748c79
%bcond_without unversioned_gpg
748c79
0c33c1
Summary: Utility for secure communication and data storage
0c33c1
Name:    gnupg2
748c79
Version: 2.2.20
37efa4
Release: 3%{?dist}
0c33c1
0c33c1
License: GPLv3+
0c33c1
Source0: ftp://ftp.gnupg.org/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2
0c33c1
Source1: ftp://ftp.gnupg.org/gcrypt/%{?pre:alpha/}gnupg/gnupg-%{version}%{?pre}.tar.bz2.sig
0c33c1
Patch1:  gnupg-2.1.21-insttools.patch
0c33c1
# needed for compatibility with system FIPS mode
0c33c1
Patch3:  gnupg-2.1.10-secmem.patch
0c33c1
# non-upstreamable patch adding file-is-digest option needed for Copr
748c79
Patch4:  gnupg-2.2.20-file-is-digest.patch
748c79
# fix handling of missing key usage on ocsp replies - upstream T1333
748c79
Patch5:  gnupg-2.2.16-ocsp-keyusage.patch
0c33c1
Patch6:  gnupg-2.1.1-fips-algo.patch
0c33c1
# allow 8192 bit RSA keys in keygen UI with large RSA
0c33c1
Patch9:  gnupg-2.1.21-large-rsa.patch
748c79
# fix missing uid on refresh from keys.openpgp.org
748c79
# https://salsa.debian.org/debian/gnupg2/commit/f292beac1171c6c77faf41d1f88c2e0942ed4437
748c79
Patch20: gnupg-2.2.18-tests-add-test-cases-for-import-without-uid.patch
748c79
Patch21: gnupg-2.2.18-gpg-allow-import-of-previously-known-keys-even-without-UI.patch
748c79
Patch22: gnupg-2.2.18-gpg-accept-subkeys-with-a-good-revocation-but-no-self-sig.patch
37efa4
Patch23: gnupg-2.2.20-CVE-2022-34903.patch
748c79
# Fixes for issues found in Coverity scan - reported upstream
748c79
Patch30: gnupg-2.2.20-coverity.patch
748c79
0c33c1
0c33c1
URL:     http://www.gnupg.org/
0c33c1
0c33c1
#BuildRequires: automake libtool texinfo transfig
0c33c1
BuildRequires: gcc
0c33c1
BuildRequires: bzip2-devel
0c33c1
BuildRequires: curl-devel
0c33c1
BuildRequires: docbook-utils
0c33c1
BuildRequires: gettext
0c33c1
BuildRequires: libassuan-devel >= 2.1.0
0c33c1
BuildRequires: libgcrypt-devel >= 1.7.0
0c33c1
BuildRequires: libgpg-error-devel >= 1.31
0c33c1
BuildRequires: libksba-devel >= 1.3.0
0c33c1
BuildRequires: openldap-devel
0c33c1
BuildRequires: libusb-devel
0c33c1
BuildRequires: pcsc-lite-libs
0c33c1
BuildRequires: npth-devel
0c33c1
BuildRequires: readline-devel ncurses-devel
0c33c1
BuildRequires: zlib-devel
0c33c1
BuildRequires: gnutls-devel
0c33c1
BuildRequires: sqlite-devel
0c33c1
BuildRequires: fuse
0c33c1
0c33c1
Requires: libgcrypt >= 1.7.0
0c33c1
Requires: libgpg-error >= 1.31
0c33c1
0c33c1
Recommends: pinentry
0c33c1
0c33c1
Recommends: gnupg2-smime
0c33c1
748c79
%if %{with unversioned_gpg}
0c33c1
# pgp-tools, perl-GnuPG-Interface requires 'gpg' (not sure why) -- Rex
0c33c1
Provides: gpg = %{version}-%{release}
0c33c1
# Obsolete GnuPG-1 package
0c33c1
Provides: gnupg = %{version}-%{release}
0c33c1
Obsoletes: gnupg <= 1.4.10
0c33c1
%endif
0c33c1
0c33c1
Provides: dirmngr = %{version}-%{release}
0c33c1
Obsoletes: dirmngr < 1.2.0-1
0c33c1
0c33c1
%{!?_pkgdocdir: %global _pkgdocdir %{_docdir}/%{name}-%{version}}
0c33c1
0c33c1
%package smime
0c33c1
Summary: CMS encryption and signing tool and smart card support for GnuPG
0c33c1
Requires: gnupg2 = %{version}-%{release}
0c33c1
0c33c1
0c33c1
%description
0c33c1
GnuPG is GNU's tool for secure communication and data storage.  It can
0c33c1
be used to encrypt data and to create digital signatures.  It includes
0c33c1
an advanced key management facility and is compliant with the proposed
0c33c1
OpenPGP Internet standard as described in RFC2440 and the S/MIME
0c33c1
standard as described by several RFCs.
0c33c1
0c33c1
GnuPG 2.0 is a newer version of GnuPG with additional support for
0c33c1
S/MIME.  It has a different design philosophy that splits
0c33c1
functionality up into several modules. The S/MIME and smartcard functionality
0c33c1
is provided by the gnupg2-smime package.
0c33c1
0c33c1
%description smime
0c33c1
GnuPG is GNU's tool for secure communication and data storage. This
0c33c1
package adds support for smart cards and S/MIME encryption and signing
0c33c1
to the base GnuPG package 
0c33c1
0c33c1
%prep
0c33c1
%setup -q -n gnupg-%{version}
0c33c1
748c79
%if %{with unversioned_gpg}
0c33c1
%patch1 -p1 -b .insttools
0c33c1
%endif
0c33c1
%patch3 -p1 -b .secmem
0c33c1
%patch4 -p1 -b .file-is-digest
0c33c1
%patch5 -p1 -b .keyusage
0c33c1
%patch6 -p1 -b .fips
0c33c1
%patch9 -p1 -b .large-rsa
0c33c1
748c79
%patch20 -p1 -b .test_missing_uid
748c79
%patch21 -p1 -b .prev_known_key
748c79
%patch22 -p1 -b .good_revoc
37efa4
%patch23 -p1 -b .CVE-2022-34903
748c79
748c79
%patch30 -p1 -b .coverity
748c79
0c33c1
# pcsc-lite library major: 0 in 1.2.0, 1 in 1.2.9+ (dlopen()'d in pcsc-wrapper)
0c33c1
# Note: this is just the name of the default shared lib to load in scdaemon,
0c33c1
# it can use other implementations too (including non-pcsc ones).
0c33c1
%global pcsclib %(basename $(ls -1 %{_libdir}/libpcsclite.so.? 2>/dev/null ) 2>/dev/null )
0c33c1
0c33c1
sed -i -e 's/"libpcsclite\.so"/"%{pcsclib}"/' scd/scdaemon.c
0c33c1
0c33c1
0c33c1
%build
0c33c1
0c33c1
%configure \
748c79
%if %{without unversioned_gpg}
0c33c1
  --enable-gpg-is-gpg2 \
0c33c1
%endif
0c33c1
  --disable-gpgtar \
0c33c1
  --disable-rpath \
0c33c1
  --enable-g13 \
0c33c1
  --enable-large-secmem
0c33c1
0c33c1
# need scratch gpg database for tests
0c33c1
mkdir -p $HOME/.gnupg
0c33c1
0c33c1
make %{?_smp_mflags}
0c33c1
0c33c1
0c33c1
%install
0c33c1
make install DESTDIR=%{buildroot} \
0c33c1
  INSTALL="install -p" \
0c33c1
  docdir=%{_pkgdocdir}
0c33c1
748c79
%if %{without unversioned_gpg}
0c33c1
# rename file conflicting with gnupg-1.x
0c33c1
rename gnupg.7 gnupg2.7 %{buildroot}%{_mandir}/man7/gnupg.7*
0c33c1
%endif
0c33c1
0c33c1
%find_lang %{name}
0c33c1
0c33c1
# gpgconf.conf
0c33c1
mkdir -p %{buildroot}%{_sysconfdir}/gnupg
0c33c1
touch %{buildroot}%{_sysconfdir}/gnupg/gpgconf.conf
0c33c1
0c33c1
# more docs
0c33c1
install -m644 -p AUTHORS NEWS THANKS TODO \
0c33c1
  %{buildroot}%{_pkgdocdir}
0c33c1
748c79
%if %{with unversioned_gpg}
0c33c1
# compat symlinks
0c33c1
ln -sf gpg %{buildroot}%{_bindir}/gpg2
0c33c1
ln -sf gpgv %{buildroot}%{_bindir}/gpgv2
0c33c1
ln -sf gpg.1 %{buildroot}%{_mandir}/man1/gpg2.1
0c33c1
ln -sf gpgv.1 %{buildroot}%{_mandir}/man1/gpgv2.1
0c33c1
ln -sf gnupg.7 %{buildroot}%{_mandir}/man7/gnupg2.7
0c33c1
%endif
0c33c1
0c33c1
# info dir
0c33c1
rm -f %{buildroot}%{_infodir}/dir
0c33c1
0c33c1
# drop the gpg scheme interpreter
0c33c1
rm -f %{buildroot}%{_bindir}/gpgscm
0c33c1
748c79
# Move the systemd user units to appropriate directory
748c79
install -d -m755 %{buildroot}%{_userunitdir}
748c79
mv %{buildroot}%{_pkgdocdir}/examples/systemd-user/*.socket %{buildroot}%{_userunitdir}
748c79
mv %{buildroot}%{_pkgdocdir}/examples/systemd-user/*.service %{buildroot}%{_userunitdir}
748c79
0c33c1
%check
0c33c1
# need scratch gpg database for tests
0c33c1
mkdir -p $HOME/.gnupg
0c33c1
make -k check
0c33c1
0c33c1
0c33c1
%files -f %{name}.lang
0c33c1
%{!?_licensedir:%global license %%doc}
0c33c1
%license COPYING
0c33c1
#doc AUTHORS NEWS README THANKS TODO
0c33c1
%{_pkgdocdir}
0c33c1
%dir %{_sysconfdir}/gnupg
0c33c1
%ghost %config(noreplace) %{_sysconfdir}/gnupg/gpgconf.conf
0c33c1
## docs say to install suid root, but fedora/rh security folk say not to
0c33c1
%{_bindir}/gpg2
0c33c1
%{_bindir}/gpgv2
0c33c1
%{_bindir}/gpg-connect-agent
0c33c1
%{_bindir}/gpg-agent
0c33c1
%{_bindir}/gpgconf
0c33c1
%{_bindir}/gpgparsemail
0c33c1
%{_bindir}/g13
0c33c1
%{_bindir}/dirmngr
0c33c1
%{_bindir}/dirmngr-client
748c79
%if %{with unversioned_gpg}
0c33c1
%{_bindir}/gpg
0c33c1
%{_bindir}/gpgv
0c33c1
%{_bindir}/gpgsplit
0c33c1
%{_bindir}/gpg-zip
0c33c1
%endif
0c33c1
%{_bindir}/watchgnupg
748c79
%{_bindir}/gpg-wks-server
0c33c1
%{_sbindir}/*
0c33c1
%{_datadir}/gnupg/
0c33c1
%{_libexecdir}/*
0c33c1
%{_infodir}/*.info*
0c33c1
%{_mandir}/man?/*
748c79
%{_userunitdir}/*
0c33c1
%exclude %{_mandir}/man?/gpgsm*
0c33c1
0c33c1
%files smime
0c33c1
%{_bindir}/gpgsm*
0c33c1
%{_bindir}/kbxutil
0c33c1
%{_mandir}/man?/gpgsm*
0c33c1
0c33c1
0c33c1
%changelog
37efa4
* Wed Aug 03 2022 Jakub Jelen <jjelen@redhat.com> - 2.2.20-3
37efa4
- Fix CVE-2022-34903 (#2108447)
37efa4
748c79
* Mon May  4 2020 Tomáš Mráz <tmraz@redhat.com> - 2.2.20-2
748c79
- fixes for issues found in Coverity scan
748c79
748c79
* Thu Apr 30 2020 Tomáš Mráz <tmraz@redhat.com> - 2.2.20-1
748c79
- upgrade to 2.2.20
748c79
0c33c1
* Wed Aug  1 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.9-1
0c33c1
- upgrade to 2.2.9
0c33c1
0c33c1
* Mon Jun 11 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.8-1
0c33c1
- upgrade to 2.2.8 fixing CVE 2018-12020
0c33c1
0c33c1
* Wed Apr 11 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.6-1
0c33c1
- upgrade to 2.2.6
0c33c1
0c33c1
* Fri Mar  2 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.5-1
0c33c1
- upgrade to 2.2.5
0c33c1
0c33c1
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 2.2.4-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
0c33c1
0c33c1
* Fri Jan 12 2018 Tomáš Mráz <tmraz@redhat.com> - 2.2.4-1
0c33c1
- upgrade to 2.2.4
0c33c1
0c33c1
* Tue Nov 21 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.3-1
0c33c1
- upgrade to 2.2.3
0c33c1
0c33c1
* Wed Nov  8 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.2-1
0c33c1
- upgrade to 2.2.2
0c33c1
0c33c1
* Tue Oct  3 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.1-1
0c33c1
- upgrade to 2.2.1
0c33c1
0c33c1
* Tue Sep  5 2017 Tomáš Mráz <tmraz@redhat.com> - 2.2.0-1
0c33c1
- upgrade to 2.2.0
0c33c1
0c33c1
* Wed Aug  9 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.22-1
0c33c1
- upgrade to 2.1.22
0c33c1
0c33c1
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.21-5
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
0c33c1
0c33c1
* Fri Jul 28 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-4
0c33c1
- explictly remove gpgscm from the buildroot
0c33c1
0c33c1
* Tue Jul 18 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-3
0c33c1
- rebase the insttools patch
0c33c1
- enable large secure memory support
0c33c1
0c33c1
* Tue May 16 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-2
0c33c1
- scdaemon is now needed by gpg
0c33c1
0c33c1
* Tue May 16 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.21-1
0c33c1
- upgrade to 2.1.21
0c33c1
0c33c1
* Tue Apr 25 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.20-2
0c33c1
- libdns aliasing issues fixed
0c33c1
0c33c1
* Mon Apr 24 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.20-1
0c33c1
- upgrade to 2.1.20
0c33c1
- disable bundled libdns for now (#1444352)
0c33c1
0c33c1
* Fri Mar 24 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.19-1
0c33c1
- upgrade to 2.1.19
0c33c1
- shorten time waiting on gpg-agent/dirmngr to start by exponential
0c33c1
  backoff (#1431749)
0c33c1
0c33c1
* Wed Mar  1 2017 Tomáš Mráz <tmraz@redhat.com> - 2.1.18-2
0c33c1
- upgrade to 2.1.18
0c33c1
0c33c1
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.17-3
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
0c33c1
0c33c1
* Thu Jan 12 2017 Igor Gnatenko <ignatenko@redhat.com> - 2.1.17-2
0c33c1
- Rebuild for readline 7.x
0c33c1
0c33c1
* Thu Dec 22 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.17-1
0c33c1
- upgrade to 2.1.17
0c33c1
0c33c1
* Mon Nov 28 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.16-1
0c33c1
- upgrade to 2.1.16
0c33c1
0c33c1
* Mon Aug 22 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.13-2
0c33c1
- avoid using libgcrypt without initialization (#1366909)
0c33c1
0c33c1
* Tue Jul 12 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.13-1
0c33c1
- upgrade to 2.1.13
0c33c1
0c33c1
* Thu May  5 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.12-1
0c33c1
- upgrade to 2.1.12
0c33c1
0c33c1
* Tue Apr 12 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.11-4
0c33c1
- make the pinentry dependency weak as for the public-key operations it
0c33c1
  is not needed (#1324595)
0c33c1
0c33c1
* Mon Mar  7 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.11-3
0c33c1
- add recommends weak dependency for gnupg2-smime
0c33c1
0c33c1
* Sat Mar  5 2016 Peter Robinson <pbrobinson@fedoraproject.org> 2.1.11-2
0c33c1
- Don't ship ChangeLog, core details already covered in NEWS
0c33c1
0c33c1
* Tue Feb 16 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.11-1
0c33c1
- upgrade to 2.1.11
0c33c1
0c33c1
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.10-4
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
0c33c1
0c33c1
* Wed Jan 13 2016 Dan Horák <dan[at]danny.cz> - 2.1.10-3
0c33c1
- fix the insttools patch
0c33c1
0c33c1
* Wed Jan 13 2016 Tomáš Mráz <tmraz@redhat.com> - 2.1.10-2
0c33c1
- rebase the insttools patch needed for full gpgv1 replacement
0c33c1
0c33c1
* Mon Dec  7 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.10-1
0c33c1
- upgrade to 2.1.10
0c33c1
0c33c1
* Mon Oct 12 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.9-1
0c33c1
- upgrade to 2.1.9
0c33c1
0c33c1
* Fri Sep 11 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.8-1
0c33c1
- upgrade to 2.1.8
0c33c1
0c33c1
* Thu Aug 13 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.7-1
0c33c1
- upgrade to 2.1.7
0c33c1
0c33c1
* Tue Aug 11 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.6-1
0c33c1
- upgrade to 2.1.6
0c33c1
0c33c1
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.5-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
0c33c1
0c33c1
* Fri Jun 12 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.5-1
0c33c1
- upgrade to 2.1.5
0c33c1
0c33c1
* Tue May 26 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.4-2
0c33c1
- use gnutls for TLS support in dirmngr (#1224816)
0c33c1
0c33c1
* Fri May 15 2015 Robert Scheck <robert@fedoraproject.org> - 2.1.4-1
0c33c1
- upgrade to 2.1.4 (#1192353)
0c33c1
0c33c1
* Thu Apr 16 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.3-1
0c33c1
- new upstream release fixing minor bugs
0c33c1
0c33c1
* Sat Feb 21 2015 Till Maas <opensource@till.name> - 2.1.2-2
0c33c1
- Rebuilt for Fedora 23 Change
0c33c1
  https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code
0c33c1
0c33c1
* Wed Feb 18 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.2-1
0c33c1
- new upstream release fixing two minor security issues
0c33c1
0c33c1
* Fri Jan 30 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.1-2
0c33c1
- resolve conflict with gnupg by renaming conflicting manual page (#1187472)
0c33c1
0c33c1
* Thu Jan 29 2015 Tomáš Mráz <tmraz@redhat.com> - 2.1.1-1
0c33c1
- new upstream release
0c33c1
- this release now includes the dirmngr which is obsoleted as separate package
0c33c1
0c33c1
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.25-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
0c33c1
0c33c1
* Tue Aug  5 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.25-1
0c33c1
- new upstream release fixing a minor regression introduced by the previous one
0c33c1
- add --file-is-digest option needed for copr
0c33c1
0c33c1
* Sat Jul 12 2014 Tom Callaway <spot@fedoraproject.org> - 2.0.24-2
0c33c1
- fix license handling
0c33c1
0c33c1
* Wed Jun 25 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.24-1
0c33c1
- new upstream release fixing CVE-2014-4617
0c33c1
0c33c1
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.22-4
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
0c33c1
0c33c1
* Wed May  7 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-3
0c33c1
- do not dump core if hash algorithm not available in the FIPS mode
0c33c1
0c33c1
* Tue Mar  4 2014 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-2
0c33c1
- rebuilt against new libgcrypt
0c33c1
0c33c1
* Tue Oct  8 2013 Tomáš Mráz <tmraz@redhat.com> - 2.0.22-1
0c33c1
- new upstream release fixing CVE-2013-4402
0c33c1
0c33c1
* Fri Aug 23 2013 Tomáš Mráz <tmraz@redhat.com> - 2.0.21-1
0c33c1
- new upstream release
0c33c1
0c33c1
* Wed Aug  7 2013 Tomas Mraz <tmraz@redhat.com> - 2.0.20-3
0c33c1
- adjust to the unversioned docdir change (#993785)
0c33c1
0c33c1
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.20-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
0c33c1
0c33c1
* Wed May 15 2013 Tomas Mraz <tmraz@redhat.com> - 2.0.20-1
0c33c1
- new upstream release
0c33c1
0c33c1
* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.19-8
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
0c33c1
0c33c1
* Wed Jan  2 2013 Tomas Mraz <tmraz@redhat.com> - 2.0.19-7
0c33c1
- fix CVE-2012-6085 - skip invalid key packets (#891142)
0c33c1
0c33c1
* Thu Nov 22 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-6
0c33c1
- use AES as default crypto algorithm in FIPS mode (#879047)
0c33c1
0c33c1
* Fri Nov 16 2012 Jamie Nguyen <jamielinux@fedoraproject.org> - 2.0.19-5
0c33c1
- rebuild for 
0c33c1
0c33c1
* Fri Jul 27 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-4
0c33c1
- fix negated condition (#843842)
0c33c1
0c33c1
* Thu Jul 26 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-3
0c33c1
- add compat symlinks and provides if built on RHEL
0c33c1
0c33c1
* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.19-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
0c33c1
0c33c1
* Tue Apr 24 2012 Tomas Mraz <tmraz@redhat.com> - 2.0.19-1
0c33c1
- new upstream release
0c33c1
- set environment in protect-tool (#548528)
0c33c1
- do not reject OCSP signing certs without keyUsage (#720174)
0c33c1
0c33c1
* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.18-3
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
0c33c1
0c33c1
* Wed Oct 12 2011 Rex Dieter <rdieter@fedoraproject.org> 2.0.18-2
0c33c1
- build with --enable-standard-socket
0c33c1
0c33c1
* Wed Aug 17 2011 Tomas Mraz <tmraz@redhat.com> - 2.0.18-1
0c33c1
- new upstream release (#728481)
0c33c1
0c33c1
* Mon Jul 25 2011 Tomas Mraz <tmraz@redhat.com> - 2.0.17-2
0c33c1
- fix a bug that shows up with the new libgcrypt release (#725369)
0c33c1
0c33c1
* Thu Jan 20 2011 Tomas Mraz <tmraz@redhat.com> - 2.0.17-1
0c33c1
- new upstream release (#669611)
0c33c1
0c33c1
* Tue Aug 17 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.16-3
0c33c1
- drop the provides/obsoletes for gnupg
0c33c1
- drop the man page file conflicting with gnupg-1.x
0c33c1
0c33c1
* Fri Aug 13 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.16-2
0c33c1
- drop the compat symlinks as gnupg-1.x is revived
0c33c1
0c33c1
* Tue Jul 27 2010 Rex Dieter <rdieter@fedoraproject.org> - 2.0.16-1
0c33c1
- gnupg-2.0.16
0c33c1
0c33c1
* Fri Jul 23 2010 Rex Dieter <rdieter@fedoraproject.org> - 2.0.14-4
0c33c1
- gpgsm realloc patch (#617706)
0c33c1
0c33c1
* Fri Jun 18 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.14-3
0c33c1
- initialize small amount of secmem for list of algorithms in help (#598847)
0c33c1
  (necessary in the FIPS mode of libgcrypt)
0c33c1
0c33c1
* Tue Feb  9 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.14-2
0c33c1
- disable selinux support - it is too rudimentary and restrictive (#562982)
0c33c1
0c33c1
* Mon Jan 11 2010 Tomas Mraz <tmraz@redhat.com> - 2.0.14-1
0c33c1
- new upstream version
0c33c1
- fix a few tests so they do not need to execute gpg-agent
0c33c1
0c33c1
* Tue Dec  8 2009 Michael Schwendt <mschwendt@fedoraproject.org> - 2.0.13-4
0c33c1
- Explicitly BR libassuan-static in accordance with the Packaging
0c33c1
  Guidelines (libassuan-devel is still static-only).
0c33c1
0c33c1
* Fri Oct 23 2009 Tomas Mraz <tmraz@redhat.com> - 2.0.13-3
0c33c1
- drop s390 specific ifnarchs as all the previously missing dependencies
0c33c1
  are now there
0c33c1
- split out gpgsm into a smime subpackage to reduce main package dependencies
0c33c1
0c33c1
* Wed Oct 21 2009 Tomas Mraz <tmraz@redhat.com> - 2.0.13-2
0c33c1
- provide/obsolete gnupg-1 and add compat symlinks to be able to drop
0c33c1
  gnupg-1
0c33c1
0c33c1
* Fri Sep 04 2009 Rex Dieter <rdieter@fedoraproject.org> - 2.0.13-1
0c33c1
- gnupg-2.0.13
0c33c1
- Unable to use gpg-agent + input methods (#228953)
0c33c1
0c33c1
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.12-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
0c33c1
0c33c1
* Wed Jun 17 2009 Rex Dieter <rdieter@fedoraproject.org> - 2.0.12-1
0c33c1
- gnupg-2.0.12
0c33c1
0c33c1
* Wed Mar 04 2009 Rex Dieter <rdieter@fedoraproject.org> - 2.0.11-1
0c33c1
- gnupg-2.0.11
0c33c1
0c33c1
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.0.10-2
0c33c1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
0c33c1
0c33c1
* Sat Jan 31 2009 Karsten Hopp <karsten@redhat.com> 2.0.10-1
0c33c1
- don't require pcsc-lite-libs and libusb on mainframe where
0c33c1
  we don't have those packages as there's no hardware for that
0c33c1
0c33c1
* Tue Jan 13 2009 Rex Dieter <rdieter@fedoraproject.org> 2.0.10-1
0c33c1
- gnupg-2.0.10
0c33c1
0c33c1
* Mon Aug 04 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.9-3
0c33c1
- workaround rpm quirks 
0c33c1
0c33c1
* Sat May 24 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.0.9-2
0c33c1
- Patch from upstream to fix curl 7.18.1+ and gcc4.3+ compile error
0c33c1
0c33c1
* Mon May 19 2008 Tom "spot" Callaway <tcallawa@redhat.com> 2.0.9-1.1
0c33c1
- minor release bump for sparc rebuild
0c33c1
0c33c1
* Wed Mar 26 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.9-1
0c33c1
- gnupg2-2.0.9
0c33c1
- drop Provides: openpgp
0c33c1
- versioned Provides: gpg
0c33c1
- own %%_sysconfdir/gnupg
0c33c1
0c33c1
* Fri Feb 08 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.8-3 
0c33c1
- respin (gcc43)
0c33c1
0c33c1
* Wed Jan 23 2008 Rex Dieter <rdieter@fedoraproject.org> 2.0.8-2
0c33c1
- avoid kde-filesystem dep (#427316)
0c33c1
0c33c1
* Thu Dec 20 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.8-1
0c33c1
- gnupg2-2.0.8
0c33c1
0c33c1
* Mon Dec 17 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.8-0.1.rc1
0c33c1
- gnupg2-2.0.8rc1
0c33c1
0c33c1
* Tue Dec 04 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-5
0c33c1
- respin for openldap
0c33c1
0c33c1
* Mon Nov 12 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-4
0c33c1
- Requires: kde-filesystem (#377841)
0c33c1
0c33c1
* Wed Oct 03 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-3
0c33c1
- %%build: (re)add mkdir -p $HOME/.gnupg
0c33c1
0c33c1
* Wed Oct 03 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-2
0c33c1
- Requires: dirmngr (#312831)
0c33c1
0c33c1
* Mon Sep 10 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.7-1
0c33c1
- gnupg-2.0.7
0c33c1
0c33c1
* Fri Aug 24 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.6-2
0c33c1
- respin (libassuan)
0c33c1
0c33c1
* Thu Aug 16 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.6-1
0c33c1
- gnupg-2.0.6
0c33c1
- License: GPLv3+
0c33c1
0c33c1
* Thu Aug 02 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-4
0c33c1
- License: GPLv3
0c33c1
0c33c1
* Mon Jul 16 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-3
0c33c1
- 2.0.5 too many open files fix
0c33c1
0c33c1
* Fri Jul 06 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.5-2
0c33c1
- gnupg-2.0.5
0c33c1
- gpg-agent not restarted after kde session crash/killed (#196327)
0c33c1
- BR: libassuan-devel > 1.0.2, libksba-devel > 1.0.2
0c33c1
0c33c1
* Fri May 18 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.4-1
0c33c1
- gnupg-2.0.4
0c33c1
0c33c1
* Thu Mar 08 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.3-1
0c33c1
- gnupg-2.0.3
0c33c1
0c33c1
* Fri Feb 02 2007 Rex Dieter <rdieter[AT]fedoraproject.org> 2.0.2-1
0c33c1
- gnupg-2.0.2
0c33c1
0c33c1
* Wed Dec 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-2
0c33c1
- CVE-2006-6235 (#219934)
0c33c1
0c33c1
* Wed Nov 29 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-1
0c33c1
- gnupg-2.0.1
0c33c1
- CVE-2006-6169 (#217950)
0c33c1
0c33c1
* Sat Nov 25 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.1-0.3.rc1
0c33c1
- gnupg-2.0.1rc1 
0c33c1
0c33c1
* Thu Nov 16 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.0-4
0c33c1
- update %%description
0c33c1
- drop dearmor patch
0c33c1
0c33c1
* Mon Nov 13 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.0-3
0c33c1
- BR: libassuan-static >= 1.0.0
0c33c1
0c33c1
* Mon Nov 13 2006 Rex Dieter <rexdieter[AT]users.sf.net> 2.0.0-2
0c33c1
- gnupg-2.0.0
0c33c1
0c33c1
* Fri Nov 10 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.95-3
0c33c1
- upstream 64bit patch
0c33c1
0c33c1
* Mon Nov 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.95-2
0c33c1
- fix (more) file conflicts with gnupg
0c33c1
0c33c1
* Mon Nov 06 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.95-1
0c33c1
- 1.9.95
0c33c1
0c33c1
* Wed Oct 25 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.94-1
0c33c1
- 1.9.94
0c33c1
0c33c1
* Wed Oct 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.93-1
0c33c1
- 1.9.93
0c33c1
0c33c1
* Wed Oct 11 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.92-2
0c33c1
- fix file conflicts with gnupg
0c33c1
0c33c1
* Wed Oct 11 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.92-1
0c33c1
- 1.9.92
0c33c1
0c33c1
* Tue Oct 10 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.91-4
0c33c1
- make check ||: (apparently checks return err even on success?)
0c33c1
0c33c1
* Tue Oct 10 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.91-3
0c33c1
- --enable-selinux-support
0c33c1
- x86_64: --disable-optimization (to avoid gpg2 segfaults), for now
0c33c1
0c33c1
* Thu Oct 05 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.91-1
0c33c1
- 1.9.91
0c33c1
0c33c1
* Wed Oct 04 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-8
0c33c1
- respin
0c33c1
0c33c1
* Tue Sep 26 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.90-1
0c33c1
- 1.9.90 (doesn't build, not released)
0c33c1
0c33c1
* Mon Sep 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.23-1
0c33c1
- 1.9.23 (doesn't build, not released)
0c33c1
0c33c1
* Mon Sep 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-7
0c33c1
- gpg-agent-startup.sh: fix case where valid .gpg-agent-info exists
0c33c1
0c33c1
* Mon Sep 18 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-6
0c33c1
- fix "syntax error in gpg-agent-startup.sh" (#206887)
0c33c1
0c33c1
* Thu Sep 07 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-3
0c33c1
- fc6 respin (for libksba-1.0)
0c33c1
0c33c1
* Tue Aug 29 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-2
0c33c1
- fc6 respin
0c33c1
0c33c1
* Fri Jul 28 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.22-1
0c33c1
- 1.9.22
0c33c1
0c33c1
* Thu Jun 22 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.21-3
0c33c1
- fix "gpg-agent not restarted after kde session crash/killed (#196327)
0c33c1
0c33c1
* Thu Jun 22 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.21-2
0c33c1
- 1.9.21
0c33c1
- omit gpg2 binary to address CVS-2006-3082 (#196190)
0c33c1
0c33c1
* Mon Mar  6 2006 Ville Skyttä <ville.skytta at iki.fi>> 1.9.20-3
0c33c1
- Don't hardcode pcsc-lite lib name (#184123)
0c33c1
0c33c1
* Thu Feb 16 2006 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.20-2
0c33c1
- fc4+: use /etc/kde/(env|shutdown) for scripts (#175744)
0c33c1
0c33c1
* Fri Feb 10 2006 Rex Dieter <rexdieter[AT]users.sf.net>
0c33c1
- fc5: gcc/glibc respin
0c33c1
0c33c1
* Tue Dec 20 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.20-1
0c33c1
- 1.9.20
0c33c1
0c33c1
* Thu Dec 01 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-8
0c33c1
- include gpg-agent-(startup|shutdown) scripts (#136533)
0c33c1
- BR: libksba-devel >= 1.9.12 
0c33c1
- %%check: be permissive about failures (for now)
0c33c1
0c33c1
* Wed Nov 30 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-3
0c33c1
- BR: libksba-devel >= 1.9.13
0c33c1
0c33c1
* Tue Oct 11 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-2
0c33c1
- back to BR: libksba-devel = 1.9.11
0c33c1
0c33c1
* Tue Oct 11 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.19-1
0c33c1
- 1.9.19
0c33c1
0c33c1
* Fri Aug 26 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-9
0c33c1
- configure: NEED_KSBA_VERSION=0.9.12 -> 0.9.11
0c33c1
0c33c1
* Fri Aug 26 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-7
0c33c1
- re-enable 'make check', rebuild against (older) libksba-0.9.11
0c33c1
0c33c1
* Tue Aug  9 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-6
0c33c1
- don't 'make check' by default (regular builds pass, but FC4/5+plague fails)
0c33c1
0c33c1
* Mon Aug  8 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.18-5
0c33c1
- 1.9.18
0c33c1
- drop pth patch (--enable-gpg build fixed)
0c33c1
- update description (from README)
0c33c1
0c33c1
* Fri Jul  1 2005 Ville Skyttä <ville.skytta at iki.fi> - 1.9.17-1
0c33c1
- 1.9.17, signal info patch applied upstream (#162264).
0c33c1
- Patch to fix lvalue build error with gcc4 (upstream #485).
0c33c1
- Patch scdaemon and pcsc-wrapper to load the versioned (non-devel)
0c33c1
  pcsc-lite lib by default.
0c33c1
0c33c1
* Fri May 13 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-3
0c33c1
- Include upstream's patch for signal.c.
0c33c1
0c33c1
* Tue May 10 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.16-1
0c33c1
- Merge changes from Rex's 1.9.16-1 (Thu Apr 21):
0c33c1
-   opensc support unconditional
0c33c1
-   remove hard-coded .gz from %%post/%%postun
0c33c1
-   add %%check section
0c33c1
-   add pth patch
0c33c1
- Put back patch modified from 1.9.15-4 to make tests verbose
0c33c1
  and change signal.c to describe received signals better.
0c33c1
0c33c1
* Sun May  8 2005 Michael Schwendt <mschwendt[AT]users.sf.net>
0c33c1
- Drop patch0 again.
0c33c1
0c33c1
* Sun May  8 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 1.9.15-4
0c33c1
- Add patch0 temporarily to get some output from failing test.
0c33c1
0c33c1
* Sat May  7 2005 David Woodhouse <dwmw2@infradead.org> 1.9.15-3
0c33c1
- Rebuild.
0c33c1
0c33c1
* Thu Apr  7 2005 Michael Schwendt <mschwendt[AT]users.sf.net>
0c33c1
- rebuilt
0c33c1
0c33c1
* Tue Feb  1 2005 Michael Schwendt <mschwendt[AT]users.sf.net> - 0:1.9.15-1
0c33c1
- Make install-info in scriptlets less noisy.
0c33c1
0c33c1
* Tue Jan 18 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.15-0.fdr.1
0c33c1
- 1.9.15
0c33c1
0c33c1
* Fri Jan 07 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.14-0.fdr.2
0c33c1
- note patch/hack to build against older ( <1.0) libgpg-error-devel
0c33c1
0c33c1
* Thu Jan 06 2005 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.14-0.fdr.1
0c33c1
- 1.9.14
0c33c1
- enable opensc support
0c33c1
- BR: libassuan-devel >= 0.6.9
0c33c1
0c33c1
* Thu Oct 21 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.4
0c33c1
- remove suid.
0c33c1
0c33c1
* Thu Oct 21 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.3
0c33c1
- remove Provides: newpg
0c33c1
0c33c1
* Wed Oct 20 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.2
0c33c1
- Requires: pinentry
0c33c1
- gpg2 suid
0c33c1
- update description
0c33c1
0c33c1
* Tue Oct 19 2004 Rex Dieter <rexdieter[AT]users.sf.net> 1.9.11-0.fdr.1
0c33c1
- first try
0c33c1
- leave out opensc support (for now), enable --with-opensc
0c33c1