summaryrefslogtreecommitdiff
path: root/meta/recipes-support/gnupg
AgeCommit message (Collapse)AuthorFiles
2017-03-07recipes: Move out stale GPLv2 versions to a seperate layeruninative-1.5Richard Purdie9
These are recipes where the upstream has moved to GPLv3 and these old versions are the last ones under the GPLv2 license. There are several reasons for making this move. There is a different quality of service with these recipes in that they don't get security fixes and upstream no longer care about them, in fact they're actively hostile against people using old versions. The recipes tend to need a different kind of maintenance to work with changes in the wider ecosystem and there needs to be isolation between changes made in the v3 versions and those in the v2 versions. There are probably better ways to handle a "non-GPLv3" system but right now having these in OE-Core makes them look like a first class citizen when I believe they have potential for a variety of undesireable issues. Moving them into a separate layer makes their different needs clearer, it also makes it clear how many of these there are. Some are probably not needed (e.g. mc), I also wonder whether some are useful (e.g. gmp) since most things that use them are GPLv3 only already. Someone could now more clearly see how to streamline the list of recipes here. I'm proposing we mmove to this separate layer for 2.3 with its future maintinership and testing to be determined in 2.4 and beyond. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2017-02-15gnupg: 2.1.14 -> 2.1.18Hongxu Jia1
Update LIC_FILES_CHKSUM md5 checksum, because "http" has been changed to "https". Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
2016-08-17gnupg: upgrade to 2.1.14Hongxu Jia1
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-06-14gnugp: upgrade to 2.1.12Hongxu Jia1
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-05-30gnupg.org-hosted recipes: Change SRC_URI to https siteJussi Kukkonen2
https version seems more reliable and in an informal test fetching all gnupg recipes now takes <20% of the time it used to. Define GNUPG_MIRROR in bitbake.conf so future tweaks to this are easier. Replace some slower mirrors with the official ftp site and another from gnupg.org mirror list. Set UPSTREAM_CHECK_URI in all recipes that need it to "https://gnupg.org/download/index.html" as the directory listings are not up-to-date. Signed-off-by: Jussi Kukkonen <jussi.kukkonen@intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-02-28gnupg: update to 2.1.11Alexander Kanavin1
Signed-off-by: Alexander Kanavin <alexander.kanavin@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2016-01-13gnupg: 2.1.7 -> 2.1.10Hongxu Jia1
Add PACKAGECONFIG for sqlite3 to avoid QA Warning ... WARNING: QA Issue: gnupg rdepends on libsqlite3, but it isn't a build dependency? [build-deps] ... Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2016-01-11Add "CVE:" tag to current patches in OE-coreMariano Lopez4
The currnet patches in OE-core doesn't have the "CVE:" tag, now part of the policy of the patches. This is patch add this tag to several patches. There might be patches that I miss; the tag can be added in the future. Signed-off-by: Mariano Lopez <mariano.lopez@linux.intel.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-12-16meta: Drop now pointless manual -dbg packagingRichard Purdie1
With the autodebug package generation logic, specifically setting FILES_${PN}-dbg isn't needed in most cases, we can remove them. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-11-16gnupg: fix find-version for beta checkingWenzong Fan2
find-version always assumes that gnupg is beta if autogen.sh is run out of git-repo. This doesn't work for users whom just take release tarball and re-run autoconf in their local build dir. This fixes runtime issue: $gpg --list-sigs gpg: NOTE: THIS IS A DEVELOPMENT VERSION! gpg: It is only intended for test purposes and should NOT be gpg: used in a production environment or with production keys! Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-09-12meta: Fix Upstream-Status statementsRoss Burton1
Fix a variety of problems such as typos, bad punctuations, or incorrect Upstream-Status values. Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-08-30gnupg: 2.1.6 -> 2.1.7Robert Yang1
(From OE-Core rev: 78b159bf753c43c78bb0f283add7d447b96e08f1) Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-07-31gnupg: 2.1.5 -> 2.1.6Robert Yang1
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-07-16gnupg: fix build of GPLv2 version of gnupg with gcc 5Andre McCurdy1
Force gcc's traditional handling of inline to avoid issues with gcc 5. Upstream gnupg has a more specific fix, however it was made after gnupg was relicensed to GPLv3 so may be unsafe to backport directly. http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commitdiff;h=5093bed27580e608de073bcc5953bd76b6b8b2de Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2015-07-01gnupg: 2.1.4 -> 2.1.5Robert Yang1
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-05-29gnupg: 2.1.2 -> 2.1.4Robert Yang2
Updated dirmngr-uses-libgpg-error.patch. Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
2015-04-07gnupg: 2.1.1 -> 2.1.2Robert Yang1
Signed-off-by: Robert Yang <liezhi.yang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2015-01-23gnupg: upgrade to 2.1.1Hongxu Jia1
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
2015-01-07gnupg: Upgrade to 2.1.0Saul Wold4
Add patch to use pkg-config instead of npth-config and remove --without-curl as it's not used anymore. Also needed a patch to add libgpg-error to correctly build dirmngr Signed-off-by: Saul Wold <sgw@linux.intel.com>
2014-10-18gnupg_1.4.7: add package config libusbKai Kang1
If build gnupg 1.4.7 after libusb-compat, it shows warning: WARNING: QA Issue: gnupg rdepends on libusb-compat, but it isn't a build dependency? [build-deps] Add package config libusb to fix it. Signed-off-by: Kai Kang <kai.kang@windriver.com>
2014-10-18gnupg: CVE-2013-4242Kai Kang2
GnuPG before 1.4.14, and Libgcrypt before 1.5.3 as used in GnuPG 2.0.x and possibly other products, allows local users to obtain private RSA keys via a cache side-channel attack involving the L3 cache, aka Flush+Reload. Patch from commit e2202ff2b704623efc6277fb5256e4e15bac5676 in git://git.gnupg.org/libgcrypt.git Signed-off-by: Yong Zhang <yong.zhang@windriver.com> Signed-off-by: Kai Kang <kai.kang@windriver.com>
2014-09-29gnupg: add pinentry into RRECOMMENDSRoy Li1
Pinentry is needed for most function of GnuPG, so add it into RRECOMMENDS Signed-off-by: Roy Li <rongqing.li@windriver.com> Signed-off-by: Ross Burton <ross.burton@intel.com>
2014-08-23gnupg: Upgrade to 2.0.26Saul Wold1
Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-08-11gnupg: Added PACKAGECONFIG[curl]Shrikant Bobade1
gnupg can be built with or without curl. This should be explicitly defined to avoid race between curl and gnupg. Signed-off-by: Mikhail Durnev <mikhail_durnev@mentor.com> Signed-off-by: Shrikant Bobade <Shrikant_Bobade@mentor.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-07-17gnupg: Upgrade to 2.0.25Saul Wold1
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2014-06-25gnupg: Update to 2.0.23Saul Wold1
Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-06-03recipes: Add missing pkgconfig class inheritsRichard Purdie1
These recipes all use pkg-config in some way but were missing dependencies on the tool, this patch adds them. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-05-28gnupg: Convert to use pkg-config for dependenciesRichard Purdie2
Use pkg-config to find pth instead of pth-config and our own macros from aclocal-copy. Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-05-01Add texinfo.bbclass; recipes that use texinfo utils at build-time inherit it.Max Eliaser2
The class itself currently does nothing. The idea is to mark all recipes that make use of the texinfo utilities. In the future, this class could be used to suppress the generation/formatting of documentation for performance, explicitly track dependencies on these utilities, and eliminate Yocto's current dependency on the host system's texinfo utilities. Signed-off-by: Max Eliaser <max.eliaser@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-03-26gnupg: CVE-2013-4576Yong Zhang2
GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE. Signed-off-by: Yong Zhang <yong.zhang@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-03-26gnupg: CVE-2013-4351Ming Liu2
GnuPG 1.4.x, 2.0.x, and 2.1.x treats a key flags subpacket with all bits cleared (no usage permitted) as if it has all bits set (all usage permitted), which might allow remote attackers to bypass intended cryptographic protection mechanisms by leveraging the subkey. Signed-off-by: Ming Liu <ming.liu@windriver.com> Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2014-01-02Replace one-line DESCRIPTION with SUMMARYPaul Eggleton2
A lot of our recipes had short one-line DESCRIPTION values and no SUMMARY value set. In this case it's much better to just set SUMMARY since DESCRIPTION is defaulted from SUMMARY anyway and then the SUMMARY is at least useful. I also took the opportunity to fix up a lot of the new SUMMARY values, making them concisely explain the function of the recipe / package where possible. Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2013-10-30gnupg: upgrade to 2.0.22Saul Wold1
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-08-22gnupg: Update to 2.0.21Saul Wold1
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-05-24gnupg: Update to 2.0.20Saul Wold2
Removed obsolete patch Signed-off-by: Saul Wold <sgw@linux.intel.com>
2013-03-25gnupg: Add symlink for gpgvPaul Barker1
Gnupg 2.0.19 installs 'gpgv2' but apt-get and possibly other utilities expect to find this as 'gpgv'. A symlink is created in the same way as the link for 'gpg'. Signed-off-by: Paul Barker <paul@paulbarker.me.uk> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-03-16gnupg: fix PN -> BPN in do_install for multilibsJackie Huang1
Signed-off-by: Jackie Huang <jackie.huang@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-02-15gnupg: fix CVE-2012-6085Saul Wold4
Code taken from Redhat [YOCTO #3813] Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-07-10gnupg: ensure deterministic build by disabling libcurlSaul Wold1
gnupg has it's own fake curl, since we use gnupg with zypper, there does not seem to be a strong reason to add curl to the depends list. Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-06-11gnupg-2.0.19: Depend on npth for uclibcKhem Raj1
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-06-08gnupg: disable CCID driverTom Zanussi1
The CCID driver driver is apparently unnecessary, so disable it. Also remove the associated libusb dependency, since that won't be needed either. According to Scott Garman <scott.a.garman@intel.com>: I'd just note that the CCID smartcard reader is a specific piece of hardware that is unlikely to be used in a majority of our use cases. Signed-off-by: Tom Zanussi <tom.zanussi@intel.com> Signed-off-by: Elizabeth Flanagan <elizabeth.flanagan@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-06-08gnupg: add libusb to DEPENDSTom Zanussi1
gnupg apparently depends on libusb: | error: Failed dependencies: | libusb-0.1-4 >= 0.1.3 is needed by gnupg-2.0.18-r1.core2 So add libusb to gnupg DEPENDS. Signed-off-by: Tom Zanussi <tom.zanussi@intel.com> Signed-off-by: Elizabeth Flanagan <elizabeth.flanagan@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-05-17gnupg: Update to upstream version 2.0.19Laurentiu Palcu1
Signed-off-by: Laurentiu Palcu <laurentiu.palcu@intel.com>
2012-03-08bzip2: split into binary and library packagesAndreas Oberritter2
* Create libbz2 (and -dev, -staticdev), which can be installed without the bzip2 executables. Signed-off-by: Andreas Oberritter <obi@opendreambox.org> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-02-28gnupg: Fix for multilibZhai Edwin1
Signed-off-by: Zhai Edwin <edwin.zhai@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-02-28gnupg: Add missing patch for curl_typeof_fixSaul Wold1
Seems the wrong commit was grabbed and missed this patch Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-02-26gnupg: Update checksum, fix configure and compliation issuesSaul Wold2
This recipe was added, but did not have the correct checksum information for the LIC_FILES_CHKSUM or the SRC_URI. Also disable Documetnation for now due to older autotools issue. [YOCTO #1966] Signed-off-by: Saul Wold <sgw@linux.intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-02-10gnupg: Add missing DEPENDS on libgcryptKhem Raj1
Found during single recipe rebuilds Signed-off-by: Khem Raj <raj.khem@gmail.com>
2012-02-07gnupg-1.4.7: Update Patch InfoSaul Wold2
Signed-off-by: Saul Wold <sgw@linux.intel.com>
2012-02-03gnupg: add 2.0.18 (initial recipe)Steve Sakoman1
GnuPG 2.0 is the new modularized version of GnuPG supporting OpenPGP and S/MIME Signed-off-by: Steve Sakoman <steve@sakoman.com> Acked-by: Paul Menzel <paulepanter@users.sourceforge.net> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 19:53:21 +0000