gnupg-2.4.3

[Douglas R. Reno]

New point version

[Xi Ruoyao]

Noteworthy changes in version 2.4.3 (2023-07-04)

---

• gpg: Set default expiration date to 3 years. [T2701]

• gpg: Add --list-filter properties "key_expires" and

"key_expires_d". [T6529]

• gpg: Emit status line and proper diagnostics for write errors. [T6528]

• gpg: Make progress work for large files on Windows. [T6534]

• gpg: New option --no-compress as alias for -z0.

• gpgsm: Print PROGRESS status lines. Add new --input-size-hint. [T6534]

• gpgsm: Support SENDCERT_SKI for --call-dirmngr. [rG701a8b30f0]

• gpgsm: Major rewrite of the PKCS#12 parser. [T6536]

• gpgtar: New option --no-compress.

• dirmngr: Extend the AD_QUERY command. [rG207c99567c]

• dirmngr: Disable the HTTP redirect rewriting. [T6477]

• dirmngr: New option --compatibility-flags. [rGbf04b07327]

• dirmngr: New option --ignore-crl-extensions. [T6545]

• wkd: Use export-clean for gpg-wks-client's --mirror and --create commands. [rG2c7f7a5a27]

• wkd: Make --add-revocs the default in gpg-wks-client. New option --no-add-revocs. [rG10c937ee68]

• scd: Make signing work for Nexus cards. [rGb83d86b988]

• scd: Fix authentication with Administration Key for PIV. [rG25b59cf6ce]

See-also: gnupg-announce/2023q3/000480.html

Release-info: ​https://dev.gnupg.org/T6509

[Xi Ruoyao]

This FTBFS without OpenLDAP. Line 2779 of dirmngr/server.c needs to be commented out if OpenLDAP not installed.

I intended to report this to upstream but the account creation at ​https://dev.gnupg.org/ needs a manual approve.

[pierre]

Isn't it already reported? ​https://dev.gnupg.org/T6579

[Xi Ruoyao]

Replying to pierre:

Isn't it already reported? ​https://dev.gnupg.org/T6579

Ah great, I searched for "LDAP" because I know it's triggered by no-LDAP configuration. But this ticket didn't mention LDAP.

[Douglas R. Reno]

It sounds like the maintainer (Werner) is talking about making building with OpenLDAP mandatory.

I'll apply that commit though since it looks like we'll also need ​https://dev.gnupg.org/rG2f872fa68c6576724b9dabee9fb0844266f55d0d for fixing breakage with Emacs's epg module (which is installed by default). We'll need to carry the GnuPG patch for a while, see the last comment in ​https://dev.gnupg.org/T6481 (at least until Emacs is fixed upstream to handle the new command order). I found out about this from ​https://lore.kernel.org/distributions/87v8ez30c2.fsf@gentoo.org/T/#u - this problem has been there since 2.4.1 it looks like

[Bruce Dubbs]

Fixed at commits

dd0a69ffe7 Update to gnupg-2.4.3.
f1ba5f96c5 Add gnupg emacs compatibility patch.
a980a7281a Update to libblockdev-3.0.1.
d28391260d Update to libbytesize-2.9.
f5e0d971d3 Update to liblinear-247.

[Bruce Dubbs]

Milestone renamed