Package: signing-party Version: 1.1.4-1 Severity: normal File: /usr/bin/caff
caff seems to have its own hard-coded list of keyservers, rather than using the same ones I have gpg configured to use. This seems a gratuitous duplication of configuration. Even once I've manually imported the keys I want to sign, and run caff with --keys-from-gnupg (which remains misdocumented for > 1 year?!), it fails: [INFO] Key 3C11B337 imported from your normal GnuPGHOME. [INFO] Key D3A4BDE1 imported from your normal GnuPGHOME. [INFO] Key 81E773D5 imported from your normal GnuPGHOME. [INFO] Key AF060C5A imported from your normal GnuPGHOME. [INFO] Key 76B9B739 imported from your normal GnuPGHOME. [INFO] Key EDF008C5 imported from your normal GnuPGHOME. [INFO] Key 72DC07B5 imported from your normal GnuPGHOME. [INFO] Key 1F69BFFE imported from your normal GnuPGHOME. [INFO] Key BAF91EF5 imported from your normal GnuPGHOME. [INFO] Key D9AB457E imported from your normal GnuPGHOME. [INFO] Key 558FB8DD imported from your normal GnuPGHOME. [INFO] Key 028756FF imported from your normal GnuPGHOME. [INFO] Key 4AC8EE1D imported from your normal GnuPGHOME. [INFO] Key D38F11A3 imported from your normal GnuPGHOME. [INFO] Key 2AD59860 imported from your normal GnuPGHOME. [INFO] Key CAF14EFC imported from your normal GnuPGHOME. [INFO] Key A86F9E47 imported from your normal GnuPGHOME. [INFO] Key 95206DD3 imported from your normal GnuPGHOME. [INFO] Key 50A65533 imported from your normal GnuPGHOME. [INFO] fetching keys, this will take a while... [NOTICE] Import failed for: 2AD59860 558FB8DD 028756FF 4AC8EE1D BAF91EF5 EDF008C5 D38F11A3 72DC07B5 50A65533 A86F9E47 95206DD3 D9AB457E CAF14EFC 1F69BFFE. Some keys could not be imported - continue anyway? [y/N] ^C I don't understand this failure at all, the same keys that it first said it imported from gpg it then says it failed to import. In the above example, I had deleted ~/.caff to start fresh. Personally, I fell back to manual signing at this point; having never seen a compelling value in the email address verification thing caff does. -- System Information: Debian Release: jessie/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing') Architecture: i386 (i686) Kernel: Linux 3.10-2-686-pae (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages signing-party depends on: ii gnupg 1.4.14-1 ii libc6 2.17-92 ii libclass-methodmaker-perl 2.18-1+b1 ii libgnupg-interface-perl 0.46-3 ii libmailtools-perl 2.12-1 ii libmime-tools-perl 5.503-1 ii libterm-readkey-perl 2.30-4+b2 ii libtext-template-perl 1.45-2 ii perl 5.14.2-21 ii qprint 1.0.dfsg.2-2 Versions of packages signing-party recommends: ii dialog 1.2-20130523-1 ii libgd-gd2-noxpm-perl 1:2.46-2.1 ii libintl-perl 1.23-1 ii libpaper-utils 1.1.24+nmu2 ii libtext-iconv-perl 1.7-5 ii postfix [mail-transport-agent] 2.10.0-3 ii recode 3.6-20 ii whiptail 0.52.15-2+b1 Versions of packages signing-party suggests: ii imagemagick 8:6.7.7.10-5 ii mutt 1.5.21-6.3 ii texlive-latex-recommended 2013.20130722-1 pn wipe <none> -- no debconf information -- see shy jo
signature.asc
Description: Digital signature
