[yocto] gnupg vs gpgme

[Hans Beckérus]

On Mon, Apr 22, 2013 at 10:04 AM, Anders Darander <anders at chargestorm.se> wrote:
>
>
> "Hans Beckérus" <hans.beckerus at gmail.com> wrote:
>
>>On Mon, Apr 22, 2013 at 9:47 AM, Anders Darander
>><anders at chargestorm.se> wrote:
>>> Hi,
>>>
>>> "Hans Beckérus" <hans.beckerus at gmail.com> wrote:
>>>
>>>>Hello. I wish to bring in gnupg to our system but from what I can
>>tell
>>>>gnupg is not part of Yocto nor OpenEmbedded. However, gpgme is. Is
>>>>gpgme to consider a complete replacement for gnupg? I have no need
>>for
>>>>any gpg application libraries, but need the ability to sign and
>>>>perhaps encrypt/decrypt information. Is an option here to bring in
>>>>gnupg 1.4.13 myself or is this not something you should recommend?
>>>
>>> Well there are recipes for gnupg versions 1.4.7 and 2.0.19 in
>>OE-Core, and this in Yocto. See meta/recipes-support.
>>>
>>
>>Ah. Yes, now I see it. I think my mistake was that I searched for gpg
>>not gnupg :( My bad.
>>Is there anything that should make me consider 1.4.7 before 2.x? I am
>>looking for something as lean as possible since there are very limited
>>resources on the target system. Also, 1.4.13 seems to be considered
>>current stable. I guess OE is lagging behind somewhat on this package?
>>
>
> Well, 1.4.7 was the last release under GPLv2, which is the primary reason for keeping it. 2.0 19 is what you'll get when >requesting gnupg from the build system, unless you either prefer the old version or declare that you don't want GPLv3 in >your images.

Ok I see. Thanks. GPLv2 vs GPLv3 is not an issue in my case. More
important is which version adds the lesser footprint. My guess is that
1.4.x is what I am looking for. But I will try and build both to see
which suits the best.

Hans

On Mon, Apr 22, 2013 at 10:04 AM, Anders Darander <anders at chargestorm.se> wrote:
>
>
> "Hans Beckérus" <hans.beckerus at gmail.com> wrote:
>
>>On Mon, Apr 22, 2013 at 9:47 AM, Anders Darander
>><anders at chargestorm.se> wrote:
>>> Hi,
>>>
>>> "Hans Beckérus" <hans.beckerus at gmail.com> wrote:
>>>
>>>>Hello. I wish to bring in gnupg to our system but from what I can
>>tell
>>>>gnupg is not part of Yocto nor OpenEmbedded. However, gpgme is. Is
>>>>gpgme to consider a complete replacement for gnupg? I have no need
>>for
>>>>any gpg application libraries, but need the ability to sign and
>>>>perhaps encrypt/decrypt information. Is an option here to bring in
>>>>gnupg 1.4.13 myself or is this not something you should recommend?
>>>
>>> Well there are recipes for gnupg versions 1.4.7 and 2.0.19 in
>>OE-Core, and this in Yocto. See meta/recipes-support.
>>>
>>
>>Ah. Yes, now I see it. I think my mistake was that I searched for gpg
>>not gnupg :( My bad.
>>Is there anything that should make me consider 1.4.7 before 2.x? I am
>>looking for something as lean as possible since there are very limited
>>resources on the target system. Also, 1.4.13 seems to be considered
>>current stable. I guess OE is lagging behind somewhat on this package?
>>
>
> Well, 1.4.7 was the last release under GPLv2, which is the primary reason for keeping it. 2.0 19 is what you'll get when requesting gnupg from the build system, unless you either prefer the old version or declare that you don't want GPLv3 in your images.
>
> Cheers,
> Anders
>
> --
> Anders Darander
> ChargeStorm AB          Tel: +46 702 44 84 36
> Laxholmstorget 3        Email: anders at chargestorm.se
> 602 21 Norrköping       Web: www.chargestorm.se
>
> Sent from my Android phone with K-9 Mail. Please excuse my brevity.