[packages/gnupg2] fix occasional ssh login failures with rsa key; rel 2
atler
atler at pld-linux.org
Wed Apr 1 23:52:07 CEST 2026
commit b21fcba6a1e25bb5c55dbff2f93090ce0da0469c
Author: Jan Palus <atler at pld-linux.org>
Date: Wed Apr 1 23:42:04 2026 +0200
fix occasional ssh login failures with rsa key; rel 2
ssh login with gpg-agent acting as ssh-agent using rsa key with sha2
signatures might fail if signature needs padding. see:
https://dev.gnupg.org/T8202
gnupg2.spec | 4 +++-
rsa-sig-padding.patch | 11 +++++++++++
2 files changed, 14 insertions(+), 1 deletion(-)
---
diff --git a/gnupg2.spec b/gnupg2.spec
index 81874b2..64175eb 100644
--- a/gnupg2.spec
+++ b/gnupg2.spec
@@ -9,7 +9,7 @@ Summary: GNU Privacy Guard - tool for secure communication and data storage - en
Summary(pl.UTF-8): GnuPG - narzędzie do bezpiecznej komunikacji i bezpiecznego przechowywania danych - wersja rozszerzona
Name: gnupg2
Version: 2.5.18
-Release: 1
+Release: 2
License: GPL v3+
Group: Applications/File
Source0: https://www.gnupg.org/ftp/gcrypt/gnupg/gnupg-%{version}.tar.bz2
@@ -18,6 +18,7 @@ Source1: gnupg-agent.sh
Patch0: %{name}-info.patch
Patch1: %{name}-nogit.patch
Patch2: %{name}-pl.po-update.patch
+Patch3: rsa-sig-padding.patch
URL: https://www.gnupg.org/
BuildRequires: autoconf >= 2.69
BuildRequires: automake >= 1:1.16.3
@@ -166,6 +167,7 @@ wywoływany przez gpgsm i nie używany bezpośrednio.
%patch -P0 -p1
%patch -P1 -p1
%patch -P2 -p1
+%patch -P3 -p1
%{__rm} po/stamp-po
diff --git a/rsa-sig-padding.patch b/rsa-sig-padding.patch
new file mode 100644
index 0000000..febbb2c
--- /dev/null
+++ b/rsa-sig-padding.patch
@@ -0,0 +1,11 @@
+--- gnupg-2.5.18/agent/command-ssh.c.orig 2025-11-19 16:55:57.000000000 +0100
++++ gnupg-2.5.18/agent/command-ssh.c 2026-04-01 23:30:52.453206379 +0200
+@@ -1481,7 +1481,7 @@
+ err = gcry_mpi_print (GCRYMPI_FMT_USG, data, spec->keysize, &data_n, s);
+ if (data_n < spec->keysize)
+ {
+- memmove (data, data+spec->keysize-data_n, data_n);
++ memmove (data+spec->keysize-data_n, data, data_n);
+ memset (data, 0, spec->keysize-data_n);
+ data_n = spec->keysize;
+ }
================================================================
---- gitweb:
http://git.pld-linux.org/gitweb.cgi/packages/gnupg2.git/commitdiff/b21fcba6a1e25bb5c55dbff2f93090ce0da0469c
More information about the pld-cvs-commit
mailing list