commit: d8096169f060f27eedfdeca9c3d4e3b57c9c3d6c Author: Michał Górny <mgorny <AT> gentoo <DOT> org> AuthorDate: Sun Nov 2 19:29:19 2025 +0000 Commit: Michał Górny <mgorny <AT> gentoo <DOT> org> CommitDate: Sun Nov 2 19:30:04 2025 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d8096169
app-crypt/freepg: Bump to 2.5.13 Signed-off-by: Michał Górny <mgorny <AT> gentoo.org> app-crypt/freepg/Manifest | 1 + app-crypt/freepg/freepg-2.5.13.ebuild | 208 ++++++++++++++++++++++++++++++++++ 2 files changed, 209 insertions(+) diff --git a/app-crypt/freepg/Manifest b/app-crypt/freepg/Manifest index e56984d3c962..5858178002ec 100644 --- a/app-crypt/freepg/Manifest +++ b/app-crypt/freepg/Manifest @@ -1 +1,2 @@ DIST gnupg-gnupg-2.5.12-freepg-1.tar.bz2 9743842 BLAKE2B 98b36ddfdb15c7d8cb32ae701e073a5cb26352614577edfc6dbfdf484fdcf5a0668da1be6b3e8a36a5075ed02e71cfd3270e8542ef2c379494c6875cbe4acc21 SHA512 5ff859959f84283912b69cbaac09b591f8dde4a7afd11a51dcda248e4021c6bc6ec105ae03b19b105df42f44f38c0e9ad2cf94df722b67526222b21bdd6a78fe +DIST gnupg-gnupg-2.5.13-freepg.tar.bz2 9741861 BLAKE2B 98a95e736187d88e98d155a2abd0d520bb4dfebd482f01d15e39d9a47b97f89f8fef09a23d4545b9602b0e3e23259cf7e83a521e2817bc81a907034d0425c0d8 SHA512 60c7235ea4d56821e08bb31113e6dd72a49361277cb173b2ee2d7b7aa8e21825cb21d33565825c99d9bc5a8626ada92ddfa0c1241394222783fad745f446b957 diff --git a/app-crypt/freepg/freepg-2.5.13.ebuild b/app-crypt/freepg/freepg-2.5.13.ebuild new file mode 100644 index 000000000000..80275b9d7206 --- /dev/null +++ b/app-crypt/freepg/freepg-2.5.13.ebuild @@ -0,0 +1,208 @@ +# Copyright 1999-2025 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +# Keep (roughly) in sync with app-crypt/gnupg! +# in-source builds are not supported: https://dev.gnupg.org/T6313#166339 +inherit autotools flag-o-matic out-of-source multiprocessing systemd toolchain-funcs + +EGIT_TAG="gnupg-${PV%_p*}-freepg" +[[ ${PV} == *_p* ]] && EGIT_TAG+="-${PV#*_p}" +MY_P="gnupg-${EGIT_TAG}" + +DESCRIPTION="GnuPG fork with improved RFC9850 compatibility" +HOMEPAGE=" + https://freepg.org/ + https://gitlab.com/freepg/gnupg/ +" +SRC_URI=" + https://gitlab.com/freepg/gnupg/-/archive/${EGIT_TAG}/${MY_P}.tar.bz2 +" +S="${WORKDIR}/${MY_P}" + +LICENSE="GPL-3+" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~loong ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86 ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x64-solaris" +IUSE="bzip2 doc ldap nls readline selinux +smartcard ssl test +tofu tpm tools usb user-socket wks-server" +RESTRICT="!test? ( test )" +REQUIRED_USE="test? ( tofu )" + +# Existence of executables is checked during configuration. +# Note: On each bump, update dep bounds on each version from configure.ac! +DEPEND=" + >=dev-libs/libassuan-3.0.0:= + >=dev-libs/libgcrypt-1.11.0:= + >=dev-libs/libgpg-error-1.56 + >=dev-libs/libksba-1.6.3 + >=dev-libs/npth-1.2 + sys-libs/zlib + bzip2? ( app-arch/bzip2 ) + ldap? ( net-nds/openldap:= ) + readline? ( sys-libs/readline:0= ) + smartcard? ( usb? ( virtual/libusb:1 ) ) + tofu? ( >=dev-db/sqlite-3.27 ) + tpm? ( >=app-crypt/tpm2-tss-2.4.0:= ) + ssl? ( >=net-libs/gnutls-3.2:0= ) +" +RDEPEND=" + ${DEPEND} + nls? ( virtual/libintl ) + selinux? ( sec-policy/selinux-gpg ) + wks-server? ( virtual/mta ) + !app-crypt/gnupg +" +PDEPEND=" + app-alternatives/gpg[-reference] + app-crypt/pinentry +" +BDEPEND=" + virtual/pkgconfig + doc? ( sys-apps/texinfo ) + nls? ( sys-devel/gettext ) +" +# maintainer mode +BDEPEND+=" + media-gfx/fig2dev + virtual/imagemagick-tools +" + +DOCS=( + ChangeLog NEWS README THANKS TODO VERSION + doc/FAQ doc/DETAILS doc/HACKING doc/TRANSLATE doc/OpenPGP doc/KEYSERVER +) + +PATCHES=( + "${FILESDIR}"/gnupg-2.1.20-gpgscm-Use-shorter-socket-path-lengts-to-improve-tes.patch +) + +src_prepare() { + default + + # substitute the version + sed -i -e '/beta=yes/d' -e 's:-unknown:-freepg:' autogen.sh || die + + eautoreconf +} + +my_src_configure() { + # Upstream don't support LTO, bug #854222. + filter-lto + + local myconf=( + $(use_enable bzip2) + $(use_enable nls) + $(use_enable smartcard scdaemon) + $(use_enable ssl gnutls) + $(use_enable test all-tests) + $(use_enable test tests) + $(use_enable tofu) + $(use_enable tofu keyboxd) + $(use_enable tofu sqlite) + $(usex tpm '--with-tss=intel' '--disable-tpm2d') + $(use smartcard && use_enable usb ccid-driver || echo '--disable-ccid-driver') + $(use_enable wks-server wks-tools) + $(use_with ldap) + $(use_with readline) + + # Hardcode mailprog to /usr/libexec/sendmail even if it does not exist. + # As of GnuPG 2.3, the mailprog substitution is used for the binary called + # by wks-client & wks-server; and if it's autodetected but not not exist at + # build time, then then 'gpg-wks-client --send' functionality will not + # work. This has an unwanted side-effect in stage3 builds: there was a + # [R]DEPEND on virtual/mta, which also brought in virtual/logger, bloating + # the build where the install guide previously make the user chose the + # logger & mta early in the install. + --with-mailprog=/usr/libexec/sendmail + + --disable-ntbtls + --enable-gpgsm + --enable-large-secmem + + # needed from building from git + --enable-maintainer-mode + + CC_FOR_BUILD="$(tc-getBUILD_CC)" + GPGRT_CONFIG="${ESYSROOT}/usr/bin/${CHOST}-gpgrt-config" + + $("${S}/configure" --help | grep -o -- '--without-.*-prefix') + ) + + if use prefix && use usb; then + # bug #649598 + append-cppflags -I"${ESYSROOT}/usr/include/libusb-1.0" + fi + + if [[ ${CHOST} == *-solaris* ]] ; then + # https://dev.gnupg.org/T7368 + export ac_cv_should_define__xopen_source=yes + fi + + # bug #663142 + if use user-socket; then + myconf+=( --enable-run-gnupg-user-socket ) + fi + + # glib fails and picks up clang's internal stdint.h causing weird errors + tc-is-clang && export gl_cv_absolute_stdint_h="${ESYSROOT}"/usr/include/stdint.h + + econf "${myconf[@]}" +} + +my_src_compile() { + default + + use doc && emake -C doc html +} + +my_src_test() { + export TESTFLAGS="--parallel=$(makeopts_jobs)" + + default +} + +my_src_install() { + emake DESTDIR="${D}" install + + # rename for app-alternatives/gpg + mv "${ED}"/usr/bin/gpg{,-freepg} || die + mv "${ED}"/usr/bin/gpgv{,-freepg} || die + mv "${ED}"/usr/share/man/man1/gpg{,-freepg}.1 || die + mv "${ED}"/usr/share/man/man1/gpgv{,-freepg}.1 || die + + # create *-reference symlinks too, to make it easier to use "some GnuPG" + dosym gpg-freepg /usr/bin/gpg-reference + dosym gpgv-freepg /usr/bin/gpgv-reference + newman - gpg-reference.1 <<<".so gpg-freepg.1" + newman - gpgv-reference.1 <<<".so gpgv-freepg.1" + + use tools && dobin tools/{gpgconf,gpgsplit,gpg-check-pattern} tools/make-dns-cert + + dodir /etc/env.d + echo "CONFIG_PROTECT=/usr/share/gnupg/qualified.txt" >> "${ED}"/etc/env.d/30gnupg || die + + use doc && dodoc doc/gnupg.html/* +} + +my_src_install_all() { + einstalldocs + + use tools && dobin tools/{convert-from-106,mail-signed-keys,lspgpot} + use doc && dodoc doc/*.png + systemd_douserunit doc/examples/systemd-user/*.{service,socket} + newdoc doc/examples/systemd-user/README README-systemd +} + +pkg_preinst() { + if has_version app-crypt/gnupg; then + elog "When switching between GnuPG and FreePG, it is recommended to stop all" + elog "daemons, using: gpgconf --kill all" + fi +} + +pkg_postrm() { + if has_version app-crypt/gnupg; then + elog "When switching between GnuPG and FreePG, it is recommended to stop all" + elog "daemons, using: gpgconf --kill all" + fi +}
