Hi Frank, all, fwiw, a colleague of mine just debugged this (with patch), and added a bug report on reprepro:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=854480 Fwiw2, this feature came in with --- dpkg (1.18.5) unstable; urgency=medium (...) * Perl modules: (...) - Allow detached upstream orig tarball signatures when extracting version 1.0 non-native source packages. - Include upstream orig tarball signatures in source packages. See #759478. --- and here's the link to the Bug report discussing it in length: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759478 Hth! S
