[pkg-gnupg-maint] Bug#872368: gpgme: please adjust libgpgme11 dependency on gnupg package

[Werner Koch]

On Wed, 29 Nov 2017 23:56, dkg at fifthhorseman.net said:

> libgpgme provides *no functionality* whatsoever if gpg is not installed.

That is not fully correct.  For example in the Outlook plugin we used to
use gpgme just to provide data objects with callback functionality and
to connect to the so-called UI-server.

It is also possible to use GPGME to connect to arbitrary Assuan servers,
however except form the UI-Server (i.e. gpa --daemon) there are not may
other Assuan servers outside of the GnuPG realm.

The general idea about GPGME is an API for end-to-end encryption.  It
_might_ be that GPGME tests immediately for GnuPG availibility but that
seems to be wrong.  This should be delayed until the caller really
requests an GPGME context for the OpenPGP or SMIME protocol.

OTOH, given that there are many signed mails, Mutt will in any case try
to verify those mails and thus run into a GPGME error.  The erro
handling should be more gracefully then.  Unfortunately since the last
15 years or so I use Mutt only rarely.

I can't say anything about Debian packing rules, though.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20171130/054daec9/attachment.sig>