X2Go Keyring (2019.08.20) released

Dear all

The X2Go project is proud to announce a new release of the X2Go component ,,x2go-keyring''.

New gains of this version of ,,x2go-keyring'' are:

o new internal format, bastardization of debian-keyring and debian-archive-keyring o added key for Mihai Moldovan o added new, stronger packages signing key (RSA4096) to be used in the future o correct usage of new apt.trusted.d directory with individual keyfiles o lots of metadata updates

X2Go Component: x2go-keyring Version: 2019.08.20 Status: RELEASE Timestamp: 1566318311 Date: Tue, 20 Aug 2019 18:25:11 +0200 Changes: x2go-keyring (2019.08.20) RELEASED; urgency=medium . [ Mike Gabriel ]

• Rename LICENSE file to COPYING. . [ Mihai Moldovan ]
• Change string "X2go" to "X2Go" where appropriate.
• Makefile: remove unnecessary newline.
• debian/rules: add myself to Copyright header.
• t/keyids-complete.t: use spaces instead of tabs.
• t/keyids-complete.t: more quotes and curly braces!
• t/keyids-complete.t: even more quotes!
• t/keyids-complete.t: use the last directory in the stack instead of the top-level directory.
• runtests: use more quotes and curly braces.
• runtests: use spaces instead of tabs.
• t/keyids-complete.t: use bash.
• t/keyids-complete.t: make return-code an integer.
• t/keyids-complete.t: use pushd/popd instead of cd.
• t/keyids-complete.t: update comment.
• t/keyids-complete.t: use find ... -print0 | while read -r -d '' ... instead of for loop.
• t/keyids-complete.t: more quotes.
• runtests: use trap and explicit exit statement while switching to using the mktemp command.
• runtests: switch to bash.
• runtests: rework counters and exit status.
• runtests: rework quoting and shellcheck warnings.
• Makefile: replace with jetring-based top-level Makefile from debian-archive-keyring package. Changes: Renamed files. Added test target. "team-members" renamed to x2go-maintainers. Added x2go-maintainers-removed-keys. Both files get installed as well.
• runtests: adapt to new layout.
• t/keyids-complete.t: adapt to new layout.
• t/no-expired.t: switch to bash.
• t/no-expired.t: improve quoting.
• t/no-expired.t: make exit code variable an integer.
• t/no-expired.t: adapt to new layout.
• scripts/:
  • Remove create-prerm-script.
• Rename x2go-keyring-gpg to active-keys.
• Rename x2go-maintainers-gpg to x2go-maintainers.
• removed-keys/:
  • Add empty index file.
• x2go-maintainers-removed-keys/:
  • Add empty index file.
• Add README.maintainer file, copied from debian-archive-keyring and adapted.
• x2go-maintainers/: convert to new mechanism, add own key, drop key for Oleksandr Shneyder (invalid format).

• x2go-maintainers/: re-add key for Oleksandr Shneyder.

• active-keys/: convert to new mechanism.
• active-keys/: sign index.
• removed-keys/: sign index.
• x2go-maintainers/: sign index.
• x2go-maintainers-removed-keys/: sign index.
• keyrings: add signatures.
• Makefile: accept empty indices.
• .gitignore: rework.
• runtests: fix tempdir -> tmpdir typo.
• t/keyids-complete.t: fix stupid while -r ... read typo.
• t/keyids-complete.t: avoid using a subshell via pipes.
• t/keyids-complete.t: fix key name checking.
• active-keys/: add new RSA4096-based X2Go Packages Automatic Signing Key.
• keyrings/: refresh signature.
• Makefile: make gpg binary pseudo-selectable via a variable, defaulting to "gpg2".
• Makefile: manually try to clean up keyrings via --export | --import if the filtering command that uses newer GnuPG 2 syntax fails.
• Makefile: switch back to unversioned gpg binary. Even gnupg1 should be good enough on older system like Jessie.
• keyrings/x2go-archive-keyring.gpg.asc: refresh signature after actually inserting the correct key.
• README.maintainer: update documentation. We want to update the keyrings before signing them and also reference the maintainers keyring which DOES get installed in our package.
• keyrings/: update signatures on all keyring files.
• Makefile: create empty keyring files if the index file is empty. Newer GnuPG versions create keybox files by default, but we explicitly (or rather implicitly through jetring touching keyring files before importing actual data and thus bypassing keybox creation) don't want this.
• Makefile: for good measure, also verify signatures on x2go-maintainers{,-removed-keys}/index.
• Makefile: we don't need keyrings/x2go-maintainers-removed-keys.gpg as a prerequisite for checking index signatures.
• Makefile: likewise compare signatures on keyrings/x2go-maintainers{,-removed-keys}.gpg. Doesn't really make a huge difference for the x2go-maintainers keyring, but why not.
• Makefile: add maintonly target for generating gpg-1.4/2.0-style keyrings.
• Makefile: fallback to old-style keyring signature checks if the default new-style ones failed validation.
• README.maintainer: update documentation to include old-style keyrings and their signatures.
• Makefile: do not require a full build and verification run for the maintonly target.
• Makefile: do not try to run gpg1 to export and import keys if the keyrings are actually empty.
• Makefile: add old-style keyrings to cleanup.
• keyrings/: refresh signatures on new-style keyrings.
• keyrings/: add signatures on old-style keyrings.
• .gitignore: refresh with old-style and vim backup files.
• Makefile: check file size on prerequisite, not the just-generated target file.
• keyrings/: refresh signatures on all keyrings.
• t/no-expired.t: make mawk-compatible.
• debian/control:
  • Change maintainer to the mailing list.
  • Add the old package maintainer to the Uploaders field and myself.
  • Add build dependency upon jetring to create keyring files more easily.
  • Add build dependency upon gnupg, needed anyway. We probably want a fallback to gnupg2, but that might be a bit more tricky.
  • Add Multi-Arch: foreign. As long as we can execute the build dependencies, we don't care about their architecture.
  • Replace gnupg Recommends with a version-less one. By now, the version should be new enough in any case.
  • Add ${misc:Depends}, mostly for good measure.
  • Add build-dependency upon bash.
  • Add build-dependency upon coreutils.
  • Add build-dependency on debhelper >= 7.
  • Bump up dh dependency to 9.
  • Make sure we pull in gnupg2 on older Debian versions.
  • Depend on gnupg package only. Making sure that gnupg2 is getting installed unless such a package doesn't exist is too complicated. A dependency such as "gnupg2 | gnupg" sadly doesn't work, because gnupg is a base package and hence always installed, which immediately fulfils the dependency.
• debian/rules:
  • Simplify file... a lot.
  • Don't use --no-parallel with dh commands in compat-9-mode.
• debian/:
  • Add docs file, installing README.
  • Add install file, installing actual data.
  • Add postrm file, copied from debian-archive-keyring.
  • Remove prerm.template.
  • Add compat file, using dh-9 features.
• debian/postinst:
  • Sync with debian-archive-keyring package.
  • Update version for removals to 2019.08.04.
• debian/install:
  • Clear out. We don't need this any longer since the Makefile stages all files to the correct location.
• debian/postrm:
  • Don't try to remove a symlink that never existed.

Regards,

Mihai Moldovan