Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use python gpg #906

Closed
wants to merge 2 commits into from
Closed

Use python gpg #906

wants to merge 2 commits into from

Conversation

dkg
Copy link
Collaborator

@dkg dkg commented Nov 30, 2016

GnuPG upstream is now producing a python module named "gpg", which is now shipping as part of the gpgme library. It should get all improvements to gpgme automatically as gpgme is updated.

The pygpgme package is maintained by a third party and is not keeping up with newer versions of either GPGME or GnuPG itself.

Converting to python-gpg should be an improvement.

@pazz
Copy link
Owner

pazz commented Nov 30, 2016 via email

@dkg
Copy link
Collaborator Author

dkg commented Nov 30, 2016

sure, python-gpg 1.8.0 is in debian unstable now, and i intend it to ship with stretch (i'm part of debian's pkg-gnupg-maint team).

@pazz
Copy link
Owner

pazz commented Nov 30, 2016 via email

@@ -32,6 +32,6 @@
'twisted>=10.2.0',
'python-magic',
'configobj>=4.7.0',
'pygpgme>=0.2'],
'gpg'],
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is there a minimal required version#?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think there is -- but in any case, 1.8.0 is the first fully-supported upstream release of python-gpg that exists anywhere, so i think it's safe to not indicate a version number.

@pazz
Copy link
Owner

pazz commented Nov 30, 2016

I like the fact that this cleans up a lot of the cluttered code. Its a nice patch :)

How would i test this on debian testing? python-gpg is not available there, only python-gpgme..

@dkg
Copy link
Collaborator Author

dkg commented Nov 30, 2016

You can install python-gpg from unstable. It is built from the gpgme1.0 source package, which should have migrated by now, but is apparently blocked due to https://bugs.debian.org/846232

I'll upload a new version to unstable shortly to try to unblock that bug in hopes that it will migrate soon.

@0x64746b
Copy link
Collaborator

0x64746b commented Dec 1, 2016

Ftr: afaik @teythoon built the the pypi/pip package, so he should know details ;)

@teythoon
Copy link
Collaborator

teythoon commented Dec 1, 2016

I did, and I am also maintaining the bindings upstream. I support this change :)

@pazz
Copy link
Owner

pazz commented Dec 9, 2016

OK, I've decided not to push this before the upcoming release so that v0.3.8 can more easily make it into debian stable soon.
After the release, you're welcome to merge this yourself :)
However, I'd appreciate a few lines of install notes (for debian testing), even if it's just pointers..

@lucc lucc added the crypto label Dec 10, 2016
@pazz pazz mentioned this pull request Dec 12, 2016
@pazz
Copy link
Owner

pazz commented Dec 12, 2016

rebased: #915. closing this here

@pazz pazz closed this Dec 12, 2016
try:
return ctx.verify(signature_data, message_data, None)
except gpgme.GpgmeError as e:
(data, verify_results) = ctx.verify(gpg.Data(string=message), gpg.Data(string=signature), message_data)

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Where is 'message_data' defined now?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The code has since changed in master.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants