[Rt-commit] rt branch, 4.4-trunk, updated. rt-4.4.4-161-ga3c5c3f073

[? sunnavy]

The branch, 4.4-trunk has been updated
       via  a3c5c3f073598d4c008c7a49ef0ec63229827bfa (commit)
       via  ba843e17394f37bd2925b934732c8ea5dfe8712b (commit)
       via  a903bc01a608fec77b0e2c13f3d096935a2821dc (commit)
       via  0d20bdf79fffd9aed6e2c29d177fc978f00a9b25 (commit)
       via  298da0b7b1e7dca2e88cff6152dbe168f8b51d6a (commit)
       via  8750e4b643b5703b3aae52d625e0b59c4a2180f4 (commit)
       via  18b5d085d89c775fd79fe9a20f25ddacf1ae8ef1 (commit)
       via  c58ada2ba416dd51f1f35043cca9ae38dc6bd803 (commit)
       via  757ccab492182288eb5bdfb94d4af69e60de9bc9 (commit)
       via  a1e09f28739fd164d8de73f77dde64e8bcd6c595 (commit)
       via  b001d35d72ce2c6bebe2a68a0b496db1833f46d3 (commit)
       via  9cbf7b129633b07b6990c6a57fa3339fc658d196 (commit)
       via  214ec3857bad78615d61a62bbcd24fa848b4ed78 (commit)
       via  1d1745b55eb548636170b2ddb058dbac5edf0e4a (commit)
      from  dd264d68d38e1df31908a890fd9038b01ccf30f6 (commit)

Summary of changes:
 lib/RT/Crypt/GnuPG.pm                              | 30 ++++++--
 lib/RT/Test/GnuPG.pm                               | 49 +++++++++++-
 sbin/rt-test-dependencies.in                       |  2 +-
 t/crypt/no-signer-address.t                        |  3 +-
 t/crypt/smime/other-certs.t                        | 15 ++++
 .../signed_old_style_with_attachment.eml           |  0
 t/mail/crypt-gnupg.t                               | 86 +++++++++++++++-------
 t/mail/gnupg-bad.t                                 |  4 +-
 t/mail/gnupg-incoming.t                            |  7 +-
 t/mail/gnupg-reverification.t                      |  4 +-
 .../CVE-2012-4735-incoming-encryption-header.t     |  2 +-
 t/web/crypt-gnupg.t                                |  8 +-
 t/web/gnupg-select-keys-on-create.t                |  4 +-
 13 files changed, 161 insertions(+), 53 deletions(-)
 rename t/data/gnupg/{keyrings => emails}/signed_old_style_with_attachment.eml (100%)

- Log -----------------------------------------------------------------
commit a903bc01a608fec77b0e2c13f3d096935a2821dc
Author: sunnavy <sunnavy at bestpractical.com>
Date:   Fri May 15 15:32:00 2020 +0800

    Default cert-digest-algo from SHA1 to SHA256
    
    Since 2.2.18, SHA1 is not allowed any more, the error message is:
    
        third-party key signatures using the SHA1 algorithm are rejected

diff --git a/lib/RT/Crypt/GnuPG.pm b/lib/RT/Crypt/GnuPG.pm
index 06569ad9db..d96c68f861 100644
--- a/lib/RT/Crypt/GnuPG.pm
+++ b/lib/RT/Crypt/GnuPG.pm
@@ -330,6 +330,7 @@ sub CallGnuPG {
     my %GnuPGOptions = RT->Config->Get('GnuPGOptions');
     my %opt = (
         'digest-algo' => 'SHA1',
+        'cert-digest-algo' => 'SHA256',
         %GnuPGOptions,
         %{ $args{Options} || {} },
     );

commit ba843e17394f37bd2925b934732c8ea5dfe8712b
Author: sunnavy <sunnavy at bestpractical.com>
Date:   Sat May 16 04:46:45 2020 +0800

    Bump GnuPG::Interface to 1.00 to support gpg 2.2

diff --git a/sbin/rt-test-dependencies.in b/sbin/rt-test-dependencies.in
index 646fa9ddd1..159d729d32 100644
--- a/sbin/rt-test-dependencies.in
+++ b/sbin/rt-test-dependencies.in
@@ -271,7 +271,7 @@ DBD::SQLite 1.00
 
 $deps{'GPG'} = [ text_to_hash( << '.') ];
 File::Which
-GnuPG::Interface
+GnuPG::Interface 1.00
 PerlIO::eol
 .
 

commit a3c5c3f073598d4c008c7a49ef0ec63229827bfa
Merge: dd264d68d3 ba843e1739
Author: sunnavy <sunnavy at bestpractical.com>
Date:   Tue Nov 17 03:45:37 2020 +0800

    Merge branch '4.4/update-for-gpg2-and-openssl-1.1.1d' into 4.4-trunk


-----------------------------------------------------------------------