Hi,
Am 14. April 2025 16:06:45 MESZ schrieb Daniel Kahn Gillmor <d...@debian.org>:
>On Mon 2025-04-14 13:53:16 +0200, René Engelhard wrote:
>> It's still only test keys to test whether signing/verify works, not real
>> world keys.
>>
>> But yeah, they need to be updated, will propose upstream. It's
>> definitely too late for Trixie though, will try to get it upstream
>> for forky.
>
>Thanks for proposing the fix upstream. please follow up here with the
>pointer to the upstream issue.
Will do.
>Fwiw, if the change needed to clear this up is simply to replace the
>OpenPGP artifacts used for the libreoffice test suite with artifacts
>that contain reasonable algorithm choices
I know
> that doesn't seem like an
>outlandish change to propose for Trixie, whether it's in 13.0 or a
>subsequent point release.
In theory.
In practice that needs to
a) move the original files away
b) replace them with regenerated ones (or even regen itself which would involve
a b-d on sq....)
c) move the old ones back
in rules for dpkg-source.
Or opaquely do it in-place (and use include-binaries) and have it "hidden" in
.debian.tar.xz which will be forgotten and lost somewhen.
Since it affects the binary keyring files.
> To the extent
>that LibreOffice's OpenPGP integration is all done in Java
Nope. gpmepp.
Regards
René
