Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: switch to use gopenpgp #315

Merged
merged 1 commit into from
Apr 8, 2021
Merged

fix: switch to use gopenpgp #315

merged 1 commit into from
Apr 8, 2021

Conversation

djgilcrease
Copy link
Contributor

@djgilcrease djgilcrease commented Apr 1, 2021

With Googles anouncement that x/crypto/openpgp is depreciated golang/go#44226 we have decided to switch to github.com/ProtonMail/gopenpgp & github.com/ProtonMail/go-crypto/openpgp

waiting-on: ProtonMail/go-crypto#79
waiting-on: ProtonMail/gopenpgp#126

closes #276
closes #280

@vercel
Copy link

vercel bot commented Apr 1, 2021

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/goreleaser/nfpm/53masRUjEYWDV8f8KmPrGeBRSosC
✅ Preview: https://nfpm-git-drop-crypto-openpgp-goreleaser.vercel.app

@pull-request-size pull-request-size bot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Apr 1, 2021
@vercel vercel bot temporarily deployed to Preview April 1, 2021 17:24 Inactive
@vercel vercel bot temporarily deployed to Preview April 1, 2021 17:43 Inactive
@vercel vercel bot temporarily deployed to Preview April 1, 2021 17:50 Inactive
@vercel vercel bot temporarily deployed to Preview April 1, 2021 20:14 Inactive
djgilcrease pushed a commit to digitalxero/go-crypto that referenced this pull request Apr 5, 2021
…ature.IssuerKeyId` == `signer.PrivateKey.KeyId`

This fixes a bug in rpm < v4.13.0 that prevents it from using subkey.KeyID to verify a signed package
https://bugzilla.redhat.com/show_bug.cgi?id=1225133
https://bugzilla.redhat.com/show_bug.cgi?id=227632

This change is also required for goreleaser/nfpm#315
@vercel vercel bot temporarily deployed to Preview April 5, 2021 22:51 Inactive
@djgilcrease djgilcrease changed the title fix: switch to use gopenpgp WIP: fix: switch to use gopenpgp Apr 5, 2021
@codecov
Copy link

codecov bot commented Apr 5, 2021

Codecov Report

Merging #315 (c093462) into master (fe57ea8) will decrease coverage by 0.11%.
The diff coverage is 73.52%.

Impacted file tree graph

@@            Coverage Diff             @@
##           master     #315      +/-   ##
==========================================
- Coverage   70.24%   70.13%   -0.12%     
==========================================
  Files           9        9              
  Lines        1109     1135      +26     
==========================================
+ Hits          779      796      +17     
- Misses        204      209       +5     
- Partials      126      130       +4     
Impacted Files Coverage Δ
internal/sign/pgp.go 72.22% <68.96%> (-3.54%) ⬇️
deb/deb.go 66.10% <100.00%> (-0.12%) ⬇️
nfpm.go 86.40% <100.00%> (+0.40%) ⬆️
rpm/rpm.go 73.86% <100.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update fe57ea8...c093462. Read the comment docs.

@vercel vercel bot temporarily deployed to Preview April 7, 2021 00:02 Inactive
@vercel vercel bot temporarily deployed to Preview April 7, 2021 00:07 Inactive
@vercel vercel bot temporarily deployed to Preview April 7, 2021 18:30 Inactive
Copy link
Member

@caarlos0 caarlos0 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't know a lot of openpgp, but this looks good to me 🤘
(assuming we remove the replaces on go.mod once the prs are merged)

Thanks for the hard work on this @djgilcrease 🤘

@vercel vercel bot temporarily deployed to Preview April 8, 2021 16:54 Inactive
@djgilcrease djgilcrease changed the title WIP: fix: switch to use gopenpgp fix: switch to use gopenpgp Apr 8, 2021
@vercel vercel bot temporarily deployed to Preview April 8, 2021 17:06 Inactive
@vercel vercel bot temporarily deployed to Preview April 8, 2021 17:08 Inactive
With Googles anouncement that x/crypto/openpgp is depreciated golang/go#44226 we have decided to switch to github.com/ProtonMail/gopenpgp & github.com/ProtonMail/go-crypto/openpgp
@vercel vercel bot temporarily deployed to Preview April 8, 2021 17:14 Inactive
@djgilcrease djgilcrease merged commit a61de3b into master Apr 8, 2021
@djgilcrease djgilcrease deleted the drop-crypto-openpgp branch April 8, 2021 18:15
@github-actions
Copy link
Contributor

github-actions bot commented May 8, 2021

This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.

@github-actions github-actions bot locked as resolved and limited conversation to collaborators May 8, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
size/L Denotes a PR that changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

NFPM cannot sign packages with only the subkey present
2 participants