f0063afa71
* Due to the org-babel bug which breaks Python source code examples beyond the most simple snippets, ported the HOWTO to a source format which I *know* for sure won't break it. * Details of the org-mode bug is in https://dev.gnupg.org/T3977 * DITA project uses DITA-OT 2.x (2.4 or 2.5, IIRC) with support for DITA 1.3. * source files were written with oXygenXML Editor 20.0, hence the oXygenXML project file in the directory; however only the .ditamap and .dita files are required to generate any output with the DITA-OT. Signed-off-by: Ben McGinnes <ben@adversary.org>
23 lines
1.4 KiB
XML
23 lines
1.4 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE dita PUBLIC "-//OASIS//DTD DITA Composite//EN" "ditabase.dtd">
|
|
<dita>
|
|
<topic id="topic_llw_kzx_5db">
|
|
<title>The python-gnupg package maintained by Vinay Sajip</title>
|
|
<body>
|
|
<p>This is arguably the most popular means of integrating GPG with Python. The package
|
|
utilises the <codeph>subprocess</codeph> module to implement wrappers for the
|
|
<cmdname>gpg</cmdname> and <cmdname>gpg2</cmdname> executables normally invoked on the command
|
|
line (<cmdname>gpg.exe</cmdname> and <cmdname>gpg2.exe</cmdname> on Windows).</p>
|
|
<p>The popularity of this package stemmed from its ease of use and capability in providing the
|
|
most commonly required features.</p>
|
|
<p>Unfortunately it has been beset by a number of security issues in the past; most of which
|
|
stemmed from using unsafe methods of accessing the command line via the
|
|
<codeph>subprocess</codeph> calls. While some effort has been made over the last two to
|
|
three years (as of 2018) to mitigate this, particularly by no longer providing shell access
|
|
through those subprocess calls, the wrapper is still somewhat limited in the scope of its
|
|
GnuPG features coverage.</p>
|
|
<p>The python-gnupg package is available under the MIT license.</p>
|
|
</body>
|
|
</topic>
|
|
</dita>
|