Bug#866998: pgpmode=next/previous not working as expected?

[Laurent Bigonville]

Package: devscripts
Version: 2.17.6
Severity: normal
File: /usr/bin/uscan

Hi,

With the following debian/watch file, it cannot verify the signature of
the tarball:

version=4
opts="pgpmode=next" \
https://red.libssh.org/projects/libssh/files \
    /attachments/download/(?:\d+)/libssh- at ANY_VERSION@@ARCHIVE_EXT@ debian
opts="pgpmode=previous" \
https://red.libssh.org/projects/libssh/files \
    /attachments/download/(?:\d+)/libssh- at ANY_VERSION@.tar.asc previous

I get the following output:

bigon at valinor:~/Development/Debian/libssh [git: debian]$ LC_ALL=C uscan --destdir ../tarballs  
uscan: Newest version of libssh on remote site is 0.7.5, local version is 0.7.3
uscan:    => Newer package available from
      https://red.libssh.org/attachments/download/218/libssh-0.7.5.tar.xz
dpkg: error: version '1:-0' has bad syntax: version number is empty
dpkg: error: version '1:-0' has bad syntax: version number is empty
uscan: Newest version of libssh on remote site is 0.7.5, specified download version is 0.7.5
gpgv: Signature made Thu Apr 13 16:35:40 2017 CEST
gpgv:                using RSA key 8DFF53E18F2ABC8D8F3C92237EE0FC4DCC014E3D
gpgv: BAD signature from "Andreas Schneider <asn at cryptomilk.org>"
uscan warn: OpenPGP signature did not verify.


Downloading and checking the signature manually is working OK

Regards,

Laurent Bigonville

-- Package-specific info:

--- /etc/devscripts.conf ---

--- ~/.devscripts ---
DEBCHANGE_RELEASE_HEURISTIC=changelog
DEBCHANGE_MULTIMAINT_MERGE=yes
DEBCHANGE_MAINTTRAILER=no

-- System Information:
Debian Release: buster/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable'), (1, 'experimental-debug'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.9.0-3-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_BE.UTF-8, LC_CTYPE=fr_BE.UTF-8 (charmap=UTF-8), LANGUAGE=fr_BE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages devscripts depends on:
ii  dpkg-dev              1.18.24
ii  libc6                 2.24-12
ii  libfile-homedir-perl  1.00-1
ii  perl                  5.24.1-5
ii  python3               3.5.3-3

Versions of packages devscripts recommends:
ii  apt                         1.4.6
ii  at                          3.1.20-3
ii  curl                        7.52.1-5
ii  dctrl-tools                 2.24-2+b1
ii  debian-keyring              2017.05.28
ii  dput                        0.12.1
ii  equivs                      2.0.10
ii  fakeroot                    1.21-3.1
ii  file                        1:5.30-1
ii  gnupg                       2.1.18-8
ii  gnupg2                      2.1.18-8
ii  libdistro-info-perl         0.15
ii  libdpkg-perl                1.18.24
ii  libencode-locale-perl       1.05-1
ii  libgit-wrapper-perl         0.047-1
ii  liblist-compare-perl        0.53-1
ii  liblwp-protocol-https-perl  6.06-2
ii  libsoap-lite-perl           1.20-1
ii  liburi-perl                 1.71-1
ii  libwww-perl                 6.15-1
ii  licensecheck                3.0.29-1
ii  lintian                     2.5.51
ii  man-db                      2.7.6.1-2
ii  patch                       2.7.5-1+b2
ii  patchutils                  0.3.4-2
ii  python3-debian              0.1.30
ii  python3-magic               1:5.30-1
ii  sensible-utils              0.0.9
ii  strace                      4.15-2
ii  unzip                       6.0-21
ii  wdiff                       1.2.2-2
ii  wget                        1.19.1-4
ii  xz-utils                    5.2.2-1.2+b1

Versions of packages devscripts suggests:
pn  adequate                     <none>
ii  autopkgtest                  4.4
pn  bls-standalone               <none>
ii  bsd-mailx [mailx]            8.1.2-0.20160123cvs-4
ii  build-essential              12.3
pn  check-all-the-things         <none>
pn  cvs-buildpackage             <none>
pn  devscripts-el                <none>
pn  diffoscope                   <none>
pn  disorderfs                   <none>
pn  dose-extra                   <none>
pn  duck                         <none>
pn  faketime                     <none>
pn  gnuplot                      <none>
ii  gpgv                         2.1.18-8
pn  how-can-i-help               <none>
ii  libauthen-sasl-perl          2.1600-1
ii  libfile-desktopentry-perl    0.22-1
pn  libnet-smtps-perl            <none>
pn  libterm-size-perl            <none>
ii  libtimedate-perl             2.3000-2
pn  libyaml-syck-perl            <none>
pn  mozilla-devscripts           <none>
pn  mutt                         <none>
ii  openssh-client [ssh-client]  1:7.5p1-5
ii  piuparts                     0.77
ii  ratt                         0.0~git20160202.0.a14e2ff-1+b2
pn  reprotest                    <none>
ii  svn-buildpackage             0.8.6
pn  w3m                          <none>

-- no debconf information