-
Notifications
You must be signed in to change notification settings - Fork 373
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove subkey support from the internal OpenPGP parser #2278
Comments
pmatilai
added a commit
to pmatilai/rpm
that referenced
this issue
Nov 18, 2022
The world of OpenPGP subkeys is scarily complicated and we're failing at it in too many ways to count. People who need the complexity of a full implementation can use the Sequoia backend, meanwhile this tames the internal parser back to something we may be able to support. Fixes: rpm-software-management#2278
pmatilai
added a commit
to pmatilai/rpm
that referenced
this issue
Nov 18, 2022
The world of OpenPGP subkeys is scarily complicated and we're failing at it in too many ways to count. People who need the complexity of a full implementation can use the Sequoia backend, meanwhile this tames the internal parser back to something we may be able to support. Fixes: rpm-software-management#2278
pmatilai
added a commit
to pmatilai/rpm
that referenced
this issue
Nov 18, 2022
The world of OpenPGP subkeys is scarily complicated and we're failing at it in too many ways to count. People who need the complexity of a full implementation can use the Sequoia backend, meanwhile this tames the internal parser back to something we may be able to support. Update tests accordingly - as a nice side-effect this makes the internal parser behave the same as Sequoia for these cases. Fixes: rpm-software-management#2278
pmatilai
added a commit
to pmatilai/rpm
that referenced
this issue
Nov 18, 2022
The world of OpenPGP subkeys is scarily complicated and we're failing at it in too many ways to count. People who need the complexity of a full implementation can use the Sequoia backend, meanwhile this tames the internal parser back to something we may be able to support. Update tests accordingly - as a nice side-effect this makes the internal parser behave the same as Sequoia for these cases. Fixes: rpm-software-management#2278
pmatilai
added a commit
to pmatilai/rpm
that referenced
this issue
Nov 18, 2022
The world of OpenPGP subkeys is scarily complicated and we're failing at it in too many ways to count. People who need the complexity of a full implementation can use the Sequoia backend, meanwhile this tames the internal parser back to something we may be able to support. Update tests accordingly - as a nice side-effect this makes the internal parser behave the same as Sequoia for these cases. Fixes: rpm-software-management#2278
pmatilai
added a commit
to pmatilai/rpm
that referenced
this issue
Nov 18, 2022
The world of OpenPGP subkeys is scarily complicated and we're failing at it in too many ways to count. People who need the complexity of a full implementation can use the Sequoia backend, meanwhile this tames the internal parser back to something we may be able to support. Update tests accordingly - as a nice side-effect this makes the internal parser behave the same as Sequoia for these cases. Fixes: rpm-software-management#2278
We can't push a change like this in at the RC stage so we'll just have to ack that we missed the boat this time around. And since that was the case, we'll better be looking at getting rid of the whole thing instead. So closing in favor of #2414. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
We wont be able to get rid of the internal OpenPGP parser in 4.19, and even beyond that it could be useful as a bootstrap survival aid. But if it is to stay at all, we need to cut down on the complexity dramatically. By far the most complexity comes through subkeys whose handling still has any number of severe gaps and flaws despite the complexity. So we'll effectively turn back clock to time before 355c9b0, and a whole mountain of complexities just disappears.
The text was updated successfully, but these errors were encountered: