From: Theo Buehler <tb@theobuehler.org>
Subject: Re: [NEW] security/sequoia-sq (and dependency devel/capnproto)
To: Volker Schlecht <openbsd-ports@schlecht.dev>
Cc: ports <ports@openbsd.org>
Date: Mon, 28 Jul 2025 06:20:52 +0200

On Sun, Jul 27, 2025 at 08:48:08PM +0200, Volker Schlecht wrote:
> I'd like to propose to import sequoia-sq (https://sequoia-pgp.org)
> 
> "sq is a command-line tool for working with OpenPGP artifacts with a
> focus on usability, security, and robustness"
> 
> It requires Cap'n Proto (https://capnproto.org/) as a build dependency.
> 
> "Cap'n Proto is a fast data interchange format and capability-based RPC
> system."
> 
> Tested on amd64 so far. Thoughts? Opinions? oks?

If you add

# ring-v0.17 does not support this arch
NOT_FOR_ARCHS =		sparc64

to the top of sequoia-hq, I'm in principle ok with importing these.

Before you do so, however, it would be good if someone could grep bulk
build logs to check if there is something that might pick up capnproto
at configure time. I won't realistically be able to do this before early
August.

I see a bunch of test failures for both ports on aarch64:

2: [ FAIL ] async-unix-test.c++:941: UnixEventPort whenWriteDisconnected() (441 μs)
2: [ FAIL ] async-unix-test.c++:981: UnixEventPort FdObserver(..., flags=0)::whenWriteDisconnected() (232 μs)
2: [ FAIL ] async-io-test.c++:176: legacy test: AsyncIo/UnixSocket (332 μs)
2: [ FAIL ] async-io-test.c++:2925: OS OneWayPipe whenWriteDisconnected() (205 μs)
2: [ FAIL ] async-io-test.c++:2940: OS TwoWayPipe whenWriteDisconnected() (157 μs)
2: [ FAIL ] async-io-test.c++:2964: import socket FD that's already broken (157 μs)
2: [ FAIL ] filesystem-disk-test.c++:285: DiskFile (1383 μs)
2: [ FAIL ] filesystem-disk-test.c++:826: DiskDirectory replace file with directory (2089 μs)

failures:
    integration::sq_key_import_export::sq_key_import_export
    integration::sq_key_subkey_bind::bind_bare
    integration::sq_key_subkey_delete::sq_key_subkey_delete
    integration::sq_key_userid::sq_key_userid_revoke_thirdparty
    integration::sq_pki_link_authorize::retract_explicit

test result: FAILED. 220 passed; 5 failed; 3 ignored; 0 measured; 0 filtered out; finished in 504.19s