[Nix-dev] Fwd: gnupg2 gpg-agent instead of gnome-keyring

[Luca Bruno]

Fowarding this email that is relevant for distros, someone may be
interested in it.


-------- Original Message --------
Subject: 	gnupg2 gpg-agent instead of gnome-keyring
Date: 	Mon, 3 Aug 2015 10:10:08 +0200
From: 	Stef Walter <stefw at gnome.org>
To: 	distributor-list at gnome.org, desktop-devel-list
<desktop-devel-list at gnome.org>, "gnome-keyring-list at gnome.org"
<gnome-keyring-list at gnome.org>



gnome-keyring will no longer contain a gpg-agent in the future. GnuPG
treats its agent as an integral part of gpg2, and shouldn't be
reimplemented in various places.

This unbreaks use of gnupg2 with GNOME, as well as some issues with
using smart cards with gpg.

Neal and also Yuuma have done good work integrating gnome-shell
prompting and libsecret into the gnupg2 pinentry program. So you'll
still see similar prompts, and be able to cache passphrases if desired.

The gpg-agent is started automatically by gpg2 on demand.

One issue with this that it looks like only gpg2 is supported by this
new setup. The changes don't work with the older GnuPG 1.4.x series.

Releases required for the new setup:

 * gnome-keyring without the gpg-agent 3.17.4
 * pinentry 0.9.5
 * gnupg 2.1.6

The distribution that ships GNOME and gnupg2 should setup
/usr/bin/pinentry-gnome3 as the default pinentry program.

Cheers,

Stef
_______________________________________________
distributor-list mailing list
distributor-list at gnome.org
https://mail.gnome.org/mailman/listinfo/distributor-list



-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.science.uu.nl/pipermail/nix-dev/attachments/20150803/8da93578/attachment.html