Bug#974670: lintian-brush: "Re-export upstream signing key without extra signatures" is not optimal

2020-11-17 Thread Jelmer Vernooij 
tags 974670 +confirmed
thanks

On Fri, Nov 13, 2020 at 04:42:57PM +0100, Xavier Guimard wrote:
> when launching lintian-brush in apache2 source directories, it says that
> upstream signing key were optimized but I still have:
> 
>   public-upstream-key-not-minimal upstream/signing-key.asc has 2 extra 
> signature(s) for keyid 193F180AB55D9977
>   public-upstream-key-not-minimal upstream/signing-key.asc has 283 extra 
> signature(s) for keyid 7D6DBFD1F08E012A
>   public-upstream-key-not-minimal upstream/signing-key.asc has 63 extra 
> signature(s) for keyid 8B3A601F08C975E5

Thanks for the report. I can confirm it here. It's a little bit
surprising since I think we're specifying the right flags
(import-minimal):

  import-minimal
  Import the smallest key possible. This removes all signatures
  except the most recent self-signature on each user ID. This
  option is the same as running the --edit-key command "minimize"
  after import.  Defaults to no.

Jelmer


signature.asc
Description: PGP signature

Bug#974670: lintian-brush: "Re-export upstream signing key without extra signatures" is not optimal

2020-11-13 Thread Xavier Guimard 
Package: lintian-brush
Version: 0.86
Severity: normal

Hi,

when launching lintian-brush in apache2 source directories, it says that
upstream signing key were optimized but I still have:

  public-upstream-key-not-minimal upstream/signing-key.asc has 2 extra 
signature(s) for keyid 193F180AB55D9977
  public-upstream-key-not-minimal upstream/signing-key.asc has 283 extra 
signature(s) for keyid 7D6DBFD1F08E012A
  public-upstream-key-not-minimal upstream/signing-key.asc has 63 extra 
signature(s) for keyid 8B3A601F08C975E5

Cheers and thanks for this tool !

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (900, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-1-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_WARN
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages lintian-brush depends on:
ii  devscripts   2.20.4
ii  python3  3.8.6-1
ii  python3-breezy   3.1.0-6
ii  python3-debian   0.1.38
ii  python3-debmutate0.14
ii  python3-distro-info  0.24
ii  python3-dulwich  0.20.2-1
ii  python3-iniparse 0.4-3
ii  python3-ruamel.yaml  0.16.12-2

Versions of packages lintian-brush recommends:
ii  decopy   0.2.4.4-0.1
ii  dos2unix 7.4.1-1
ii  gpg  2.2.20-1
ii  libdebhelper-perl13.2.1
ii  lintian  2.101.0
ii  python3-asyncpg  0.21.0-1+b1
ii  python3-bs4  4.9.3-1
ii  python3-levenshtein  0.12.0-5+b2
ii  python3-pyinotify0.9.6-1.3
ii  python3-toml 0.10.1-1

Versions of packages lintian-brush suggests:
pn  breezy-debian  
pn  gnome-pkg-tools
ii  po-debconf 1.0.21
ii  postgresql-common  221

-- no debconf information