Re: Upgrading/changing from PGP to GnuPG for nl.*

Hi Adri,

For C News, from what I heard, it uses a file named controlperm.
Do you confirm a valid syntax for controlperm would now be:
>
nl nl-admin@stack.nl c pv nl.newsgroups
nl nl-admin@stack.nl n pv nl.newsgroups
nl nl-admin@stack.nl r pv nl.newsgroups

>
I have only one line in controlperm:
 nl nl-admin@stack.nl nrc p nl.newsgroups
 Regarding this,
this is what I found in /var/news/bin/ctl/{checkgroups,{new,rm}group}:
 # subject to $NEWSCTL/controlperm:  four fields per line, first
# a newsgroup pattern, second an author name (or "any"), third a set of
# operations ("n" newgroup, "r" rmgroup, "c" checkgroups), and fourth a set of
# flags ("p" do it iff poster's identity is pgpverified,
# "y" do it, "n" don't, "q" don't report at all, "v" include
# entire control message in report) (default "yv"); the "p" and "n" flags may
# be followed by the ID of the person permitted to pgpverify;
# the pgpverify program (not supplied) is presumed to be in $NEWSBIN

Thanks for this valuable information.

In the meantime, I've downloaded the latest version of pgpverify (1.30) from
https://ftp.isc.org/pub/pgpcontrol/pgpverify, but the version that goes with
my operating system (Fedora 40), /usr/libexec/news/pgpverify from INN-2.7.1,
says it is version 1.31.  So what is going on here?
 They are dated:
# Version 1.30, 2018-01-21
# Version 1.31, 2022-06-12
 # Changes from 1.30 -> 1.31
# -- Add a $gpg_has_allow_weak_digest_algos_flag variable to specify whether
#    gpg supports the --allow-weak-digest-algos flag.  This variable will
#    be overriden by INN::Config, if used.  GnuPG 1.4.20 and 2.0.23 introduced
#    this flag, necessary to verify the signatures of old PGP keys still in
#    use for some hierarchies.
# -- Using at least GnuPG 1.4.20 or 2.1.0 is no longer required; this version
#    of pgpverify will still work with previous versions of GnuPG.  However,
#    only GnuPG 1.x and 2.0.x will be able to validate signatures made with
#    old PGP keys.

Version 1.31 included in INN 2.7.0 and 2.7.1 is the latest one.  It just had not been reflected upstream yet.  It will probably be done along with the next update of ftp.isc.org stuff with your new key for nl.* :)
--
Julien ÉLIE
« Avez-vous remarqué qu'à table les mets que l'on vous sert vous mettent
   les mots à la bouche ? » (Raymond Devos)