vcswatch reports that
this package seems to have new commits in its VCS but has
not yet updated debian/changelog. You should consider updating
the Debian changelog and uploading this new version into the archive.
Here are the relevant commit logs:
commit 4b6032dbfb20e041043cfa0b6b84145f49a98a11
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Jul 8 12:06:31 2019 +0100
Remove Version: header from armored output
There is no benefit to this header and it leaks information about the
implementation of OpenPGP in use, which may open up other attacks. Drop
it.
commit 4b4592942fc58994cae56118173ad77d55c6f157
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 16 09:14:03 2019 +0100
Remove auto* related files from .gitignore
commit 41b7047c909cb5d8243901080db4931ebf165acf
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 16 21:09:29 2019 +0100
Stop using 32-bit key IDs
The time for 32-bit key IDs is long past (and even 64-bits are risky),
so switch to 64-bit IDs everywhere we display a key ID.
commit 37801dca09e004c214604ae66323a628e100258d
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 16 07:48:24 2019 +0100
Assume if we have Nettle it has all the hashes we need
Older versions of Nettle didn't support the SHA2 functions fully so we
checked for their existence. Switch to assuming they're present if we
have Nettle at all.
commit 5804040a89edac8446d71c5a3f369e5997b20806
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Apr 15 19:48:58 2019 +0100
Move Travis to do CMake configure + build
Once more, with feeling, for the move from autoconf to cmake.
commit 7a83d0b243dd26c8d2cfb4b28aad1b0c10ae19f2
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Apr 15 19:39:24 2019 +0100
Add CMake dependency for Travis CI
commit 3512fa56e404e5dc2e3a6a3ca6fa23eb25760493
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Apr 15 19:34:47 2019 +0100
Drop "autoreconf -i" for Travis CI now we're using CMake
commit add20f8102d4e5a43957b62e59174378a23f4bc2
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Apr 15 19:23:20 2019 +0100
Don't require a database connection for a key index
We need an active keydb backend if we want to be able to lookup
UIDs for signatures, but if we don't have one we can still index the
key. Only use keyid2uid when we have a non-NULL dbctx.
commit 85187675424f3854869f1607afd8a1e84e536946
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Apr 15 19:19:22 2019 +0100
Add support for v5 keys
v5 is being specified in RFC4880bis. It uses a slightly different packet
format for public key packets and uses SHA2-256 for fingerprints. Add
basic support for parsing and storing these days, and some new unit
tests using the v5 test key.
commit f8407f2ed06cdc0cca8c2421023255886c12ea6d
Author: Jonathan McDowell <noodles@earth.li>
Date: Mon Apr 15 10:22:12 2019 +0100
Add support for issuer fingerprint subpackets
A new subpacket containing the entire fingerprint of the signature
issuer has been added in RFC4880bis. This improves the old issuer keyid
subpacket type.
commit a799cc2909f47d918d1ec7171a9edba28a9f5136
Author: Jonathan McDowell <noodles@earth.li>
Date: Sun Apr 14 17:51:11 2019 +0100
Move to CMake over autoconf
The auto* tools are hard to work with, and I'd like to split out various
bits of onak into a shared library useful to other projects as well as
various internal helpers (e.g. a backend DB library). To help with that
move over to CMake as a more modern but still widely available build
system.
commit 94422621d7c1300ae7001d13590570f9d4ad2a07
Author: Jonathan McDowell <noodles@earth.li>
Date: Wed Apr 10 19:05:10 2019 +0100
Cleanup tests to be able to run from a different directory
runtests assumes its run from the directory it lives in, and that this
is the build directory. Improve it to be able to cope with a build in a
different directory to the source and work out the correct paths.
commit adc800dbc424a1e246dd4a82a0c2e88eeda25531
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 20:54:57 2019 +0100
Add ability to drop overly large packets
As per draft-dkg-openpgp-abuse-resistant-keystore add the ability to
drop "large" packets. These are defined as UIDs more than 1024 bytes
long, UATs greater than 64k in size and all other packets larger than
8383 bytes (the maximum that will fit in a 2 byte new format packet
length). Disabled by default, enable with "check_packet_size" in the
verification config section.
commit a0d1c99184eeb07a6a7711e168c3db4b8c0937eb
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 19:53:54 2019 +0100
Use a set of policy flags to indicate what key cleaning to perform
To decouple cleankeys.c from the keyserver config, and prepare for an
extension of the policies available, use a set of flags to indicate what
key cleaning to perform.
commit 5719b2b50c87d77e4ed1cc054f000845fc9aa8cc
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 19:30:53 2019 +0100
Add Vim backup files + GNU Global tags to .gitignore
commit 490c02ce72b7fa7cedecf7acaae46713fff507da
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 19:22:03 2019 +0100
Update Travis CI config to use Xenial
The default of Trusty is failing to find libsystemd-dev.
commit 357fbc65bfab230bbf12313e8b458d8325a6174f
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 15:55:02 2019 +0100
Move keysigs into its only user, keydb.c
keysigs is only actually used within keydb.c and pulls in stats
structures unnecessarily to decodekey.c, so pull it inline.
commit 63024252ef5bc13b0b920112b91c1945e0cc6f13
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 15:42:28 2019 +0100
Move free_statskey into hash.c
free_statskey() is only used within hash.c, so move it out of mem.c and
scope it more narrowly.
commit 6df51fef2960f533a741fb7290867387ed3fbba5
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 14:54:13 2019 +0100
Update GPL location to URL rather than postal address
commit 0c120d1895d25b59abe338862189be1b87447569
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 14:38:03 2019 +0100
Cleanup various includes
Run include-what-you-use and do some cleanups based on its suggestions.
Pull out some logging dependencies that don't need to be there in the
process.
commit f98869fbb272a11751a1477e083898b8d41c94c6
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Apr 9 13:30:37 2019 +0100
Clean up a couple of format truncation warnings
Newer GCCs will warn about truncation in strncpy/snprintf etc, so re-jig
things a bit to try and avoid it.
commit 409ce1e3784064ab8f2786a9600a30809c502a46
Author: Jonathan McDowell <noodles@earth.li>
Date: Tue Sep 25 11:07:06 2018 +0100
Use generic fallback in stacked backend for non core routines
The non-core routines that don't directly return or store a key
structure often fall back to the generic routines under the hood. This
means we can miss propagating a retrieved key up to the top level of the
stack. Avoid this by only calling the non-generic version for the top
layer, then falling back to the generics which will do the appropriate
store on fallback.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/o/onak.png){kind=link}