Bug#768345: devscripts: upstream signature verification fails with gpg 2.1

Axel Beckert abe at debian.org
Wed Dec 24 14:54:37 UTC 2014


Hi,

Daniel Kahn Gillmor wrote:
> On 12/16/2014 03:51 PM, James McCoy wrote:
> > On Dec 16, 2014 2:57 PM, "Daniel Kahn Gillmor" <dkg at fifthhorseman.net> wrote:
> >> On Thu 2014-11-06 12:20:14 -0500, Daniel Kahn Gillmor wrote (in #768345):
> >>> when gpg2 2.1 is installed (currently available in debian
> >>> experimental), uscan --verbose fails to check the upstream signature
> >>> when the upstream signing key is ascii-armored.

I ran into this, too.

> 2.1 is unlikely to be released with jessie, but i am hoping to backport
> relatively early in the jessie cycle so that people can have access to
> OpenPGP ECC.
> 
> I suppose if devscripts gets backported as well, we can just rely on
> jessie-backports users to upgrade both together.

Adding a "Breaks: devscripts (<= 2.14.11)" or similar to the gnupg2
package in Experimental should fix that issue.

		Regards, Axel
-- 
 ,''`.  |  Axel Beckert <abe at debian.org>, http://people.debian.org/~abe/
: :' :  |  Debian Developer, ftp.ch.debian.org Admin
`. `'   |  1024D: F067 EA27 26B9 C3FC 1486  202E C09E 1D89 9593 0EDE
  `-    |  4096R: 2517 B724 C5F6 CA99 5329  6E61 2FF9 CD59 6126 16B5



More information about the devscripts-devel mailing list