Re: [gentoo-dev] gnupg2 only vs gnupg-1 gnupg-2

2007-06-08 Thread William L. Thomson Jr.
Since no flames were started over something technical. Let me see if I
can toss in some gasoline and get the bonfire going.

On Sun, 2007-05-27 at 23:30 +0200, Jakub Moc wrote:
 William L. Thomson Jr. napsal(a):
  This has sparked the following open bugs, and countless more closed
  ones :(
  
  http://bugs.gentoo.org/show_bug.cgi?id=153496
  http://bugs.gentoo.org/show_bug.cgi?id=160302
  http://bugs.gentoo.org/show_bug.cgi?id=164523
  http://bugs.gentoo.org/show_bug.cgi?id=171871
  
  Probably more open bugs, those are just what I stumbled across while
  looking for OTHER things :)
 
 M'kay... about 3 gnome apps have issues w/ gnupg-2.

Question is, is that the root of the problem? If you look into the
situation, you will see it's mostly a problem of gpgme - gnupg.

http://bugs.gentoo.org/show_bug.cgi?id=164523
Comment 104
Update:
[1] https://bugs.g10code.com/gnupg/issue772
[2] http://lists.gnupg.org/pipermail/gnupg-devel/2007-February/023676.html

Should have been solved in gnupg-2.0.4, it may help with progress.

Notice should, and that both links deal with gpgme, NOT SEAHORSE or
anything gnome related. Which gpgme and gnupg have basically the same
upstream. Who has made vague comments about it working for them. Despite
reports from others about problems.T here still is not a 100% solution
from upstream between gpgme - gnupg.

  Seriously, I could
 care less; their problem.

Yes, and because of the word Gnome being included, you are overlooking
the important details that matter. In which it's not a Gnome problem at
all :)

The gnome apps like Seahorse talk to gpgme, not gnupg directly. That's
were the problem lies.

  Maybe upstream will wake up sometimes,

Yes gnupg/gpgme upstream. Not Gnome or other apps that are downstream
from them.

  or
 what's the horrible issue with porting those,

Port to what?

  beyond 'oh we don't care,

That should be you don't care. Users do care, if you notice the
different people commenting on the different bugs.

 use gnupg-1 because the legacy feeling is oh so great'?

It's not just about legacy. gnupg-2 is not a COMPLETE replacement. There
are FEATURES of gnupg-1. Upstream is still developing and supporting
gnupg-1. So how is that legacy?

Not to mention clearly stating gnupg-1 has benefits when used with
gnupg-2. Not to mention server side and embedded uses.

None of those features or benefits has anything to do with Gnome. That's
about choice, and we aren't giving the user one.

So here we are going on close to 6 months with no resolution. Which
includes gnupg-2 not being stabilized. I fail to see how any of this is
positive or progress.

-- 
William L. Thomson Jr.
Gentoo/Java


signature.asc
Description: This is a digitally signed message part


Re: [gentoo-dev] gnupg2 only vs gnupg-1 gnupg-2

2007-06-06 Thread William L. Thomson Jr.
On Sun, 2007-05-27 at 21:02 +0100, Graham Murray wrote:
 Ulrich Mueller [EMAIL PROTECTED] writes:
 
  I would also strongly favor if both gnupg-1 and gnupg-2 could be kept
  in different slots.
 
 And maybe an eselect (or similar) to select whether external programs
 which call use gpg-1 or gpg-2.

That's the beauty of both upstream design and reality.

THERE IS NO NEED FOR ESELECT

Apps will either use and/or be developed for gnupg-1 or gnupg-2. They
are different binaries, versioned by upstream. Have different features
and functionality. Since gnupg-2 is not a full replacement or supports
all of gnupg-1's features.

Think gtk vs gtk2 or apache vs apache2. We quite commonly have two
versions of something in tree during the transition period. Why that is
unacceptable here is beyond me.

Not to mention again, we are limiting choice, and forcing one or the
other. Which is not a complete solution, and makes our offerings less
than all other mainstream distros.

-- 
William L. Thomson Jr.
Gentoo/Java


signature.asc
Description: This is a digitally signed message part


[gentoo-dev] gnupg2 only vs gnupg-1 gnupg-2

2007-05-27 Thread William L. Thomson Jr.
For some time now those maintaining gnupg have been attempting to go
gnupg-2 only on Gentoo. I have tried to support that effort, despite all
other distros supporting/providing both. Not to mention all gnupg
release notes stating.

GnuPG-2 has a different architecture than GnuPG-1 (e.g. 1.4.7) in that
it splits up functionality into several modules.  However, both
versions may be installed alongside without any conflict.  In fact,
the gpg version from GnuPG-1 is able to make use of the gpg-agent as
included in GnuPG-2 and allows for seamless passphrase caching.  The
advantage of GnuPG-1 is its smaller size and the lack of dependency on
other modules at run and build time.  We will keep maintaining GnuPG-1
versions because they are very useful for small systems and for server
based applications requiring only OpenPGP support.

http://lists.gnupg.org/pipermail/gnupg-announce/2007q2/000254.html
http://lists.gnupg.org/pipermail/gnupg-announce/2007q1/000252.html
http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000242.html
http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000239.html

Also
There are no plans to give up development on 1.4 after the 2.0
release.
http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000236.html


This has sparked the following open bugs, and countless more closed
ones :(

http://bugs.gentoo.org/show_bug.cgi?id=153496
http://bugs.gentoo.org/show_bug.cgi?id=160302
http://bugs.gentoo.org/show_bug.cgi?id=164523
http://bugs.gentoo.org/show_bug.cgi?id=171871

Probably more open bugs, those are just what I stumbled across while
looking for OTHER things :)

I tried to squelsh this early on with.
http://bugs.gentoo.org/show_bug.cgi?id=159623


I am really not effected by this any more. Just concerned that a problem
that showed up in January, still exists to this day :( Bugs keep
stacking up and a resolution, short of slotting and providing both. Is
no where in site :(

For the record I fully support those in their efforts to go gnupg-2 only
on Gentoo. However it's not been practical for some time, and likely
will continue to be such. There is a bit of upstream chaos going on, and
till they rein in the problems. Not much we can do downstream.

Not to mention we deviate from all other distros i their offerings.
Where we have limited offerings, lack of choice :( Which does not seem
to be in Gentoo's nature.

No more from me on this. I have done enough on bugs, and me taking this
to -dev is my final contributions. I leave it up to others to decide and
resolve. I was over my limits months ago on this :)

Thanks to all who have made effort to get this resolved or etc.

-- 
William L. Thomson Jr.
Gentoo/Java


signature.asc
Description: This is a digitally signed message part


Re: [gentoo-dev] gnupg2 only vs gnupg-1 gnupg-2

2007-05-27 Thread Ulrich Mueller
 On Sun, 27 May 2007, William L Thomson wrote:

 For some time now those maintaining gnupg have been attempting to go
 gnupg-2 only on Gentoo. I have tried to support that effort, despite
 all other distros supporting/providing both. Not to mention all
 gnupg release notes stating.

There is also an unresolved issue concerning interoperation with
PGP 2.0 which works with gnupg-1 but not with gnupg-2.

See http://bugs.gentoo.org/show_bug.cgi?id=159870 for details. This
bug is open since January, upstream is aware of it, but no solution
seems to be in sight.

I would also strongly favor if both gnupg-1 and gnupg-2 could be kept
in different slots.

Ulrich
-- 
[EMAIL PROTECTED] mailing list



Re: [gentoo-dev] gnupg2 only vs gnupg-1 gnupg-2

2007-05-27 Thread Graham Murray
Ulrich Mueller [EMAIL PROTECTED] writes:

 I would also strongly favor if both gnupg-1 and gnupg-2 could be kept
 in different slots.

And maybe an eselect (or similar) to select whether external programs
which call use gpg-1 or gpg-2.
-- 
[EMAIL PROTECTED] mailing list