monkeysign (2.2.4) unstable; urgency=medium

[ Tobias Rueetschi ]

• false isn't defined, that must be False

[ Antoine Beaupré ]

• actually send multiple emails instead of a single one
• CVE-2018-12020: add no verbose to avoid fake signatures

-- Antoine Beaupré anarcat@debian.org Mon, 18 Jun 2018 12:18:46 -0400

I have just released Monkeysign 2.2.0. This release was made to support Tor and fix a few issues with the build system. This deprecates the 2.1.x branch, see the branches status page for more detailed information on supported branches. Note that the full change log is now available online, in the history section.

Monkeysign is a user-friendly tool to easily and securely exchange OpenPGP key certifications. See the homepage for more information.

As usual, to install Monkeysign, see the install documentation. If you are interested in contributing to the project, you can find more information in the new contributing section. Finally, see the usage section for more information about how to use Monkeysign.

Happy signing!

I have just released Monkeysign 2.1.4. This important release marks the first release to fully support GnuPG 2.1. Those paying attention will also notice ta 2.1.3 was not announced here: it was a Debian-only release that aimed to fix build errors on Debian's infrastructure so I didn't feel it was important to announce it here.

I am still allowing a few non-critical changes, in the hope of easing diagnostics and support in the future. Here is the full list of changes:

• --local now implies --no-mail (Closes: #719242)
• ship tests with program, accessible with --test parameter
• stop hardcoding version numbers in code, use setuptools-scm instead
• enable tests at build time and Debian CI (autopkgtest)
• complete GnuPG 2.1 support: test suite now passes!

Monkeysign is a user-friendly tool to easily and securely exchange OpenPGP key certifications. See the homepage for more information.

As usual, to install Monkeysign, see the install documentation. If you are interested in contributing to the project, you can find more information in the new contributing section. Finally, see the usage section for more information about the new features of Monkeysign 2.1.x.

Happy signing!

this release was retired because of a mistake in the release process: the version number wasn't bumped internally, so it looks like 2.1.0 in --version. 2.1.2 supercedes this release.

The 2.1.0 release was published today to Debian unstable and (a novelty) on PyPI. This release fixes numerous bugs and implements a bunch of new features as well. The most notable features are support for third-party email clients, configuration files and preliminary GnuPG 2.1 support. Key bugfixes include better handling of revoked and expired key material that has been plaguing us for years.

The complete changelog is available on the new collaborative Gitlab platform hosted at 0xACAB.org, along with a new issue queue. The documentation was also completely revamped and moved to ReadTheDocs.io. It is also shipped in a -doc Debian package for offline viewing.

The bugfixes have unfortunately not been integrated in the 2.0.x branch, which means that Debian Jessie and derivatives will probably not see those updates unless someone goes through the painstaking process of picking and backporting specific patches to fix various issues. Furthermore, it is not yet completely clear that all those issues are fixed, so I will wait until the 2.1.x branch matures before attempting such a backport. In particular, it is possible the GnuPG 2.1 support may still be lacking, see issue #9 for more information about this epic battle.

Around 10 different people contributed to this release, including 4 new translators, 4 new developers and a new documentation person! It is hoped that the new collaborative platform will make new contributions more easily shared and discussed and will bring new maintainers to the project. Those people are now documented in a special section of the program, hopefully I haven't forgotten anyone.

To install Monkeysign, see the completely revamped install documentation. If you are interested in contributing to the project, you can find more information in the new contributing section. And we have started a new usage manual that would welcome your review, feedback and improvements.

Enjoy this new release of Monkeysign!