[Rpm-maint] [rpm-software-management/rpm] Begin decoupling rpm's crypto API's from PGP (PR #1937)

[Panu Matilainen]

Rpm has traditionally very liberally lent hash and other algorithm values from the PGP RFC as they happened to be handy, but this is problematic as it limits our hashes to whatever the slowly updating RFC-4880 lists that may never approve some algorithms that may be otherwise suitable for non-PGP use (eg #1082) 

This does two main things:
- split off rpm's digest-related API's off rpmpgp.h into a new rpmcrypto.h header
- mass-swap PGPHASHALGO uses to equivalent rpm counterpart

Adding all the actual dependencies and adding converters only becomes meaningful once the values start growing apart.


You can view, comment on, or merge this pull request online at:

  https://github.com/rpm-software-management/rpm/pull/1937

-- Commit Summary --

  * Split off rpmDigest*() APIs from rpmpgp.h to a new rpmcrypto.h header
  * Detach rpm's hash algorithm values from PGP hash algorith values

-- File Changes --

    M Makefile.am (1)
    M build/files.c (2)
    M build/pack.c (14)
    M lib/rpmdb.c (4)
    M lib/rpmfi.c (6)
    M lib/rpmts.c (8)
    M lib/rpmvs.c (10)
    M preinstall.am (4)
    M rpmio/Makefile.am (2)
    M rpmio/digest_libgcrypt.c (26)
    M rpmio/digest_openssl.c (14)
    A rpmio/rpmcrypto.h (170)
    M rpmio/rpmpgp.c (2)
    M rpmio/rpmpgp.h (141)
    M sign/rpmsignfiles.c (23)

-- Patch Links --

https://github.com/rpm-software-management/rpm/pull/1937.patch
https://github.com/rpm-software-management/rpm/pull/1937.diff

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/pull/1937
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/pull/1937 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20220224/982d1056/attachment.html>