Debian Bug report logs - #873753
O: libcrypt-gpg-perl -- An Object Oriented Interface to GnuPG

Package: wnpp; Maintainer for wnpp is wnpp@debian.org;

Affects: libcrypt-gpg-perl

Reported by: Ricardo Mones <mones@debian.org>

Date: Wed, 30 Aug 2017 17:33:04 UTC

Severity: normal

Fixed in version 1.52-1.1+rm

Done: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, robertojimenoca@terra.es, wnpp@debian.org:
Bug#873753; Package wnpp. (Wed, 30 Aug 2017 17:33:07 GMT) (full text, mbox, link).

Acknowledgement sent to Ricardo Mones <mones@debian.org>:
New Bug report received and forwarded. Copy sent to robertojimenoca@terra.es, wnpp@debian.org. (Wed, 30 Aug 2017 17:33:07 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Package: wnpp

The current maintainer of libcrypt-gpg-perl, Roberto Jimeno <robertojimenoca@terra.es>,
is apparently not active anymore.  Therefore, I orphan this package now.

Maintaining a package requires time and skills. Please only adopt this
package if you will have enough time and attention to work on it.

If you want to be the new maintainer, please see
https://www.debian.org/devel/wnpp/#howto-o for detailed
instructions how to adopt a package properly.

Some information about this package:

Package: libcrypt-gpg-perl
Binary: libcrypt-gpg-perl
Version: 1.52-1.1
Maintainer: Roberto Jimeno <robertojimenoca@terra.es>
Build-Depends: debhelper (>= 5), perl (>= 5.8.8)
Architecture: all
Standards-Version: 3.7.2
Format: 1.0
Files:
 4248c747e5f4693fb6df243ff0b750e4 1855 libcrypt-gpg-perl_1.52-1.1.dsc
 fe3b7b4e0cef0fa666dc5ce3e7235a88 18467 libcrypt-gpg-perl_1.52.orig.tar.gz
 c16c27a2ca0c74372b6ec53bcf0732ec 4434 libcrypt-gpg-perl_1.52-1.1.diff.gz
Checksums-Sha256:
 dd230a749c21979d27215d9806bb6bef693226b63f9c33c8e592e9459c068489 1855 libcrypt-gpg-perl_1.52-1.1.dsc
 9f9a3fc3887eb89c6d01430d3b4a3ed2c23792c3ab9391635fbe0b58de6f5075 18467 libcrypt-gpg-perl_1.52.orig.tar.gz
 eb7b21fd75c4acf44386653bf22857cbc62b691f6db75341512030691f3cd423 4434 libcrypt-gpg-perl_1.52-1.1.diff.gz
Package-List: 
 libcrypt-gpg-perl deb perl optional arch=all
Directory: pool/main/libc/libcrypt-gpg-perl
Priority: source
Section: perl

Package: libcrypt-gpg-perl
Version: 1.52-1.1
Installed-Size: 61
Maintainer: Roberto Jimeno <robertojimenoca@terra.es>
Architecture: all
Depends: gnupg, libipc-run-perl, libtimedate-perl, perl
Description-en: An Object Oriented Interface to GnuPG
 The Crypt::GPG module provides near complete access to GnuPG
 functionality through an object oriented interface. It provides
 methods for encryption, decryption, signing, signature verification,
 key generation, key export and import, and most other key management
 functions.
 .
 This module works almost identically to its cousin, Crypt::PGP5. The
 two modules together provide a uniform interface to deal with both PGP
 and GnuPG. Eventually, these modules will be folded into a single
 module which will interface with GnuPG as well as all versions of PGP.
Description-md5: 6ccf27ba446a406d07f9aecabcd21a99
Tag: devel::lang:perl, devel::library, implemented-in::perl,
 security::cryptography
Section: perl
Priority: optional
Filename: pool/main/libc/libcrypt-gpg-perl/libcrypt-gpg-perl_1.52-1.1_all.deb
Size: 24238
MD5sum: 1043468cd46919235f53f1b234e7c886
SHA256: 11beaf8d60afcd003621dc90c355b7434628f035b24f1d4a60c11fb4a09e725c

[signature.asc (application/pgp-signature, inline)]

Added indication that 873753 affects libcrypt-gpg-perl Request was from Daniel Kahn Gillmor <dkg@fifthhorseman.net> to control@bugs.debian.org. (Thu, 07 Sep 2017 21:51:02 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Thu, 07 Sep 2017 22:15:03 GMT) (full text, mbox, link).

Acknowledgement sent to Daniel Kahn Gillmor <dkg@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Thu, 07 Sep 2017 22:15:03 GMT) (full text, mbox, link).

Message #12 received at 873753@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Over on https://bugs.debian.org/873753, Ricardo Mones wrote:

> The current maintainer of libcrypt-gpg-perl, Roberto Jimeno <robertojimenoca@terra.es>,
> is apparently not active anymore.  Therefore, I orphan this package now.

fwiw, this package has not been updated for many years (nearly a
decade), and is several versions behind upstream (1.52, in unstable
today, was released upstream in 2005!).  I strongly doubt whether it
even works with modern versions of GnuPG.  It also has no reverse
dependencies.

As one of the members of the debian GnuPG packaging team, i recommend
that we let libcrypt-gpg-perl be removed from debian.

There are too many bindings for GnuPG in different languages, and
keeping them all up-to-date and clean is a pain.  we should focus on one
or at most two per language.

In debian, we have at least:

  libmail-gnupg-perl
  libgnupg-perl
  libcrypt-gpg-perl
  libgnupg-interface-perl
  libpgp-sign-perl

GnuPG upstream doesn't directly support any of these, unfortunately.

We do *not* currently ship Crypt::GpgME.  I know that upstream prefers
bindings to use gpgme instead of shelling out to gpg, but Crypt::GpgME
hasn't been updated since 2009.

When i last looked in-depth, i thought that GnuPG::Interface was the
best of the lot.  But I have had to do a bunch of work to make
libgnupg-interface-perl work with modern GnuPG recently, and it hasn't
been accepted upstream :(

I don't know what shape the rest of these packages are really in,
either.

So i'm afraid that i currently think there are *no* good interfaces to
GnuPG in perl at the moment :( We should be culling the ones that we can
cull from debian, so that we can focus on a single good implementation.

I welcome help from either GnuPG or Perl maintainers in figuring out
what is the best approach here.

Regards,

      --dkg

[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Thu, 07 Sep 2017 22:27:03 GMT) (full text, mbox, link).

Acknowledgement sent to Jonas Smedegaard <jonas@jones.dk>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Thu, 07 Sep 2017 22:27:03 GMT) (full text, mbox, link).

Message #17 received at 873753@bugs.debian.org (full text, mbox, reply):

Quoting Daniel Kahn Gillmor (2017-09-08 00:11:16)
> Over on https://bugs.debian.org/873753, Ricardo Mones wrote:
> 
> > The current maintainer of libcrypt-gpg-perl, Roberto Jimeno <robertojimenoca@terra.es>,
> > is apparently not active anymore.  Therefore, I orphan this package now.
> 
> fwiw, this package has not been updated for many years (nearly a
> decade), and is several versions behind upstream (1.52, in unstable
> today, was released upstream in 2005!).  I strongly doubt whether it
> even works with modern versions of GnuPG.  It also has no reverse
> dependencies.
> 
> As one of the members of the debian GnuPG packaging team, i recommend
> that we let libcrypt-gpg-perl be removed from debian.
> 
> There are too many bindings for GnuPG in different languages, and
> keeping them all up-to-date and clean is a pain.  we should focus on one
> or at most two per language.
> 
> In debian, we have at least:
> 
>   libmail-gnupg-perl
>   libgnupg-perl
>   libcrypt-gpg-perl
>   libgnupg-interface-perl
>   libpgp-sign-perl
>   
> GnuPG upstream doesn't directly support any of these, unfortunately.
> 
> We do *not* currently ship Crypt::GpgME.  I know that upstream prefers
> bindings to use gpgme instead of shelling out to gpg, but Crypt::GpgME
> hasn't been updated since 2009.
> 
> When i last looked in-depth, i thought that GnuPG::Interface was the
> best of the lot.  But I have had to do a bunch of work to make
> libgnupg-interface-perl work with modern GnuPG recently, and it hasn't
> been accepted upstream :(
> 
> I don't know what shape the rest of these packages are really in,
> either.
> 
> So i'm afraid that i currently think there are *no* good interfaces to
> GnuPG in perl at the moment :( We should be culling the ones that we can
> cull from debian, so that we can focus on a single good implementation.
> 
> I welcome help from either GnuPG or Perl maintainers in figuring out
> what is the best approach here.

How about https://github.com/ueno/gpgme-glib and then use GIR for Perl, 
Python, Ruby, etc.?


 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Fri, 08 Sep 2017 00:54:02 GMT) (full text, mbox, link).

Acknowledgement sent to David Bremner <david@tethera.net>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Fri, 08 Sep 2017 00:54:02 GMT) (full text, mbox, link).

Message #22 received at 873753@bugs.debian.org (full text, mbox, reply):

Daniel Kahn Gillmor <dkg@debian.org> writes:

> In debian, we have at least:
>
>   libmail-gnupg-perl
>   libgnupg-perl
>   libcrypt-gpg-perl
>   libgnupg-interface-perl
>   libpgp-sign-perl
>   
> GnuPG upstream doesn't directly support any of these, unfortunately.

libmail-gnupg-perl is a layer on top of (iirc) libgnupg-interface-perl
to do PGP/MIME stuff. It is also pretty much orphaned upstream.

d

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Fri, 08 Sep 2017 04:15:06 GMT) (full text, mbox, link).

Acknowledgement sent to Daniel Kahn Gillmor <dkg@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Fri, 08 Sep 2017 04:15:06 GMT) (full text, mbox, link).

Message #27 received at 873753@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Fri 2017-09-08 00:24:07 +0200, Jonas Smedegaard wrote:
> How about https://github.com/ueno/gpgme-glib and then use GIR for Perl, 
> Python, Ruby, etc.?

Interesting, yet another way to deal with this :)

GnuPG upstream already publishes and maintains a native python binding,
which is made using swig -- i suppose another approach would be to ask
upstream to extend that swig binding to perl.  (and ruby?)

I personally find swig ugly and difficult to work with, but that is what
upstream is currently supporting, so it might be preferable to use that
to keep it in sync -- i think gpgme-glib would already be out of date
compare to libgpgme in debian testing.

   --dkg

[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Fri, 08 Sep 2017 04:33:03 GMT) (full text, mbox, link).

Acknowledgement sent to Daniel Kahn Gillmor <dkg@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Fri, 08 Sep 2017 04:33:03 GMT) (full text, mbox, link).

Message #32 received at 873753@bugs.debian.org (full text, mbox, reply):

On Thu 2017-09-07 23:57:00 -0400, Daniel Kahn Gillmor wrote:
> GnuPG upstream already publishes and maintains a native python binding,
> which is made using swig -- i suppose another approach would be to ask
> upstream to extend that swig binding to perl.  (and ruby?)

I've just opened some feature requests with upstream to see whether
they're interested:

perl: https://dev.gnupg.org/T3395
ruby: https://dev.gnupg.org/T3396

We'll see whether there's any bite there.

      --dkg

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Fri, 08 Sep 2017 21:18:03 GMT) (full text, mbox, link).

Acknowledgement sent to gregor herrmann <gregoa@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Fri, 08 Sep 2017 21:18:03 GMT) (full text, mbox, link).

Message #37 received at 873753@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

On Thu, 07 Sep 2017 18:11:16 -0400, Daniel Kahn Gillmor wrote:

> Over on https://bugs.debian.org/873753, Ricardo Mones wrote:
> 
> > The current maintainer of libcrypt-gpg-perl, Roberto Jimeno <robertojimenoca@terra.es>,
> > is apparently not active anymore.  Therefore, I orphan this package now.
> fwiw, this package has not been updated for many years (nearly a
> decade), and is several versions behind upstream (1.52, in unstable
> today, was released upstream in 2005!).  I strongly doubt whether it
> even works with modern versions of GnuPG.  It also has no reverse
> dependencies.

Yes.

I had a short look; the package has direct changes to the code and
doesn't run the test suite. Trying to enable it leads to syntax
errors (!) in t/*.t.

Popcon votes: 16 is not that low, and there is a newer upstream
release, but I think working on this package would bring more pain
than benefit, and I also doubt it works with gpg2.

So +1 for removal from me.
 

Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Leonard Cohen: You Know Who I Am

[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Sat, 09 Sep 2017 09:21:02 GMT) (full text, mbox, link).

Acknowledgement sent to intrigeri <intrigeri@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Sat, 09 Sep 2017 09:21:02 GMT) (full text, mbox, link).

Message #42 received at 873753@bugs.debian.org (full text, mbox, reply):

gregor herrmann:
> On Thu, 07 Sep 2017 18:11:16 -0400, Daniel Kahn Gillmor wrote:

>> Over on https://bugs.debian.org/873753, Ricardo Mones wrote:
>> 
>> > The current maintainer of libcrypt-gpg-perl, Roberto Jimeno <robertojimenoca@terra.es>,
>> > is apparently not active anymore.  Therefore, I orphan this package now.
>> fwiw, this package has not been updated for many years (nearly a
>> decade), and is several versions behind upstream (1.52, in unstable
>> today, was released upstream in 2005!).  I strongly doubt whether it
>> even works with modern versions of GnuPG.  It also has no reverse
>> dependencies.

> Yes.

> I had a short look; the package has direct changes to the code and
> doesn't run the test suite. Trying to enable it leads to syntax
> errors (!) in t/*.t.

> Popcon votes: 16 is not that low, and there is a newer upstream
> release, but I think working on this package would bring more pain
> than benefit, and I also doubt it works with gpg2.

> So +1 for removal from me.

+1

I'm not entirely happy with GnuPG::Interface, but at least it works
with modern GnuPG and some of my contributions upstream were
accepted eventually. Let's make it more obvious that it's the least
worst that we have right now.

Cheers,
-- 
intrigeri

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Sat, 09 Sep 2017 20:39:05 GMT) (full text, mbox, link).

Acknowledgement sent to gregor herrmann <gregoa@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Sat, 09 Sep 2017 20:39:05 GMT) (full text, mbox, link).

Message #47 received at 873753@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Control: clone -1 -2
Control: retitle -2 RM: libcrypt-gpg-perl -- RoQA; unmaintained and probably broken
Control: reassign -2 ftp.debian.org
Control: severity -2 normal

X-Debbugs-Cc: ftpmaster@ftp-master.debian.org>


On Sat, 09 Sep 2017 11:16:35 +0200, intrigeri wrote:

> gregor herrmann:
> > On Thu, 07 Sep 2017 18:11:16 -0400, Daniel Kahn Gillmor wrote:
> 
> >> Over on https://bugs.debian.org/873753, Ricardo Mones wrote:
> >> 
> >> > The current maintainer of libcrypt-gpg-perl, Roberto Jimeno <robertojimenoca@terra.es>,
> >> > is apparently not active anymore.  Therefore, I orphan this package now.
> >> fwiw, this package has not been updated for many years (nearly a
> >> decade), and is several versions behind upstream (1.52, in unstable
> >> today, was released upstream in 2005!).  I strongly doubt whether it
> >> even works with modern versions of GnuPG.  It also has no reverse
> >> dependencies.
> 
> > Yes.
> 
> > I had a short look; the package has direct changes to the code and
> > doesn't run the test suite. Trying to enable it leads to syntax
> > errors (!) in t/*.t.
> 
> > Popcon votes: 16 is not that low, and there is a newer upstream
> > release, but I think working on this package would bring more pain
> > than benefit, and I also doubt it works with gpg2.
> 
> > So +1 for removal from me.
> 
> +1
> 
> I'm not entirely happy with GnuPG::Interface, but at least it works
> with modern GnuPG and some of my contributions upstream were
> accepted eventually. Let's make it more obvious that it's the least
> worst that we have right now.

Alright, cloning an RM bug.


Cheers,
gregor

-- 
 .''`.  https://info.comodo.priv.at/ - Debian Developer https://www.debian.org
 : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
 `. `'  Member of VIBE!AT & SPI, fellow of the Free Software Foundation Europe
   `-   NP: Ben Weaver: Rose Marie

[signature.asc (application/pgp-signature, inline)]

Bug 873753 cloned as bug 875124 Request was from gregor herrmann <gregoa@debian.org> to 873753-submit@bugs.debian.org. (Sat, 09 Sep 2017 20:39:05 GMT) (full text, mbox, link).

Reply sent to Debian FTP Masters <ftpmaster@ftp-master.debian.org>:
You have taken responsibility. (Sun, 10 Sep 2017 16:21:48 GMT) (full text, mbox, link).

Notification sent to Ricardo Mones <mones@debian.org>:
Bug acknowledged by developer. (Sun, 10 Sep 2017 16:21:49 GMT) (full text, mbox, link).

Message #54 received at 873753-done@bugs.debian.org (full text, mbox, reply):

Version: 1.52-1.1+rm

Dear submitter,

as the package libcrypt-gpg-perl has just been removed from the Debian archive
unstable we hereby close the associated bug reports.  We are sorry
that we couldn't deal with your issue properly.

For details on the removal, please see https://bugs.debian.org/875124

The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.

This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
ftpmaster@ftp-master.debian.org.

Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)

Information forwarded to debian-bugs-dist@lists.debian.org, wnpp@debian.org:
Bug#873753; Package wnpp. (Mon, 11 Sep 2017 01:18:02 GMT) (full text, mbox, link).

Acknowledgement sent to Russ Allbery <rra@debian.org>:
Extra info received and forwarded to list. Copy sent to wnpp@debian.org. (Mon, 11 Sep 2017 01:18:02 GMT) (full text, mbox, link).

Message #59 received at 873753@bugs.debian.org (full text, mbox, reply):

Daniel Kahn Gillmor <dkg@debian.org> writes:

> There are too many bindings for GnuPG in different languages, and
> keeping them all up-to-date and clean is a pain.  we should focus on one
> or at most two per language.

> In debian, we have at least:

>   libpgp-sign-perl

FYI, this isn't a binding for GnuPG -- it's something much, much more
ancient that tries to do things like support PGPv2 and that I need to
completely rewrite, hopefully on top of an actual binding.  It's only used
by some Usenet stuff, and I'm keeping it limping along until I have a
chance to rewrite it properly.  It's best ignored for the purposes of
finding a good general solution in Debian.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 09 Oct 2017 07:47:37 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Tue Jan 30 06:32:06 2024; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Debian Bug report logs - #873753 O: libcrypt-gpg-perl -- An Object Oriented Interface to GnuPG

Debian Bug report logs - #873753
O: libcrypt-gpg-perl -- An Object Oriented Interface to GnuPG