Package: devscripts
Version: 2.20.5
Severity: normal

Hi,

dscverify ignores the GPGHOME environment variable. Instead it hardcodes
$ENV{HOME}/.gnupg/trustedkeys.gpg.

Second bug: modern gpg doesn't use trustedkeys.gpg but pubring.kbx.

It seems that trustedkeys.gpg is an implementation detail of gpg and
should not be relied upon.

Thanks!

cheers, josch

Reply via email to