8a904a
%bcond_without unversioned_gpg
8a904a
e4fdbb
Summary: Utility for secure communication and data storage
e4fdbb
Name:    gnupg2
8a904a
Version: 2.2.20
06260c
Release: 3%{?dist}
e4fdbb
e4fdbb
License: GPLv3+
e4fdbb
Source0: ftp://ftp.gnupg.org/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
e4fdbb
Source1: ftp://ftp.gnupg.org/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2.sig
e4fdbb
Patch1:  gnupg-2.1.21-insttools.patch
e4fdbb
# needed for compatibility with system FIPS mode
e4fdbb
Patch3:  gnupg-2.1.10-secmem.patch
e4fdbb
# non-upstreamable patch adding file-is-digest option needed for Copr
8a904a
Patch4:  gnupg-2.2.20-file-is-digest.patch
8a904a
# fix handling of missing key usage on ocsp replies - upstream T1333
8a904a
Patch5:  gnupg-2.2.16-ocsp-keyusage.patch
e4fdbb
Patch6:  gnupg-2.1.1-fips-algo.patch
e4fdbb
# allow 8192 bit RSA keys in keygen UI with large RSA
e4fdbb
Patch9:  gnupg-2.1.21-large-rsa.patch
8a904a
# fix missing uid on refresh from keys.openpgp.org
8a904a
# https://salsa.debian.org/debian/gnupg2/commit/f292beac1171c6c77faf41d1f88c2e0942ed4437
8a904a
Patch20: gnupg-2.2.18-tests-add-test-cases-for-import-without-uid.patch
8a904a
Patch21: gnupg-2.2.18-gpg-allow-import-of-previously-known-keys-even-without-UI.patch
8a904a
Patch22: gnupg-2.2.18-gpg-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch
06260c
Patch23: gnupg-2.2.20-CVE-2022-34903.patch
8a904a
# Fixes for issues found in Coverity scan - reported upstream
8a904a
Patch30: gnupg-2.2.20-coverity.patch
8a904a
e4fdbb
e4fdbb
URL:     http://www.gnupg.org/
e4fdbb
e4fdbb
#BuildRequires: automake libtool texinfo transfig
e4fdbb
BuildRequires: gcc
e4fdbb
BuildRequires: bzip2-devel
e4fdbb
BuildRequires: curl-devel
e4fdbb
BuildRequires: docbook-utils
e4fdbb
BuildRequires: gettext
e4fdbb
BuildRequires: libassuan-devel >= 2.1.0
e4fdbb
BuildRequires: libgcrypt-devel >= 1.7.0
e4fdbb
BuildRequires: libgpg-error-devel >= 1.31
e4fdbb
BuildRequires: libksba-devel >= 1.3.0
e4fdbb
BuildRequires: openldap-devel
e4fdbb
BuildRequires: libusb-devel
e4fdbb
BuildRequires: pcsc-lite-libs
e4fdbb
BuildRequires: npth-devel
e4fdbb
BuildRequires: readline-devel ncurses-devel
e4fdbb
BuildRequires: zlib-devel
e4fdbb
BuildRequires: gnutls-devel
e4fdbb
BuildRequires: sqlite-devel
e4fdbb
BuildRequires: fuse
e4fdbb
e4fdbb
Requires: libgcrypt >= 1.7.0
e4fdbb
Requires: libgpg-error >= 1.31
e4fdbb
e4fdbb
Recommends: pinentry
e4fdbb
e4fdbb
Recommends: gnupg2-smime
e4fdbb
8a904a
%if %{with unversioned_gpg}
e4fdbb
# pgp-tools, perl-GnuPG-Interface requires 'gpg' (not sure why) -- Rex
e4fdbb
Provides: gpg = %{version}-%{release}
e4fdbb
# Obsolete GnuPG-1 package
e4fdbb
Provides: gnupg = %{version}-%{release}
e4fdbb
Obsoletes: gnupg <= 1.4.10
e4fdbb
%endif
e4fdbb
e4fdbb
Provides: dirmngr = %{version}-%{release}
e4fdbb
Obsoletes: dirmngr < 1.2.0-1
e4fdbb
e4fdbb
%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
e4fdbb
e4fdbb
%package smime
e4fdbb
Summary: CMS encryption and signing tool and smart card support for GnuPG
e4fdbb
Requires: gnupg2 = %{version}-%{release}
e4fdbb
e4fdbb
e4fdbb
%description
e4fdbb
GnuPG is GNU's tool for secure communication and data storage.  It can
e4fdbb
be used to encrypt data and to create digital signatures.  It includes
e4fdbb
an advanced key management facility and is compliant with the proposed
e4fdbb
OpenPGP Internet standard as described in RFC2440 and the S/MIME
e4fdbb
standard as described by several RFCs.
e4fdbb
e4fdbb
GnuPG 2.0 is a newer version of GnuPG with additional support for
e4fdbb
S/MIME.  It has a different design philosophy that splits
e4fdbb
functionality up into several modules. The S/MIME and smartcard functionality
e4fdbb
is provided by the gnupg2-smime package.
e4fdbb
e4fdbb
%description smime
e4fdbb
GnuPG is GNU's tool for secure communication and data storage. This
e4fdbb
package adds support for smart cards and S/MIME encryption and signing
e4fdbb
to the base GnuPG package 
e4fdbb
e4fdbb
%prep
e4fdbb
%setup -q -n gnupg-%{version}
e4fdbb
8a904a
%if %{with unversioned_gpg}
e4fdbb
%patch1 -p1 -b .insttools
e4fdbb
%endif
e4fdbb
%patch3 -p1 -b .secmem
e4fdbb
%patch4 -p1 -b .file-is-digest
e4fdbb
%patch5 -p1 -b .keyusage
e4fdbb
%patch6 -p1 -b .fips
e4fdbb
%patch9 -p1 -b .large-rsa
e4fdbb
8a904a
%patch20 -p1 -b .test_missing_uid
8a904a
%patch21 -p1 -b .prev_known_key
8a904a
%patch22 -p1 -b .good_revoc
06260c
%patch23 -p1 -b .CVE-2022-34903
8a904a
8a904a
%patch30 -p1 -b .coverity
8a904a
e4fdbb
# pcsc-lite library major: 0 in 1.2.0, 1 in 1.2.9+ (dlopen()'d in pcsc-wrapper)
e4fdbb
# Note: this is just the name of the default shared lib to load in scdaemon,
e4fdbb
# it can use other implementations too (including non-pcsc ones).
e4fdbb
%global pcsclib %(basename $(ls -1 %{_libdir}/libpcsclite.so.? 2>/dev/null ) 2>/dev/null )
e4fdbb
e4fdbb
sed -i -e 's/"libpcsclite\.so"/"%{pcsclib}"/' scd/scdaemon.c
e4fdbb
e4fdbb
e4fdbb
%build
e4fdbb
e4fdbb
%configure \
8a904a
%if %{without unversioned_gpg}
e4fdbb
  --enable-gpg-is-gpg2 \
e4fdbb
%endif
e4fdbb
  --disable-gpgtar \
e4fdbb
  --disable-rpath \
e4fdbb
  --enable-g13 \
e4fdbb
  --enable-large-secmem
e4fdbb
e4fdbb
# need scratch gpg database for tests
e4fdbb
mkdir -p $HOME/.gnupg
e4fdbb
e4fdbb
make %{?_smp_mflags}
e4fdbb
e4fdbb
e4fdbb
%install
e4fdbb
make install DESTDIR=%{buildroot} \
e4fdbb
  INSTALL="install -p" \
e4fdbb
  docdir=%{_pkgdocdir}
e4fdbb
8a904a
%if %{without unversioned_gpg}
e4fdbb
# rename file conflicting with gnupg-1.x
e4fdbb
rename gnupg.7 gnupg2.7 %{buildroot}%{_mandir}/man7/gnupg.7*
e4fdbb
%endif
e4fdbb
e4fdbb
%find_lang %{name}
e4fdbb
e4fdbb
# gpgconf.conf
e4fdbb
mkdir -p %{buildroot}%{_sysconfdir}/gnupg
e4fdbb
touch %{buildroot}%{_sysconfdir}/gnupg/gpgconf.conf
e4fdbb
e4fdbb
# more docs
e4fdbb
install -m644 -p AUTHORS NEWS THANKS TODO \
e4fdbb
  %{buildroot}%{_pkgdocdir}
e4fdbb
8a904a
%if %{with unversioned_gpg}
e4fdbb
# compat symlinks
e4fdbb
ln -sf gpg %{buildroot}%{_bindir}/gpg2
e4fdbb
ln -sf gpgv %{buildroot}%{_bindir}/gpgv2
e4fdbb
ln -sf gpg.1 %{buildroot}%{_mandir}/man1/gpg2.1
e4fdbb
ln -sf gpgv.1 %{buildroot}%{_mandir}/man1/gpgv2.1
e4fdbb
ln -sf gnupg.7 %{buildroot}%{_mandir}/man7/gnupg2.7
e4fdbb
%endif
e4fdbb
e4fdbb
# info dir
e4fdbb
rm -f %{buildroot}%{_infodir}/dir
e4fdbb
e4fdbb
# drop the gpg scheme interpreter
e4fdbb
rm -f %{buildroot}%{_bindir}/gpgscm
e4fdbb
8a904a
# Move the systemd user units to appropriate directory
8a904a
install -d -m755 %{buildroot}%{_userunitdir}
8a904a
mv %{buildroot}%{_pkgdocdir}/examples/systemd-user/*.socket %{buildroot}%{_userunitdir}
8a904a
mv %{buildroot}%{_pkgdocdir}/examples/systemd-user/*.service %{buildroot}%{_userunitdir}
8a904a
e4fdbb
%check
e4fdbb
# need scratch gpg database for tests
e4fdbb
mkdir -p $HOME/.gnupg
e4fdbb
make -k check
e4fdbb
e4fdbb
e4fdbb
%files -f %{name}.lang
e4fdbb
%{!?_licensedir:%global license %%doc}
e4fdbb
%license COPYING
e4fdbb
#doc AUTHORS NEWS README THANKS TODO
e4fdbb
%{_pkgdocdir}
e4fdbb
%dir %{_sysconfdir}/gnupg
e4fdbb
%ghost %config(noreplace) %{_sysconfdir}/gnupg/gpgconf.conf
e4fdbb
## docs say to install suid root, but fedora/rh security folk say not to
e4fdbb
%{_bindir}/gpg2
e4fdbb
%{_bindir}/gpgv2
e4fdbb
%{_bindir}/gpg-connect-agent
e4fdbb
%{_bindir}/gpg-agent
e4fdbb
%{_bindir}/gpgconf
e4fdbb
%{_bindir}/gpgparsemail
e4fdbb
%{_bindir}/g13
e4fdbb
%{_bindir}/dirmngr
e4fdbb
%{_bindir}/dirmngr-client
8a904a
%if %{with unversioned_gpg}
e4fdbb
%{_bindir}/gpg
e4fdbb
%{_bindir}/gpgv
e4fdbb
%{_bindir}/gpgsplit
e4fdbb
%{_bindir}/gpg-zip
e4fdbb
%endif
e4fdbb
%{_bindir}/watchgnupg
8a904a
%{_bindir}/gpg-wks-server
e4fdbb
%{_sbindir}/*
e4fdbb
%{_datadir}/gnupg/
e4fdbb
%{_libexecdir}/*
e4fdbb
%{_infodir}/*.info*
e4fdbb
%{_mandir}/man?/*
8a904a
%{_userunitdir}/*
e4fdbb
%exclude %{_mandir}/man?/gpgsm*
e4fdbb
e4fdbb
%files smime
e4fdbb
%{_bindir}/gpgsm*
e4fdbb
%{_bindir}/kbxutil
e4fdbb
%{_mandir}/man?/gpgsm*
e4fdbb
e4fdbb
e4fdbb
%changelog
06260c
* Wed Aug 03 2022 Jakub Jelen <jjelen@redhat.com> - 2.2.20-3
06260c
- Fix CVE-2022-34903 (#2108447)
06260c
8a904a
* Mon May  4 2020 Tomáš Mráz <tmraz@redhat.com> - 2.2.20-2
8a904a
- fixes for issues found in Coverity scan
8a904a
8a904a
* Thu Apr 30 2020 Tomáš Mráz <tmraz@redhat.com> - 2.2.20-1
8a904a
- upgrade to 2.2.20
8a904a
e4fdbb
* Wed Aug  1 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.9-1
e4fdbb
- upgrade to 2.2.9
e4fdbb
e4fdbb
* Mon Jun 11 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.8-1
e4fdbb
- upgrade to 2.2.8 fixing CVE 2018-12020
e4fdbb
e4fdbb
* Wed Apr 11 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.6-1
e4fdbb
- upgrade to 2.2.6
e4fdbb
e4fdbb
* Fri Mar  2 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.5-1
e4fdbb
- upgrade to 2.2.5
e4fdbb
e4fdbb
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.4-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
e4fdbb
e4fdbb
* Fri Jan 12 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.4-1
e4fdbb
- upgrade to 2.2.4
e4fdbb
e4fdbb
* Tue Nov 21 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.3-1
e4fdbb
- upgrade to 2.2.3
e4fdbb
e4fdbb
* Wed Nov  8 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.2-1
e4fdbb
- upgrade to 2.2.2
e4fdbb
e4fdbb
* Tue Oct  3 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.1-1
e4fdbb
- upgrade to 2.2.1
e4fdbb
e4fdbb
* Tue Sep  5 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.0-1
e4fdbb
- upgrade to 2.2.0
e4fdbb
e4fdbb
* Wed Aug  9 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.22-1
e4fdbb
- upgrade to 2.1.22
e4fdbb
e4fdbb
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.21-5
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
e4fdbb
e4fdbb
* Fri Jul 28 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-4
e4fdbb
- explictly remove gpgscm from the buildroot
e4fdbb
e4fdbb
* Tue Jul 18 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-3
e4fdbb
- rebase the insttools patch
e4fdbb
- enable large secure memory support
e4fdbb
e4fdbb
* Tue May 16 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-2
e4fdbb
- scdaemon is now needed by gpg
e4fdbb
e4fdbb
* Tue May 16 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-1
e4fdbb
- upgrade to 2.1.21
e4fdbb
e4fdbb
* Tue Apr 25 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.20-2
e4fdbb
- libdns aliasing issues fixed
e4fdbb
e4fdbb
* Mon Apr 24 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.20-1
e4fdbb
- upgrade to 2.1.20
e4fdbb
- disable bundled libdns for now (#1444352)
e4fdbb
e4fdbb
* Fri Mar 24 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.19-1
e4fdbb
- upgrade to 2.1.19
e4fdbb
- shorten time waiting on gpg-agent/dirmngr to start by exponential
e4fdbb
  backoff (#1431749)
e4fdbb
e4fdbb
* Wed Mar  1 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.18-2
e4fdbb
- upgrade to 2.1.18
e4fdbb
e4fdbb
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.17-3
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
e4fdbb
e4fdbb
* Thu Jan 12 2017 Igor Gnatenko <ignatenko@redhat.com> - 2.1.17-2
e4fdbb
- Rebuild for readline 7.x
e4fdbb
e4fdbb
* Thu Dec 22 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.17-1
e4fdbb
- upgrade to 2.1.17
e4fdbb
e4fdbb
* Mon Nov 28 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.16-1
e4fdbb
- upgrade to 2.1.16
e4fdbb
e4fdbb
* Mon Aug 22 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.13-2
e4fdbb
- avoid using libgcrypt without initialization (#1366909)
e4fdbb
e4fdbb
* Tue Jul 12 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.13-1
e4fdbb
- upgrade to 2.1.13
e4fdbb
e4fdbb
* Thu May  5 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.12-1
e4fdbb
- upgrade to 2.1.12
e4fdbb
e4fdbb
* Tue Apr 12 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.11-4
e4fdbb
- make the pinentry dependency weak as for the public-key operations it
e4fdbb
  is not needed (#1324595)
e4fdbb
e4fdbb
* Mon Mar  7 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.11-3
e4fdbb
- add recommends weak dependency for gnupg2-smime
e4fdbb
e4fdbb
* Sat Mar  5 2016 Peter Robinson <pbrobinson@fedoraproject.org> 2.1.11-2
e4fdbb
- Don't ship ChangeLog, core details already covered in NEWS
e4fdbb
e4fdbb
* Tue Feb 16 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.11-1
e4fdbb
- upgrade to 2.1.11
e4fdbb
e4fdbb
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.10-4
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
e4fdbb
e4fdbb
* Wed Jan 13 2016 Dan Horák <dan[at]danny.cz> - 2.1.10-3
e4fdbb
- fix the insttools patch
e4fdbb
e4fdbb
* Wed Jan 13 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.10-2
e4fdbb
- rebase the insttools patch needed for full gpgv1 replacement
e4fdbb
e4fdbb
* Mon Dec  7 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.10-1
e4fdbb
- upgrade to 2.1.10
e4fdbb
e4fdbb
* Mon Oct 12 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.9-1
e4fdbb
- upgrade to 2.1.9
e4fdbb
e4fdbb
* Fri Sep 11 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.8-1
e4fdbb
- upgrade to 2.1.8
e4fdbb
e4fdbb
* Thu Aug 13 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.7-1
e4fdbb
- upgrade to 2.1.7
e4fdbb
e4fdbb
* Tue Aug 11 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.6-1
e4fdbb
- upgrade to 2.1.6
e4fdbb
e4fdbb
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.5-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
e4fdbb
e4fdbb
* Fri Jun 12 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.5-1
e4fdbb
- upgrade to 2.1.5
e4fdbb
e4fdbb
* Tue May 26 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.4-2
e4fdbb
- use gnutls for TLS support in dirmngr (#1224816)
e4fdbb
e4fdbb
* Fri May 15 2015 Robert Scheck <robert@fedoraproject.org> - 2.1.4-1
e4fdbb
- upgrade to 2.1.4 (#1192353)
e4fdbb
e4fdbb
* Thu Apr 16 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.3-1
e4fdbb
- new upstream release fixing minor bugs
e4fdbb
e4fdbb
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 2.1.2-2
e4fdbb
- Rebuilt for Fedora 23 Change
e4fdbb
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
e4fdbb
e4fdbb
* Wed Feb 18 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.2-1
e4fdbb
- new upstream release fixing two minor security issues
e4fdbb
e4fdbb
* Fri Jan 30 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.1-2
e4fdbb
- resolve conflict with gnupg by renaming conflicting manual page (#1187472)
e4fdbb
e4fdbb
* Thu Jan 29 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.1-1
e4fdbb
- new upstream release
e4fdbb
- this release now includes the dirmngr which is obsoleted as separate package
e4fdbb
e4fdbb
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.25-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
e4fdbb
e4fdbb
* Tue Aug  5 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.25-1
e4fdbb
- new upstream release fixing a minor regression introduced by the previous one
e4fdbb
- add --file-is-digest option needed for copr
e4fdbb
e4fdbb
* Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 2.0.24-2
e4fdbb
- fix license handling
e4fdbb
e4fdbb
* Wed Jun 25 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.24-1
e4fdbb
- new upstream release fixing CVE-2014-4617
e4fdbb
e4fdbb
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.22-4
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
e4fdbb
e4fdbb
* Wed May  7 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-3
e4fdbb
- do not dump core if hash algorithm not available in the FIPS mode
e4fdbb
e4fdbb
* Tue Mar  4 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-2
e4fdbb
- rebuilt against new libgcrypt
e4fdbb
e4fdbb
* Tue Oct  8 2013 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-1
e4fdbb
- new upstream release fixing CVE-2013-4402
e4fdbb
e4fdbb
* Fri Aug 23 2013 Tomáš Mráz <tmraz@redhat.com> - 2.0.21-1
e4fdbb
- new upstream release
e4fdbb
e4fdbb
* Wed Aug  7 2013 Tomas Mraz <tmraz@redhat.com> - 2.0.20-3
e4fdbb
- adjust to the unversioned docdir change (#993785)
e4fdbb
e4fdbb
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.20-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
e4fdbb
e4fdbb
* Wed May 15 2013 Tomas Mraz <tmraz@redhat.com> - 2.0.20-1
e4fdbb
- new upstream release
e4fdbb
e4fdbb
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.19-8
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
e4fdbb
e4fdbb
* Wed Jan  2 2013 Tomas Mraz <tmraz@redhat.com> - 2.0.19-7
e4fdbb
- fix CVE-2012-6085 - skip invalid key packets (#891142)
e4fdbb
e4fdbb
* Thu Nov 22 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-6
e4fdbb
- use AES as default crypto algorithm in FIPS mode (#879047)
e4fdbb
e4fdbb
* Fri Nov 16 2012 Jamie Nguyen <jamielinux@fedoraproject.org> - 2.0.19-5
e4fdbb
- rebuild for 
e4fdbb
e4fdbb
* Fri Jul 27 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-4
e4fdbb
- fix negated condition (#843842)
e4fdbb
e4fdbb
* Thu Jul 26 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-3
e4fdbb
- add compat symlinks and provides if built on RHEL
e4fdbb
e4fdbb
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.19-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
e4fdbb
e4fdbb
* Tue Apr 24 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-1
e4fdbb
- new upstream release
e4fdbb
- set environment in protect-tool (#548528)
e4fdbb
- do not reject OCSP signing certs without keyUsage (#720174)
e4fdbb
e4fdbb
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.18-3
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
e4fdbb
e4fdbb
* Wed Oct 12 2011 Rex Dieter <rdieter@fedoraproject.org> 2.0.18-2
e4fdbb
- build with --enable-standard-socket
e4fdbb
e4fdbb
* Wed Aug 17 2011 Tomas Mraz <tmraz@redhat.com> - 2.0.18-1
e4fdbb
- new upstream release (#728481)
e4fdbb
e4fdbb
* Mon Jul 25 2011 Tomas Mraz <tmraz@redhat.com> - 2.0.17-2
e4fdbb
- fix a bug that shows up with the new libgcrypt release (#725369)
e4fdbb
e4fdbb
* Thu Jan 20 2011 Tomas Mraz <tmraz@redhat.com> - 2.0.17-1
e4fdbb
- new upstream release (#669611)
e4fdbb
e4fdbb
* Tue Aug 17 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.16-3
e4fdbb
- drop the provides/obsoletes for gnupg
e4fdbb
- drop the man page file conflicting with gnupg-1.x
e4fdbb
e4fdbb
* Fri Aug 13 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.16-2
e4fdbb
- drop the compat symlinks as gnupg-1.x is revived
e4fdbb
e4fdbb
* Tue Jul 27 2010 Rex Dieter <rdieter@fedoraproject.org> - 2.0.16-1
e4fdbb
- gnupg-2.0.16
e4fdbb
e4fdbb
* Fri Jul 23 2010 Rex Dieter <rdieter@fedoraproject.org> - 2.0.14-4
e4fdbb
- gpgsm realloc patch (#617706)
e4fdbb
e4fdbb
* Fri Jun 18 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
e4fdbb
- initialize small amount of secmem for list of algorithms in help (#598847)
e4fdbb
  (necessary in the FIPS mode of libgcrypt)
e4fdbb
e4fdbb
* Tue Feb  9 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.14-2
e4fdbb
- disable selinux support - it is too rudimentary and restrictive (#562982)
e4fdbb
e4fdbb
* Mon Jan 11 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.14-1
e4fdbb
- new upstream version
e4fdbb
- fix a few tests so they do not need to execute gpg-agent
e4fdbb
e4fdbb
* Tue Dec  8 2009 Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
e4fdbb
- Explicitly BR libassuan-static in accordance with the Packaging
e4fdbb
  Guidelines (libassuan-devel is still static-only).
e4fdbb
e4fdbb
* Fri Oct 23 2009 Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
e4fdbb
- drop s390 specific ifnarchs as all the previously missing dependencies
e4fdbb
  are now there
e4fdbb
- split out gpgsm into a smime subpackage to reduce main package dependencies
e4fdbb
e4fdbb
* Wed Oct 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.0.13-2
e4fdbb
- provide/obsolete gnupg-1 and add compat symlinks to be able to drop
e4fdbb
  gnupg-1
e4fdbb
e4fdbb
* Fri Sep 04 2009 Rex Dieter <rdieter@fedoraproject.org> - 2.0.13-1
e4fdbb
- gnupg-2.0.13
e4fdbb
- Unable to use gpg-agent + input methods (#228953)
e4fdbb
e4fdbb
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.12-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
e4fdbb
e4fdbb
* Wed Jun 17 2009 Rex Dieter <rdieter@fedoraproject.org> - 2.0.12-1
e4fdbb
- gnupg-2.0.12
e4fdbb
e4fdbb
* Wed Mar 04 2009 Rex Dieter <rdieter@fedoraproject.org> - 2.0.11-1
e4fdbb
- gnupg-2.0.11
e4fdbb
e4fdbb
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.10-2
e4fdbb
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
e4fdbb
e4fdbb
* Sat Jan 31 2009 Karsten Hopp <karsten@redhat.com> 2.0.10-1
e4fdbb
- don't require pcsc-lite-libs and libusb on mainframe where
e4fdbb
  we don't have those packages as there's no hardware for that
e4fdbb
e4fdbb
* Tue Jan 13 2009 Rex Dieter <rdieter@fedoraproject.org> 2.0.10-1
e4fdbb
- gnupg-2.0.10
e4fdbb
e4fdbb
* Mon Aug 04 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.9-3
e4fdbb
- workaround rpm quirks 
e4fdbb
e4fdbb
* Sat May 24 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.0.9-2
e4fdbb
- Patch from upstream to fix curl 7.18.1+ and gcc4.3+ compile error
e4fdbb
e4fdbb
* Mon May 19 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.0.9-1.1
e4fdbb
- minor release bump for sparc rebuild
e4fdbb
e4fdbb
* Wed Mar 26 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.9-1
e4fdbb
- gnupg2-2.0.9
e4fdbb
- drop Provides: openpgp
e4fdbb
- versioned Provides: gpg
e4fdbb
- own %%_sysconfdir/gnupg
e4fdbb
e4fdbb
* Fri Feb 08 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.8-3 
e4fdbb
- respin (gcc43)
e4fdbb
e4fdbb
* Wed Jan 23 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.8-2
e4fdbb
- avoid kde-filesystem dep (#427316)
e4fdbb
e4fdbb
* Thu Dec 20 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.8-1
e4fdbb
- gnupg2-2.0.8
e4fdbb
e4fdbb
* Mon Dec 17 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.8-0.1.rc1
e4fdbb
- gnupg2-2.0.8rc1
e4fdbb
e4fdbb
* Tue Dec 04 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-5
e4fdbb
- respin for openldap
e4fdbb
e4fdbb
* Mon Nov 12 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-4
e4fdbb
- Requires: kde-filesystem (#377841)
e4fdbb
e4fdbb
* Wed Oct 03 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-3
e4fdbb
- %%build: (re)add mkdir -p $HOME/.gnupg
e4fdbb
e4fdbb
* Wed Oct 03 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-2
e4fdbb
- Requires: dirmngr (#312831)
e4fdbb
e4fdbb
* Mon Sep 10 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-1
e4fdbb
- gnupg-2.0.7
e4fdbb
e4fdbb
* Fri Aug 24 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.6-2
e4fdbb
- respin (libassuan)
e4fdbb
e4fdbb
* Thu Aug 16 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.6-1
e4fdbb
- gnupg-2.0.6
e4fdbb
- License: GPLv3+
e4fdbb
e4fdbb
* Thu Aug 02 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-4
e4fdbb
- License: GPLv3
e4fdbb
e4fdbb
* Mon Jul 16 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-3
e4fdbb
- 2.0.5 too many open files fix
e4fdbb
e4fdbb
* Fri Jul 06 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
e4fdbb
- gnupg-2.0.5
e4fdbb
- gpg-agent not restarted after kde session crash/killed (#196327)
e4fdbb
- BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2
e4fdbb
e4fdbb
* Fri May 18 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.4-1
e4fdbb
- gnupg-2.0.4
e4fdbb
e4fdbb
* Thu Mar 08 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.3-1
e4fdbb
- gnupg-2.0.3
e4fdbb
e4fdbb
* Fri Feb 02 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.2-1
e4fdbb
- gnupg-2.0.2
e4fdbb
e4fdbb
* Wed Dec 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-2
e4fdbb
- CVE-2006-6235 (#219934)
e4fdbb
e4fdbb
* Wed Nov 29 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-1
e4fdbb
- gnupg-2.0.1
e4fdbb
- CVE-2006-6169 (#217950)
e4fdbb
e4fdbb
* Sat Nov 25 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-0.3.rc1
e4fdbb
- gnupg-2.0.1rc1 
e4fdbb
e4fdbb
* Thu Nov 16 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.0-4
e4fdbb
- update %%description
e4fdbb
- drop dearmor patch
e4fdbb
e4fdbb
* Mon Nov 13 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.0-3
e4fdbb
- BR: libassuan-static >= 1.0.0
e4fdbb
e4fdbb
* Mon Nov 13 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.0-2
e4fdbb
- gnupg-2.0.0
e4fdbb
e4fdbb
* Fri Nov 10 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.95-3
e4fdbb
- upstream 64bit patch
e4fdbb
e4fdbb
* Mon Nov 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.95-2
e4fdbb
- fix (more) file conflicts with gnupg
e4fdbb
e4fdbb
* Mon Nov 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.95-1
e4fdbb
- 1.9.95
e4fdbb
e4fdbb
* Wed Oct 25 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.94-1
e4fdbb
- 1.9.94
e4fdbb
e4fdbb
* Wed Oct 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.93-1
e4fdbb
- 1.9.93
e4fdbb
e4fdbb
* Wed Oct 11 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.92-2
e4fdbb
- fix file conflicts with gnupg
e4fdbb
e4fdbb
* Wed Oct 11 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.92-1
e4fdbb
- 1.9.92
e4fdbb
e4fdbb
* Tue Oct 10 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.91-4
e4fdbb
- make check ||: (apparently checks return err even on success?)
e4fdbb
e4fdbb
* Tue Oct 10 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.91-3
e4fdbb
- --enable-selinux-support
e4fdbb
- x86_64: --disable-optimization (to avoid gpg2 segfaults), for now
e4fdbb
e4fdbb
* Thu Oct 05 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.91-1
e4fdbb
- 1.9.91
e4fdbb
e4fdbb
* Wed Oct 04 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-8
e4fdbb
- respin
e4fdbb
e4fdbb
* Tue Sep 26 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.90-1
e4fdbb
- 1.9.90 (doesn't build, not released)
e4fdbb
e4fdbb
* Mon Sep 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.23-1
e4fdbb
- 1.9.23 (doesn't build, not released)
e4fdbb
e4fdbb
* Mon Sep 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-7
e4fdbb
- gpg-agent-startup.sh: fix case where valid .gpg-agent-info exists
e4fdbb
e4fdbb
* Mon Sep 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-6
e4fdbb
- fix "syntax error in gpg-agent-startup.sh" (#206887)
e4fdbb
e4fdbb
* Thu Sep 07 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-3
e4fdbb
- fc6 respin (for libksba-1.0)
e4fdbb
e4fdbb
* Tue Aug 29 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-2
e4fdbb
- fc6 respin
e4fdbb
e4fdbb
* Fri Jul 28 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-1
e4fdbb
- 1.9.22
e4fdbb
e4fdbb
* Thu Jun 22 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.21-3
e4fdbb
- fix "gpg-agent not restarted after kde session crash/killed (#196327)
e4fdbb
e4fdbb
* Thu Jun 22 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.21-2
e4fdbb
- 1.9.21
e4fdbb
- omit gpg2 binary to address CVS-2006-3082 (#196190)
e4fdbb
e4fdbb
* Mon Mar  6 2006 Ville Skyttä <ville.skytta at iki.fi>> 1.9.20-3
e4fdbb
- Don't hardcode pcsc-lite lib name (#184123)
e4fdbb
e4fdbb
* Thu Feb 16 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.20-2
e4fdbb
- fc4+: use /etc/kde/(env|shutdown) for scripts (#175744)
e4fdbb
e4fdbb
* Fri Feb 10 2006 Rex Dieter <rexdieter[AT]users.sf.net>
e4fdbb
- fc5: gcc/glibc respin
e4fdbb
e4fdbb
* Tue Dec 20 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.20-1
e4fdbb
- 1.9.20
e4fdbb
e4fdbb
* Thu Dec 01 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
e4fdbb
- include gpg-agent-(startup|shutdown) scripts (#136533)
e4fdbb
- BR: libksba-devel >= 1.9.12 
e4fdbb
- %%check: be permissive about failures (for now)
e4fdbb
e4fdbb
* Wed Nov 30 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-3
e4fdbb
- BR: libksba-devel >= 1.9.13
e4fdbb
e4fdbb
* Tue Oct 11 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-2
e4fdbb
- back to BR: libksba-devel = 1.9.11
e4fdbb
e4fdbb
* Tue Oct 11 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-1
e4fdbb
- 1.9.19
e4fdbb
e4fdbb
* Fri Aug 26 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-9
e4fdbb
- configure: NEED_KSBA_VERSION=0.9.12 -> 0.9.11
e4fdbb
e4fdbb
* Fri Aug 26 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-7
e4fdbb
- re-enable 'make check', rebuild against (older) libksba-0.9.11
e4fdbb
e4fdbb
* Tue Aug  9 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-6
e4fdbb
- don't 'make check' by default (regular builds pass, but FC4/5+plague fails)
e4fdbb
e4fdbb
* Mon Aug  8 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-5
e4fdbb
- 1.9.18
e4fdbb
- drop pth patch (--enable-gpg build fixed)
e4fdbb
- update description (from README)
e4fdbb
e4fdbb
* Fri Jul  1 2005 Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
e4fdbb
- 1.9.17, signal info patch applied upstream (#162264).
e4fdbb
- Patch to fix lvalue build error with gcc4 (upstream #485).
e4fdbb
- Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
e4fdbb
  pcsc-lite lib by default.
e4fdbb
e4fdbb
* Fri May 13 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-3
e4fdbb
- Include upstream's patch for signal.c.
e4fdbb
e4fdbb
* Tue May 10 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
e4fdbb
- Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
e4fdbb
-   opensc support unconditional
e4fdbb
-   remove hard-coded .gz from %%post/%%postun
e4fdbb
-   add %%check section
e4fdbb
-   add pth patch
e4fdbb
- Put back patch modified from 1.9.15-4 to make tests verbose
e4fdbb
  and change signal.c to describe received signals better.
e4fdbb
e4fdbb
* Sun May  8 2005 Michael Schwendt <mschwendt[AT]users.sf.net>
e4fdbb
- Drop patch0 again.
e4fdbb
e4fdbb
* Sun May  8 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.15-4
e4fdbb
- Add patch0 temporarily to get some output from failing test.
e4fdbb
e4fdbb
* Sat May  7 2005 David Woodhouse <dwmw2@infradead.org> 1.9.15-3
e4fdbb
- Rebuild.
e4fdbb
e4fdbb
* Thu Apr  7 2005 Michael Schwendt <mschwendt[AT]users.sf.net>
e4fdbb
- rebuilt
e4fdbb
e4fdbb
* Tue Feb  1 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:1.9.15-1
e4fdbb
- Make install-info in scriptlets less noisy.
e4fdbb
e4fdbb
* Tue Jan 18 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.15-0.fdr.1
e4fdbb
- 1.9.15
e4fdbb
e4fdbb
* Fri Jan 07 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.14-0.fdr.2
e4fdbb
- note patch/hack to build against older ( <1.0) libgpg-error-devel
e4fdbb
e4fdbb
* Thu Jan 06 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.14-0.fdr.1
e4fdbb
- 1.9.14
e4fdbb
- enable opensc support
e4fdbb
- BR: libassuan-devel >= 0.6.9
e4fdbb
e4fdbb
* Thu Oct 21 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.4
e4fdbb
- remove suid.
e4fdbb
e4fdbb
* Thu Oct 21 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.3
e4fdbb
- remove Provides: newpg
e4fdbb
e4fdbb
* Wed Oct 20 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.2
e4fdbb
- Requires: pinentry
e4fdbb
- gpg2 suid
e4fdbb
- update description
e4fdbb
e4fdbb
* Tue Oct 19 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.1
e4fdbb
- first try
e4fdbb
- leave out opensc support (for now), enable --with-opensc
e4fdbb