Your message dated Sat, 16 May 2009 18:02:02 +0000
with message-id <[email protected]>
and subject line Bug#161541: fixed in debsigs 0.1.15
has caused the Debian Bug report #161541,
regarding debsigs -K broken
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
161541: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=161541
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: debsigs
Version: 0.1.13
Severity: normal
There is something wrong with the debsigs -K option, as least as it is
used by debsigs-autosign. If I run "debsigs-autosign --origin=788A3F4C
origin" and enter the filename of a deb, debsigs complained that gpg
exited with error code 2.
I can reproduce the gpg failure like this:
j...@dragon:~>echo |/usr/bin/gpg --openpgp --detach-sign --default-key 788A3F4C
--secret-keyring /home/joey/.gnupg/secring.pgp
gpg: keyblock resource `/home/joey/.gnupg/secring.pgp': file open error
You need a passphrase to unlock the secret key for
user: "Joey Hess <[email protected]>"
1024-bit DSA key, ID 788A3F4C, created 1999-09-08
<elided sig here..>
zsh: done echo |
zsh: exit 2 /usr/bin/gpg --openpgp --detach-sign --default-key 788A3F4C
--secret-keyring
If I remove the --secret-keyring, it completes with error. Maybe it doesn't
like --secret-keyring pointing to a keyring it does not know about?
(BTW, debsigs-autosign has the getopt problem too..)
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux dragon 2.4.19 #1 Thu Sep 5 18:51:06 EDT 2002 i586
Locale: LANG=C, LC_CTYPE=C
Versions of packages debsigs depends on:
ii binutils 2.13.90.0.4-1 The GNU assembler, linker and bina
ii perl 5.8.0-12 Larry Wall's Practical Extraction
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: debsigs
Source-Version: 0.1.15
We believe that the bug you reported is fixed in the latest version of
debsigs, which is due to be installed in the Debian FTP archive:
debsigs_0.1.15.dsc
to pool/main/d/debsigs/debsigs_0.1.15.dsc
debsigs_0.1.15.tar.gz
to pool/main/d/debsigs/debsigs_0.1.15.tar.gz
debsigs_0.1.15_all.deb
to pool/main/d/debsigs/debsigs_0.1.15_all.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Pentchev <[email protected]> (supplier of updated debsigs package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Sat, 16 May 2009 18:27:40 +0300
Source: debsigs
Binary: debsigs
Architecture: source all
Version: 0.1.15
Distribution: unstable
Urgency: low
Maintainer: Peter Pentchev <[email protected]>
Changed-By: Peter Pentchev <[email protected]>
Description:
debsigs - toolset for applying cryptographic signatures to Debian packages
Closes: 98088 161541 161680 163643 175337 175338 457319 522257
Changes:
debsigs (0.1.15) unstable; urgency=low
.
* New maintainer. Closes: #522257
* Fix the changelog format by removing the Vim formatting codes.
* Do not install the empty /usr/sbin directory and remove
the debian/dirs file altogether.
* Convert the copyright file to the machine-parseable format and
add my copyright notice.
* Bump the debhelper compatibility level to 7:
- store it in debian/compat
- use debian/debsigs as the build directory instead of debian/tmp
- add misc:Depends to the binary package
- remove the dh_installmanpages invocation, all the manual pages
are installed by the Perl build framework itself
- use dh_prep instead of dh_clean in the "install" target
* Remove the debian/debsigs.undocumented file - both programs listed
there have already been documented.
* Bump Standards-Version to 3.8.1:
- move debhelper to Build-Depends from Build-Depends-Indep
* Add the Vcs-Svn and Vcs-Browser source control fields.
* Make the short description a noun phrase.
* Clean up the rules file:
- do not ignore "make clean" errors
- remove some commented-out cruft
- remove the OPTIMIZE flags to Makefile.PL - no C code here
- pass -k to dh_clean in the "install" target
- move some dh_* invocations from the "binary-indep" to the "install"
target to mimic the behavior of the dh(1) tool
- remove some dh_* invocations that simply do not apply
- finally, minimize this file using debhelper 7's dh(1) tool :)
* Stop debsigs-autosign from always passing key ID's and keyring paths
to debsigs; gpg is smart enough to figure out which key to use and
where to find it. Closes: #161541
* Make the test script include all the modules.
* Use strict mode and enable Perl warnings for all modules and scripts.
* Set the version of the debsigsmain module to the package's version.
* Bump the version of all the other modules.
* Add my copyright notice to the modules.
* Add -h and -V options and syntax() and version() functions to
all the executable scripts. Closes: #175337, #175338
* Fix a misspelled variable name in debsigs-autosign.
* Document the signature types in the debsigs usage message and
manual page, and refer to it from the debsigs-autosign ones.
Closes: #457319
* Make the binary package recommend debsig-verify. Closes: #163643
* Teach debsigs-signchanges to extract the key ID from the changes
file if it is not specified in $DEBSIGSOPTIONS. Closes: #98088
* Rework debsigs-signchanges so it recalculates all types of checksums
listed in the changes file, not just MD5 ones.
* Add the fixup() function to the arf module to read an archive file
and remove the trailing slashes in the member names. Invoke that
function in debsigs. Closes: #161680
Checksums-Sha1:
ddc95e4790586f66efcf52b956ea53d0c00627d8 914 debsigs_0.1.15.dsc
6b3ac3527cc200ac0635901623b5592c6c8e4b5f 34820 debsigs_0.1.15.tar.gz
e24a20c9b76a197fd55aebaa8122e890ebf46361 52980 debsigs_0.1.15_all.deb
Checksums-Sha256:
5726ea8ad0af7eba266b6c5fa4b7711af71776c53aa10f7052d00727fdfb7b4f 914
debsigs_0.1.15.dsc
14c5bd5c094abb4fa8aed3f2bf8bbb9c74a80440d23997ff29728acf08ad168d 34820
debsigs_0.1.15.tar.gz
51681ec9e6c7480870e353b85532e93988c6ad5c721443b0b4232864fa6acb9d 52980
debsigs_0.1.15_all.deb
Files:
69f9753e4fbd96822258974d9627536b 914 devel optional debsigs_0.1.15.dsc
954d43d60f411c33b4828df148ea68fa 34820 devel optional debsigs_0.1.15.tar.gz
0167b98546afc0580c5cc13be73e6b3b 52980 devel optional debsigs_0.1.15_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkoO9qQACgkQMDatjqUaT923bACfe4LSNOerRYSFYn6LSX5XvYRJ
wusAoJe7SVXaXdNduAAHyAhcRbbTMSoc
=vFa6
-----END PGP SIGNATURE-----
--- End Message ---
