Your message dated Sun, 04 May 2025 16:35:07 +0000
with message-id <e1ubcj1-00gbls...@fasolo.debian.org>
and subject line Bug#900444: fixed in signing-party 2.12-1
has caused the Debian Bug report #900444,
regarding signing-party: gpgsigs(1) doesn't fill in partially filled Checksum
lines
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
900444: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900444
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: signing-party
Version: 2.7-2
Severity: normal
Control: notfound -1 2.5-1
Hello,
after generating a gpg party participants file:
uwe@taurus:~/tmp$ echo 0D2511F322BFAB1C1580266BE2DCDD9132669BD6 |
gpgparticipants - - 20180530 Uwe Party > uwesparty.txt
(ok, annoying party with just me :-), I prefill the SHA256 line:
uwe@taurus:~/tmp$ gpgparticipants-prefill --fastforward --max-length 6
uwesparty.txt uwesparty.txt
Looking at length 1
Found: 1
Looking at length 2
Found: 1E
Looking at length 3
Found: D06
Looking at length 4
Found: 772E
Looking at length 5
Found: 4747 7
Looking at length 6
Found: 01BD F8
Now with gpgsigs I cannot fill in the checksum:
uwe@taurus:~/tmp$ gpgsigs 0D2511F322BFAB1C1580266BE2DCDD9132669BD6
uwesparty.txt.01bdf8 | grep -A2 "SHA256 Ch"
Running --list-sigs, this may take a while .
Annotating uwesparty.txt.01bdf8, writing into -
Skipping SHA256 digest value (invalid fill-in length)
SHA256 Checksum: 01BD F8__ ____ ____ ____ ____ ____ ____
____ ____ ____ ____ ____ ____ ____ ____ [ ]
With the original list (i.e. without gpgparticipants-prefill) it works
fine:
uwe@taurus:~/tmp$ gpgsigs 0D2511F322BFAB1C1580266BE2DCDD9132669BD6
uwesparty.txt | grep -A2 "SHA256 Ch"
Running --list-sigs, this may take a while .
Annotating uwesparty.txt, writing into -
SHA256 Checksum: 7F18 DB92 B265 CF92 9938 B4F7 5D80 999C
6697 1C2F 3DC9 D086 ACB8 469F 4A7C C7EE [ ]
(but this isn't really useful because the checksum is wrong).
It would be great if gpgsigs could be fixed to handle this and be able
to fill in uwesparty.txt.01bdf8, too.
With gpgsigs/stretch it works fine.
Best regards
Uwe
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (700, 'testing'), (600, 'unstable'), (500, 'unstable-debug'),
(500, 'stable'), (499, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.16.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages signing-party depends on:
ii gnupg 2.2.5-1
ii libc6 2.27-3
ii libclass-methodmaker-perl 2.24-1+b4
ii libgnupg-interface-perl 0.52-9
ii libmailtools-perl 2.18-1
ii libmd0 1.0.0-1
ii libmime-tools-perl 5.509-1
ii libnet-idn-encode-perl 2.400-1+b2
ii libterm-readkey-perl 2.37-1+b2
ii libtext-template-perl 1.53-1
ii perl 5.26.2-5
ii python 2.7.15~rc1-1
ii qprint 1.1.dfsg.2-2+b1
Versions of packages signing-party recommends:
ii exim4-daemon-light [mail-transport-agent] 4.91-4
ii libgd-perl [libgd-gd2-perl] 2.66-1+b2
ii libpaper-utils 1.1.24+nmu5
ii whiptail 0.52.20-4
Versions of packages signing-party suggests:
pn fonts-noto-cjk <none>
ii fonts-noto-mono 20171026-2
ii imagemagick 8:6.9.9.34+dfsg-3+b1
ii imagemagick-6.q16 [imagemagick] 8:6.9.9.34+dfsg-3+b1
ii mutt 1.9.5-2+b1
ii qrencode 3.4.4-1+b2
pn texlive-font-utils <none>
pn texlive-latex-extra <none>
ii texlive-latex-recommended 2018.20180505-1
pn texlive-xetex <none>
pn wipe <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: signing-party
Source-Version: 2.12-1
Done: Guilhem Moulin <guil...@debian.org>
We believe that the bug you reported is fixed in the latest version of
signing-party, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 900...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Guilhem Moulin <guil...@debian.org> (supplier of updated signing-party package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 04 May 2025 17:51:50 +0200
Source: signing-party
Architecture: source
Version: 2.12-1
Distribution: unstable
Urgency: medium
Maintainer: Guilhem Moulin <guil...@debian.org>
Changed-By: Guilhem Moulin <guil...@debian.org>
Closes: 900444 979122 1002880
Changes:
signing-party (2.12-1) unstable; urgency=medium
.
[ Guilhem Moulin ]
* d/rules: Replace DEB_BUILD_MAINT_OPTIONS:=hardening=+bindnow,+pie with
hardening=+all.
* d/rules: Use execute_after_dh_* from Debhelper compatibility level 13 when
relevant.
* Update Standards-Version to 4.7.2 (no changes necessary).
* caff: Relax regex to parse comments at the end of UIDs.
* keyart: Regression fix when --fingerprint is used (closes: #979122).
.
[ Uwe Kleine-König ]
* caff: Parse UIDs with a comment after the email address.
* Replace pool.sks-keyservers.net with keyserver.ubuntu.com (closes:
#1002880).
* gpgsigs: Properly handle prefilled checksums (closes: #900444).
Checksums-Sha1:
8372094da1c9f90fb7a2b40d71f4ff5c03703961 1946 signing-party_2.12-1.dsc
c7aebfbf283ecf19a603d4bbc4a3941c3737d6f5 225063 signing-party_2.12.orig.tar.gz
ce94849e6aa0bcc21cd0223249c29e76f2e85b01 20984
signing-party_2.12-1.debian.tar.xz
b4ea1c98ae795c9b90222ef6930b48be0abb7f2d 6414
signing-party_2.12-1_amd64.buildinfo
Checksums-Sha256:
22f4338dece1ffc2a6680cd701b08a165c49bd3433e0157cf8e6fdd182c75715 1946
signing-party_2.12-1.dsc
7924a640c8356fe163b68b0169c19d1df6ab80d2b3d2b6eb52ff1d3bfc6ecaa9 225063
signing-party_2.12.orig.tar.gz
19001aa7be6c8e3889871087b8fa1a03ff57c3b91bcd8a62b5ff1e7fc15e78c4 20984
signing-party_2.12-1.debian.tar.xz
85e51575fe122d0749af1b42418f3ee19f11043168a02f8d6d58c76d41a6c184 6414
signing-party_2.12-1_amd64.buildinfo
Files:
bc6106c92d1331608f4ad398bad7949d 1946 misc optional signing-party_2.12-1.dsc
ed89a631edaf419d21bb3114e3ed900e 225063 misc optional
signing-party_2.12.orig.tar.gz
236633be02475ef7e9010de13c742f65 20984 misc optional
signing-party_2.12-1.debian.tar.xz
e4bf75b0f4b4d3937730a07e5cba6937 6414 misc optional
signing-party_2.12-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=eDlw
-----END PGP SIGNATURE-----
pgpGWdvQUaDw_.pgp
Description: PGP signature
--- End Message ---