Re: [Rpm-maint] [rpm-software-management/rpm] scripts/pythondistdeps: Fix for Python 3.10 (#1558)

2021-03-13 Thread ニール・ゴンパ
@Conan-Kudo approved this pull request.





-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1558#pullrequestreview-611600065___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] rpmsign: support EdDSA signatures (#1571)

2021-03-13 Thread Demi Marie Obenour
@DemiMarie pushed 1 commit.

acfa8f488ae13ccf49f1b004fe0e44d420d93c04  rpmsign: support EdDSA signatures


-- 
You are receiving this because you are subscribed to this thread.
View it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1571/files/e84d135305f8befd2426feaeed21969254c0360f..acfa8f488ae13ccf49f1b004fe0e44d420d93c04
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] rpmsign: support EdDSA signatures (#1571)

2021-03-13 Thread Demi Marie Obenour
@DemiMarie pushed 2 commits.

aa963fa5121dfe270adad92038b064637a2db0b3  hdrblobInit() needs bounds checks too
e84d135305f8befd2426feaeed21969254c0360f  rpmsign: support EdDSA signatures


-- 
You are receiving this because you are subscribed to this thread.
View it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1571/files/4b60d024b3894caf86e085b1fddcc725919a9e97..e84d135305f8befd2426feaeed21969254c0360f
___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Reject signatures outside of signature header (#1503)

2021-03-13 Thread Demi Marie Obenour
Closed #1503.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1503#event-4453732610___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] RFE: support base64-encoding for file digests (#1517)

2021-03-13 Thread Demi Marie Obenour
File signatures are even larger and even less efficient, BTW.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1517#issuecomment-798176015___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] Enforce GPG signatures by default (#1573)

2021-03-13 Thread Demi Marie Obenour
> Rpm actually already verifies signatures _if present_ by default since 4.0 or 
> thereabouts, but it doesn't _require_ them. Enforcing is supported since >= 
> 4.14.2 and we also have the bypass-switch (--nosignature) already, so from 
> strict technical perspective this is just a matter of one line change to turn 
> the policy switch to 11 (`%_pkgverify_level all`).
> 
> The only thing stopping us is that it breaks the workflow of installing your 
> own local builds - you need to sign or use --nosignature to install. For 
> everything else this is 20 years too late already  As the average user is not 
> even affected at all... maybe the folks who build packages can be expected to 
> deal with a little extra configuration to make the rest of the world that 
> much safer.

Agreed.  Those who build packages can generate their own signing keys.  
Personally, I would consider being able to disable this on a per-package basis 
a good idea, but it isn’t a blocker.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/1573#issuecomment-798172203___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint


Re: [Rpm-maint] [rpm-software-management/rpm] scripts/pythondistdeps: Implement provides/requires for extras packages + Rework error messages (#1546)

2021-03-13 Thread Miro Hrončok
Note: We should include 
https://src.fedoraproject.org/rpms/python-rpm-generators/pull-request/35

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1546#issuecomment-798053533___
Rpm-maint mailing list
Rpm-maint@lists.rpm.org
http://lists.rpm.org/mailman/listinfo/rpm-maint