[Pkg-gnupg-commit] [gnupg1] 02/04: clarify deprecated status of gpg1

[Daniel Kahn Gillmor]

This is an automated email from the git hooks/post-receive script.

dkg pushed a commit to branch master
in repository gnupg1.

commit 5fd952a5cdc721a558562d87bd1d360229393d28
Author: Daniel Kahn Gillmor <dkg at fifthhorseman.net>
Date:   Wed Feb 15 10:35:37 2017 -0500

    clarify deprecated status of gpg1
---
 debian/README.Debian |  7 ++++++-
 debian/control       | 24 ++++++++++++++++--------
 2 files changed, 22 insertions(+), 9 deletions(-)

diff --git a/debian/README.Debian b/debian/README.Debian
index f36c263..5fa4030 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -33,6 +33,11 @@ The main differences between "classic" and "modern":
    public keyrings; "classic" only knows how to use the traditional
    linear keyring (~/gnupg/pubring.gpg)
 
+Note also that the "classic" and "modern" versions of gpg, while
+capable of sharing a ~/.gnupg home directory, will not necessarily
+access the same secret keys or public keys.  It is not advisable to
+mix the two.
+
 It is recommended to use gnupg instead of gnupg1.
 
- -- Daniel Kahn Gillmor <dkg at fifthhorseman.net>, Fri,  1 Apr 2016 07:23:34 -0300
+ -- Daniel Kahn Gillmor <dkg at fifthhorseman.net>, Wed, 15 Feb 2017 10:35:11 -0500
diff --git a/debian/control b/debian/control
index f1c3b21..32d74f9 100644
--- a/debian/control
+++ b/debian/control
@@ -42,15 +42,18 @@ Suggests:
  libpcsclite1,
  parcimonie,
  xloadimage | imagemagick | eog,
-Description: GNU privacy guard - a free PGP replacement ("classic" version)
+Description: GNU privacy guard - a PGP implementation (deprecated "classic" version)
  GnuPG is GNU's tool for secure communication and data storage.
  It can be used to encrypt data and to create digital signatures.
  It includes an advanced key management facility and is compliant
  with the proposed OpenPGP Internet standard as described in RFC 4880.
  .
- GnuPG 1.4 is the "classic" standalone, non-modularized
- version. Please use the gnupg package instead unless you know for
- sure that you need gnupg1.
+ The gnupg1 package provides GnuPG 1.4, the "classic" standalone,
+ non-modularized version. It is provided mainly for people with the
+ need to use archaic cryptographic objects like PGPv3 keys to access
+ archived messages.  It does not support more recent cryptographic
+ primitives like ECDSA or EdDSA.  Please use the gnupg package instead
+ unless you know for sure that you need gnupg1.
  .
  The gnupg1 package is built without libcurl to minimize dependencies,
  so it does not support HKPS keyservers. Install the gnupg1-curl
@@ -65,7 +68,7 @@ Depends:
  ${misc:Depends},
  ${shlibs:Depends},
  ${shlibs:Recommends},
-Description: GNU privacy guard - a free PGP replacement (cURL helpers for "classic" version)
+Description: GNU privacy guard (cURL helpers for deprecated "classic" version)
  GnuPG is GNU's tool for secure communication and data storage.
  It can be used to encrypt data and to create digital signatures.
  It includes an advanced key management facility and is compliant
@@ -75,6 +78,11 @@ Description: GNU privacy guard - a free PGP replacement (cURL helpers for "class
  which replace the ones in the gnupg1 package built with the "curl
  shim" variant of gnupg1. This package provides support for HKPS
  keyservers.
+ .
+ Since gnupg1 is deprecated in Debian, it is recommended that you use
+ the gnupg package instead, and rely on the "dirmngr" package for
+ network access.  dirmngr can do everything that gnupg1-curl can do,
+ and more.
 
 Package: gpgv1
 Architecture: any
@@ -84,7 +92,7 @@ Depends:
  ${shlibs:Depends},
 Suggests:
  gnupg,
-Description: GNU privacy guard - signature verification tool ("classic" version)
+Description: GNU privacy guard - signature verification tool (deprecated "classic" version)
  GnuPG is GNU's tool for secure communication and data storage.
  .
  gpgv is a stripped-down version of gnupg which is only able to check
@@ -106,7 +114,7 @@ Provides:
 Depends:
  ${misc:Depends},
  ${shlibs:Depends},
-Description: minimal signature verification tool
+Description: minimal signature verification tool (deprecated "classic" version)
  GnuPG is GNU's tool for secure communication and data storage.
  It can be used to encrypt data and to create digital signatures.
  It includes an advanced key management facility and is compliant
@@ -127,7 +135,7 @@ Breaks:
  gnupg1 (<< 1.4.20-6+exp3~),
 Replaces:
  gnupg1 (<< 1.4.20-6+exp3~),
-Description: GNU privacy guard "classic" - localization files
+Description: GNU privacy guard "classic" - localization files (deprecated)
  GnuPG is GNU's tool for secure communication and data storage.
  It can be used to encrypt data and to create digital signatures.
  It includes an advanced key management facility and is compliant

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-gnupg/gnupg1.git