Bug#846892: pkg-mozilla-archive-keyring: build generates a keybox file instead of a gpg transferable key

Mattia Rizzolo mattia at debian.org
Tue Aug 8 15:00:26 UTC 2017


Control: severity -1 serious

On Sat, Dec 03, 2016 at 11:33:25PM +0000, Clint Adams wrote:
> With gnupg 2 as the default, the $(KEYRING) target in debian/rules
> generates a GPG keybox database version 1 instead of an RFC4880
> OpenPGP Transferable Key, or "GPG key public ring".
> 
> All of the other keyrings in /etc/apt/trusted.gpg.d or /usr/share/keyrings
> are in the latter format.

That's actually a problem, as a simple rebuild creates an unusable file.

> Also I suspect that this has an effect on the package's reproducibility

It does :)

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/attachments/20170808/73e524f0/attachment.sig>


More information about the pkg-mozilla-maintainers mailing list