Discussion of technical issues related to the NetBSD package system

Brian Stark | 1 Sep 2002 09:02

pgp5 problem with 1.6F/i386

Hi,

I've encountered a problem with the security/pgp5 package on a
NetBSD-curent 1.6F/i386 system and I'm wondering if others have
observed this (I'll submit a pr for this if no one seems to know about
this).

If I install the pre-compiled binary 'pgp5-5.0i.tgz' for i386/1.5 from
ftp.netbsd.org on a 1.6F/i386 system and generate a key, then delete the
the pgp5 package, and then re-install pgp5 by compiling from source, the
compiled version of pgp will reject my pass phrases for my existing key.

I'm really confused. Is it possible that a bug was introduced into the
patches for pgp5? Or worse, could gcc be generating bad code? (I believe
some changes have been made to the compiler for NetBSD-current...)

I was able to reproduce my problem today, and a log of what I did
is appended below. The steps are basically:

  * install pre-compiled pgp5
  * generate a key
  * sign a file
  * remove pgp5
  * compile pgp5
  * try to sign a file (this won't work now)

My /etc/mk.conf file normally contains 'COPTS+=-march=pentium -pipe'.
My log below shows one attempt to sign with a version of pgp5 compiled
with those options, and another attempt with a version that did not
have those options compiled in (both attempts failed).

(Continue reading)

headers

Feico Dillema | 2 Sep 2002 01:55

Re: pgp5 problem with 1.6F/i386

On Sun, Sep 01, 2002 at 12:02:32AM -0700, Brian Stark wrote:
> Has anyone else seen this?
Yes! I thought I was simply delerious, but good to hear somebody had
similar problems. I installed pgp5 from -current pkgsrc on 1.6_RC2
and it didn't accept my passphrase for the keys copied from another
machine with a pgp5 installed much earlier from pkgsrc. Have no weird
things in mk.conf. Wondered whether support for IDEA was mising or
something like that, but didn't look much further. Was in a hurry and
simply copied the old binaries to the new machine.

Feico.

headers

Urban Boquist | 2 Sep 2002 09:10

Re: pgp5 problem with 1.6F/i386

>>>>> Feico Dillema writes:

Feico> Yes! I thought I was simply delerious, but good to hear
Feico> somebody had similar problems.

I saw something like this too, suddenly a newly built pgp couldn't
decrypt using my old key. At about the same time I switched to using
GnuPG instead, so I never got around to debug this any further. See PR
15138 though.

Regards,

        -- Urban