On 2025-01-08 Jonathan McDowell <nood...@earth.li> wrote:
> On Tue, Jan 07, 2025 at 07:01:51PM +0100, Andreas Metzler wrote:
[...]

>> Should we move to 2.4? 2.4 is not a LTS release and will also EOL in
>> trixie' soon (2026-06-30). 

> I haven't been fully following the GnuPG situation, but did the
> situation where 2.4 would generate v4 keys that weren't fully compatible
> with the wider ecosystem get solved? Is the patch RedHat et al are
> carrying sufficient for that?

Hello,

I asked about gnupg2-revert-rfc4880bis.patch on the Debian gnupg list, it
is not sufficient and not really to the point,
https://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/2024-February/009217.html

We have used these two patches instead
https://salsa.debian.org/debian/gnupg2/-/blob/debian/experimental/debian/patches/update-defaults/gpg-Do-not-set-OCB-key-preference.diff
https://salsa.debian.org/debian/gnupg2/-/blob/debian/experimental/debian/patches/update-defaults/gpg-encrypt-disrespect-OCB-key-preference.diff
which are needed for 2.2.x nowadays, too.

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'

Reply via email to