[Python-apps-commits] r14326 - in packages/alot/trunk/debian (5 files)

[jljusten-guest at users.alioth.debian.org]

    Date: Tuesday, August 22, 2017 @ 07:55:58
  Author: jljusten-guest
Revision: 14326

debian: Add PGP signature validation for tarball

Signed-off-by: Jordan Justen <jordan.l.justen at intel.com>

Added:
  packages/alot/trunk/debian/upstream/
  packages/alot/trunk/debian/upstream/signing-key.asc
Modified:
  packages/alot/trunk/debian/changelog
  packages/alot/trunk/debian/source/lintian-overrides
  packages/alot/trunk/debian/watch

Modified: packages/alot/trunk/debian/changelog
===================================================================
--- packages/alot/trunk/debian/changelog	2017-08-22 07:55:49 UTC (rev 14325)
+++ packages/alot/trunk/debian/changelog	2017-08-22 07:55:58 UTC (rev 14326)
@@ -1,6 +1,8 @@
 alot (0.6-1) UNSTABLE; urgency=low
 
   * New upstream release
+  * Add PGP signature validation to watch file with pazz's signature
+    with fingerprint B7838D65FEE80DED1DCA494D94340367D7D6C5AA.
 
  -- Jordan Justen <jordan.l.justen at intel.com>  Sun, 20 Aug 2017 15:40:54 -0700
 

Modified: packages/alot/trunk/debian/source/lintian-overrides
===================================================================
--- packages/alot/trunk/debian/source/lintian-overrides	2017-08-22 07:55:49 UTC (rev 14325)
+++ packages/alot/trunk/debian/source/lintian-overrides	2017-08-22 07:55:58 UTC (rev 14326)
@@ -2,9 +2,5 @@
 # This should be removed as part of git migration.
 alot source: vcs-field-uses-insecure-uri
 
-# Requested that upstream sign tarballs:
-# https://github.com/pazz/alot/issues/1077
-alot source: debian-watch-may-check-gpg-signature
-
 # TODO: add autopkgtest support
 alot source: testsuite-autopkgtest-missing

Added: packages/alot/trunk/debian/upstream/signing-key.asc
===================================================================
--- packages/alot/trunk/debian/upstream/signing-key.asc	                        (rev 0)
+++ packages/alot/trunk/debian/upstream/signing-key.asc	2017-08-22 07:55:58 UTC (rev 14326)
@@ -0,0 +1,35 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+
+mQGiBEEnkrkRBADrnCNOx2V2+cD15L71S7LuxQBQSpl+/bMF8x5XHCVEYjTvq8Qo
+8n/PpKH9rw/EMjTDhbapDCrovruqbOuSZaI1PcKNSGCZGkelrV+yAr6I96qs2FNu
+9ZlYmUAh7iaGKeE2XHtprNuKBKnqd08dka38qoqCEjFHPDYIpRDjbjlm+wCg1pTv
+vjnUhTpeACYDYHjz22r2YcsEANLhOF69HYqlOhmSn8erFCjnnh+tx8scgB0FKE6K
+Hzi9VhHU1YtE582QAd9GE6TATMAiIpjjS1d9ThtQq7KU19qwHO0pWcjT6VPywlp9
+EeEMhuiOl0XwcyXF6QRsyrjDyxutB06nDloLsJOaBXkJoOunC7Fnlcbirtv/N05d
+lwa+A/9b1aENWx7rfgNDoOpDb30wf1vS9D28nJrsjZulKdhW2+ynOKDNE0Ctg49d
+aGGhIFEAJT+G1iPe2RLrJZNWtG/bFUy8J5WGOTdA0DDEBCSTfCOEK+5n+S0lrvnH
+fgQrGD0pyx+1kspLGcC3czhY4mpsw//027ei1MIY/ZX1SfT/vbQeUGF0cmljayBU
+b3R6a2UgPHBhenp0ZUB1bmkuZGU+iGQEExECACQCGwMGCwkIBwMCAxUCAwMWAgEC
+HgECF4AFAlYvSkYFCRqFJXcACgkQlDQDZ9fWxaooYwCgyYITpGij358u+EIcxI8P
+9zVAc/IAn1v3Vs75Bir78WS6oxwXZRQbtP8YtC1QYXRyaWNrIFRvdHprZSA8cGF0
+cmlja3RvdHprZUBnb29nbGVtYWlsLmNvbT6IaAQTEQIAKAIbAwYLCQgHAwIGFQgC
+CQoLBBYCAwECHgECF4AFAlYvSkYFCRqFJXcACgkQlDQDZ9fWxao22wCePRE5m5MJ
+JAmWVYjfd8njeSN4WZUAn1V0fslonwDg84bC3Lg6qhGhrwAytDBQYXRyaWNrIFRv
+dHprZSAoZ21haWwpIDxwYXRyaWNrdG90emtlQGdtYWlsLmNvbT6IZQQTEQIAJQIb
+AwYLCQgHAwIEFQIIAwMWAgECHgECF4AFAlYvSkYFCRqFJXcACgkQlDQDZ9fWxap0
+pwCgr3Lm5DPST3SdlyolqXNwB1JAnCoAn38Rzi8BVORQVGW37fZYkozce/uBuQIN
+BEEnksYQCACYnJJ3pDPLmRdNIg4xq6iTuEIwVIafOQdPs3HgL3IEa6DAyfEHcpQC
+huFVAxQWwUoHa0w/iBWcU4aHda669jbT8MMYfWoeJS/PpzjEe0nla2gQao6E30R4
+lJrSy3+WBvRuF+PuYc0pkzDbyT5FXXD75Nsd5RvteSpzH+2HldT7+DU8qJFgf57M
+8A6sBgfgvPlXSP2hAEAc5u/0swBSt5Qh/uFg25R0Ir1Ps1+HkyJHo/Od+1d3hn/C
+m26+f2JdYtCEj4yyUM/VMX6u4tPLfm2oAUeU21X+TEEsND6XPc/53Qw4paCbN2u6
+Tcoed5I6wcRMIpGobWNcdRY9QA3eGVxLAAMGCACVV9M/WtM2v/aUYBQkM8Jp1SdV
+IxLpoz1zmtnx6fmcWrl74BsZFYTZROe/KgC+7qQ3g3zG8QUGvW6owqLcRDuI1XTn
+jjGAsUb9+YmcDvMkHI852+LIDLE7oIqpPoLCfOcq9yuUGxvNVzV1UeVwm2kv1iO0
+KZM5Ok4hNNjf5DegrS1TnUCNJOw3nqFM4/Pl+xgZawEObhCUoYnlJh72Z31uOx86
+b1Mh+WFqFEf197nrZc9H3fCxCFzNOoWFJqpDq9750AswJG56GUUMnGfSxD3gTyTT
+FpG1QAHOCpCiIvCz9sFFTN91tILScMgcpYFXd31J/Nkf2htYc2+DRUnqSEPEiE8E
+GBECAA8CGwwFAlJFVE8FCRTgKHYACgkQlDQDZ9fWxap9wgCfbzuP22rpcO+ON5GS
+SDIgHJyhQ5AAnRBs8WqB/uWwnrgTSEqI77QIi++t
+=wBAU
+-----END PGP PUBLIC KEY BLOCK-----

Modified: packages/alot/trunk/debian/watch
===================================================================
--- packages/alot/trunk/debian/watch	2017-08-22 07:55:49 UTC (rev 14325)
+++ packages/alot/trunk/debian/watch	2017-08-22 07:55:58 UTC (rev 14326)
@@ -1,3 +1,4 @@
 version=3
 
+opts="pgpsigurlmangle=s/(.+)\/archive\/v?(\d\S*)\.tar\.gz/$1\/releases\/download\/$2\/alot-$2.tar.gz.asc/," \
 https://github.com/pazz/alot/tags .*/v?(\d\S*)\.tar\.gz