[Pgp-tools-commit] r870 - trunk/debian

Guilhem Moulin guilhem-guest at moszumanska.debian.org
Tue Jul 12 19:34:45 UTC 2016


Author: guilhem-guest
Date: 2016-07-12 19:34:44 +0000 (Tue, 12 Jul 2016)
New Revision: 870

Modified:
   trunk/debian/changelog
Log:
Explain in the changelog why we keep $CONFIG{keyid} to 64-bits key IDs.

Modified: trunk/debian/changelog
===================================================================
--- trunk/debian/changelog	2016-07-12 19:34:41 UTC (rev 869)
+++ trunk/debian/changelog	2016-07-12 19:34:44 UTC (rev 870)
@@ -15,7 +15,10 @@
       ~/.gnup/gpg.conf and pass the GnuPG options that are known to be safe
       (and useful) for caff to gpg(1) using command line options.  This soves
       the problem of lingering configuration files in case caff is killed.
-    + Use full fingerprints internally to avoid collisions.
+    + Use full fingerprints internally to avoid collisions.  (However
+      $CONFIG{'keyid'} and $CONFIG{'local-users'} are kept to 64-bits key IDs
+      as per RFC 4880 full fingerprints are not available in key signatures,
+      and thus not exposed by `gpg --with-colons --list-sigs`.)
   * d/source.lintian-overrides: Add 'debian-watch-file-is-missing' as we're
     upstream.
 




More information about the Pgp-tools-commit mailing list