[OE-core] [PATCH v4 0/3] zypper: support signed repositories

[Steve Sakoman]

On Mon, Jan 30, 2012 at 2:13 PM, Saul Wold <sgw at linux.intel.com> wrote:

> This would imply that we need to have a GPLv2 Version of the gnupg
> recipe also, Steve if you had to look at or handle the newer GPLv3 gnupg
> code itself, you may not be able to write the GPLv2 recipe or create patches
> for it, can you arrange for someone to create that patch?

OE-classic has a recipe for gnupg-1.4.10, so perhaps the safest
approach would be to import that recipe since I *have* browsed the
gnupg v2 code.

I know from experience that signed repositories won't work for that
version as-is.  Zypper explicitly uses gpg2.

It *may* be that gpg and gpg2 are compatible enough that you could get
away with a symlink and a v1.x version of gnupg.  Or perhaps one could
patch zypper to try gpg if gpg2 isn't present.  Thoughts?

Steve