpool's requirement for providing a passphrase file precludes allowing
> gpg to retrieve the passphrase via other means such as gpg-agent.  With
> the attached patch, debpool will allow the gpg_passfile option to be
> undefined, in which case debpool will not attempt to pass a passphrase
> to gpg, and will assume that it will be obtained some other way.  This
> allows me to run debpool in non-daemon mode under my user account and
> use my own GPG key with gpg-agent, without putting my passphrase in a file.
> 
> - Josh Triplett

I agree on principle; my only concern is not causing strange failures for
new users who aren't familiar with how to arrange an alternative mechanism.
A quick skim of the patch looks reasonable, however, and I will give the
question of how to handle a failure case (that is, someone who neither
defines the option nor arranges another way of getting the passphrase
through) elegantly.

Sorry about the delay in replying; life out of of Debian (mostly work) has
been kicking me six ways from Sunday.
-- 
Joel Aelwyn <[EMAIL PROTECTED]>                                       ,''`.
                                                                     : :' :
                                                                     `. `'
                                                                       `-

Attachment: signature.asc
Description: Digital signature

Reply via email to