Changeset 45fc41c7

Timestamp:

08/04/2021 03:55:51 PM (3 years ago)

Author:

Xi Ruoyao <xry111@…>

Branches:

11.0, 11.1, 11.2, 11.3, 12.0, 12.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

ceb9fde2

Parents:

6e5b09c0

Message:

gpg: raise gnutls to recommended

It's needed to access https or hkps keyserver. And, it does not make
any sense to retrieve a pubkey from a plain HTTP server (plain HTTP is
insecure by its nature!) and use it to "authenticate" a pacakge.

File:

• postlfs/security/gnupg2.xml (modified) (5 diffs)

postlfs/security/gnupg2.xml

@@ -87 +87 @@
     <bridgehead renderas="sect4">Recommended</bridgehead>
     <para role="recommended">
+      <xref linkend="gnutls"/> (required to communicate with keyservers
+      using https or hkps protocol) and
       <xref linkend="pinentry"/> (Run-time requirement for most of
       the package's functionality)
@@ -95 +97 @@
       <xref linkend="curl"/>,
       <xref linkend="fuse3"/>,
-      <xref linkend="gnutls"/>,
       <xref linkend="imagemagick"/> (for the <command>convert</command> utility,
       used for generating the documentation),
@@ -319 +320 @@
             is a daemon used to manage secret (private) keys independently
             from any protocol. It is used as a backend for
-            <command>gpg2</command> and <command>gpgsm</command> as well as
+            <command>gpg</command> and <command>gpgsm</command> as well as
             for a couple of other utilities
           </para>
@@ -400 +401 @@
         <listitem>
           <para>
-            is a tool similar to <command>gpg2</command> used to provide
+            is a tool similar to <command>gpg</command> used to provide
             digital encryption and signing services on X.509 certificates and
             the CMS protocol. It is mainly used as a backend for S/MIME mail
@@ -439 +440 @@
         <listitem>
           <para>
-            is a verify only version of <command>gpg2</command>
+            is a verify only version of <command>gpg</command>
           </para>
           <indexterm zone="gnupg2 gpgv">