-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 13 Sep 2016 13:37:50 -0400 Source: monkeysign Binary: monkeysign monkeysign-doc Architecture: source all Version: 2.1.0 Distribution: unstable Urgency: medium Maintainer: Antoine Beaupré <anarcat@debian.org> Changed-By: Antoine Beaupré <anarcat@debian.org> Description: monkeysign - OpenPGP key signing and exchange for humans monkeysign-doc - OpenPGP key signing and exchange for humans (documentation) Closes: 720050 721599 723152 723154 736548 736629 766129 773896 833605 Changes: monkeysign (2.1.0) unstable; urgency=medium . * new minor release for new features and lots of bugfixes, outline: * GnuPG 2.1 support * better handling of corner cases (revoked or expired key material, large webcams) and better error messages) * better SMTP support (no cleartext, SSMTP) * move everything to 0xACAB.org to ease collaboration * expand and convert documentation to reStructured Text and ship it in a -doc package * command to sendmail customizable through --mta (message piped through stdin) or --mua (encrypted key attached on the commandline) * space-separated fingerprints allowed for -u, which means -u needs to be separated from the signed fingerprint with -- now * configuration file support, which is written with --save * crude preferences window in GUI * detailed changelog below - this is the result of 2 years of work! . [ Antoine Beaupré ] * import my personal key renewal to unbreak tests * import zack's key renewal * forbid sending passphrase in cleartext * better explain that STARTTLS is used * SSMTP support * port to argparse, which somewhat broke the manpages * allow space-separated fingerprints for -u (Closes: #720050) * MUA support * make sendmail command customizable through --mta * make copy-paste message encrypted (Closes: #833605) * handle improperly encoded UIDs (Closes: #736629) * copy public keys for all secret keys found (Closes: #721599) * skip keys without uids (Closes: #723152) * set a size for the webcam to avoid too large videos (Closes: #723154) * add more tests for signing revoked uids * add unit test for expired subkeys * accommodate gitlab's naming conventions * move to 0xacab.org for issues, removing bugs-everywhere * convert markdown documents to RST * merge the website in the main documentation * expand documentation: support schedule, semantic versioning, PyPI, etc * update urls for openkeychain, mark as compatible * reshuffle test suite so we make sure it tests the local code * style fixes * fix a transient error in unit tests * mention tests need a unicode locale * fix monkeysign detection in source dir * detect revoked keys and do not use them to sign keys (Closes: #766129, #773896) * fix lintian warning by specifying copyright version * don't try to remove non-existent video device, and clarify error message * output --version to stdout and don't make it an error * properly raise exceptions when copying gpg.conf fails * make sure ui calling sequence is correct in sign_key * use ttyname instead of the tty command * fix potential vulnerability in msgfmt parser * review code for security issues with bandit * handle missing MTA better, see 0xACAB #39 * use full path to sendmail, see 0xACAB #39 * clarify that without smtp, we use the default --mta * fix whitespace issues in revoked patches * add new trust state, `empty` * properly fetch secret key material everywhere * seek out secret keys first * properly show output of runtime errors * include standard debugging information on backtrace * add hook to show detailed version information in reportbug (see 0xACAB #39) * always enable --verbose when --debug is enabled * configuration file support, which is written with --save * crude preferences window in GUI . [ Kristian Fiskerstrand ] * ui.py: Make sure to use smtplib namespace . [ Tobias Mueller ] * Calculated whether a key has expired based on the parsed expiry * gpg: Added a __repr__ for UIDs * gpg: Added a __repr__ for OpenPGPKeys * Added GnuPG 2.1 compatibility reg. its colon output * gpg: Fixed up the key parsing for secret keys * gpg: Make a full datetime, instead of epoch, for expiry * msgfmt: Increase Python3 compatibility by removing "L" suffix * translation: Use print() for increased python3 compatibility * gpg: Implemented revoked for OpenPGP Keys * gpg: Implemented revoked for OpenPGP UIDs . [ Daniel Kahn Gillmor ] * use new-style gbp.conf * make monkeysign build reproducibly . [ Michael R. Lawrence ] * Translated using Weblate (Italian) * Translated using Weblate (French) . [ Michal Čihař ] * Translated using Weblate (Czech) . [ Ahmed El Azzabi ] * Translated using Weblate (French) . [ Gonzalo Exequiel Pedone ] * Translated using Weblate (Spanish) . [ Jerome Charaoui ] * Remove bugseverwhere data and migrate issues to 0xacab.org * Ignore irrelevant gpg errors (Closes: #736548) . [ Ramakrishnan Muthukrishnan ] * Improve the error message when signing an already signed key. * improve unit tests for already signed keys and keep previous check . [ emma peel ] * various improvements to the documentation Checksums-Sha1: 6b2e1fc43a4bb1c7d398427ae5d693407f1dc5b7 1809 monkeysign_2.1.0.dsc e210835bd3b8dc957ad5a86f78e06df2fabc3104 1136008 monkeysign_2.1.0.tar.xz e84a363967c6e641a854e3ffef8971173cb5efb8 923770 monkeysign-doc_2.1.0_all.deb 008c4a34aa1330895aec8e5581fe83f389ff8ece 74178 monkeysign_2.1.0_all.deb Checksums-Sha256: 3ff1dfae6787f999a6ae113bf83b7b2c4727ab0067df588fa4713450f16099d6 1809 monkeysign_2.1.0.dsc c33b3f3b377b678d6a71b99a3fb75746732aac894aa383e16eabaffe1c3996d5 1136008 monkeysign_2.1.0.tar.xz 6c4ae18f852c32e30ccd7537be24752a736bb388295c63713490ecf1536dd1be 923770 monkeysign-doc_2.1.0_all.deb b4f44c13729ef1d011dd357bbd3429315e00174437cdfe3bd1d726e2c4b29baf 74178 monkeysign_2.1.0_all.deb Files: f90a8ba674c54b1bc8918d26eb388ad9 1809 utils optional monkeysign_2.1.0.dsc ee97def95294a36fb611968f129f633c 1136008 utils optional monkeysign_2.1.0.tar.xz 8aeff55a4442fff1b4065fa5b7a1878f 923770 doc optional monkeysign-doc_2.1.0_all.deb a526b1411f3630d197dedb8a0e2713d5 74178 utils optional monkeysign_2.1.0_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJX6TdgAAoJEHkhUlJ7dZIeiJgP/2hmDhQzaEKfa6vmf7pU5nVZ 2aZG4sLOfMMPFhQFwo7BGHb9wfGNOjzF+yFkEBZqFXtxACD7OsSxFHRFK/Pqxknt VQ4vkDJeBSxQQBo/wx8fvup0fwXsAl9PBpGlC5c1ndr3gkdH4r2SQWH9QU+37Lix +sA8E3Giaj45lSYhNItfx5y6CvCdxvO8eFbfYUvxWQu3j7VfSkKpieN1knpbDmxD rdshtPxQuFnvXb0pbLqRHKLN9QG383KRoN9pHWaIAXBlEgiFtypbj33S9MdV8yCe VK4/Pb5rBPYTK8OdnrZ5ukORnuIJUSO7vijvlmqPD0pIDNtVzblBVEcZqXumSJc1 ajdCslmt4Ahuei6J1hlp+wn24B8cqbo8rPeZXaNmAkdHfk6vXtLjonNzOPxu8Yl6 p/dE6sih0g04oyL520JQxLNFThM86ids9DB8CdNMHCy0CmmvkgT92zfHX0AF4Kgb HtDQvhy+Sud3StE/4+4dd7AE6LkyVgjg56TLkcRkLqX+BcjForqpLMbqq5rmw43X +TvtgUIXGjkEjPoCgnc/+TR4ThDOgPl5ActqebS7EUiuW/IRRbw9sYU6E2UHj8RW U76CBf3zpNw323c/AjoCk+HG1lMipeOmCEh9k5k+rjm3iyneR8YJT7V3PSyFOC11 TqFYgtw95yGYq9fF3Skn =fWFr -----END PGP SIGNATURE-----
