Bug#800704: [uscan] please allow multiple pgpsigmangleurl for a single line

[Mattia Rizzolo]

On Wed, Oct 07, 2015 at 09:38:25PM +0900, Osamu Aoki wrote:
> Hi,
> 
> PGP signature check can be used if only we have such file available in
> the upstream archive.

of course, there is :)

> > uscan.pl warning: Unable to set versionmode=prev for the line without opts=pgpmode=prev
> >   in debian/watch, skipping:
> 
> I understand that this error message can be improved.

yes please :)

> >   https://launchpad.net/inkscape (?:.*/)?inkscape[_\-\.]?(\d\S+)\.(?:tgz|txz|tar\.(?:bz2|gz|z2|xz)).(?:asc|pgp|gpg|sig) previous uupdate
> > -- Scan finished
> 
> There is no link from https://launchpad.net/inkscape as I see web page.
> uscan can not find sig file.
> 
>    !!! WAIT !!!  !!! I FIND IT !!!
> 
> Why didn't you use this page to make uscan watch file.
> 
>   https://launchpad.net/inkscape/+download

erm, because, you see, ... -.-
Really I didn't even think about it :)

> This watch URL with the rest the same as your watch file and getting the
> public key from https://inkscape.org/en/download/

Yeah, already did that long ago:
https://anonscm.debian.org/cgit/pkg-multimedia/inkscape.git/commit/?id=73bf6fe4fa96a53b07b60a1bf18e9b25ab91844c

> $ uscan
> pkg: Newer version (0.91) available on remote site:
>   https://launchpad.net/inkscape/0.91.x/0.91/+download/inkscape-0.91.tar.gz
>   (local version is 0.0)
> Successfully downloaded updated package inkscape-0.91.tar.gz
> Successfully symlinked ../inkscape-0.91.tar.gz to ../pkg_0.91.orig.tar.gz.
> pkg: Newer version (0.91) available on remote site:
>   https://launchpad.net/inkscape/0.91.x/0.91/+download/inkscape-0.91.tar.gz.sig
>   (local version is 0~0~0~0~0~0dummy)
> gpgv: Signature made Wed 28 Jan 2015 04:57:21 PM JST using DSA key ID E0E67611
> gpgv: Good signature from "Bryce Harrington <bryce.harrington at ubuntu.com>"
> gpgv:                 aka "Bryce Harrington <bryce at bryceharrington.org>"
> gpgv:                 aka "Bryce Harrington <bryce at canonical.com>"
> gpgv:                 aka "Bryce Harrington <bryce.harrington at canonical.com>"
> gpgv:                 aka "Bryce Harrington <bryce at ubuntu.com>"
> Successfully downloaded updated package inkscape-0.91.tar.gz.sig
> uupdate: debian/source/format is "3.0 (quilt)".
> uupdate: Auto-generating pkg_0.0-1.debian.tar.xz
> dpkg-source: info: extracting pkg in pkg-0.91
> dpkg-source: info: unpacking pkg_0.91.orig.tar.gz
> dpkg-source: info: unpacking pkg_0.91-1.debian.tar.xz
> Remember: Your current directory is changed back to the old source tree!
> Do a "cd ../pkg-0.91" to see the new source tree and
> 
> So it works.  (Obviously, I am testing from a bogus test package.)

Well, you could have tested it from the current git repo or the actual
package, that would have been maybe even more easy, but really thank you
for testing!

> Maybe adding how to marge two keys into one keyring may be good idea.

Fiddling with gpg is never easy/nice.
Adding a point in the manpage would be a good idea.

> Also enabling just to check signature with existing tarball is nice.

your call, but yes :)

> Maybe after these, let me ask merging this branch into main.

\o/


I applied everything and your suggestion in a separated branch, I'll
merge it once this new uscan reaches jessie-bpo :)

https://anonscm.debian.org/cgit/pkg-multimedia/inkscape.git/commit/?h=watch&id=4ec4770938e894e1c2f9a840dfbfce7817141d54

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  http://mapreri.org                              : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/devscripts-devel/attachments/20151007/618b3916/attachment.sig>