Package: devscripts
Version: 2.21.4
Severity: important

I am seeing this problem:

> uscan
uscan: Newest version of s3ql on remote site is 3.7.3+dfsg, local version is 
3.7.0+dfsg
uscan:  => Newer package available from:
        => 
https://github.com/s3ql/s3ql/releases/download/release-3.7.3/s3ql-3.7.3.tar.bz2
gpgv: Signature made Thu 03 Jun 2021 20:40:47 BST
gpgv:                using RSA key ED31791B2C5C1613AF388B8AD113FCAC3C4E599F
gpgv: [don't know]: invalid packet (ctb=2d)
gpgv: keydb_search failed: Invalid packet
gpgv: [don't know]: invalid packet (ctb=2d)
gpgv: keydb_search failed: Invalid packet
gpgv: Can't check signature: No public key
uscan die: OpenPGP signature did not verify. at 
/usr/share/perl5/Devscripts/Uscan/Output.pm line 60.

At first I thought that the upstream signature file was corrupted, but
it seems that gpgv can't deal with a the keyring if it is generated the
way that uscan(1) says it should be:

> gpg --output signing-key.asc --export --export-options export-minimal --armor 
> nikol...@rath.org 
> gpgv --keyring ./signing-key.asc ../s3ql-3.7.3.tar.bz2.asc 
> ../s3ql-3.7.3.tar.bz2
gpgv: Signature made Thu 03 Jun 2021 20:40:47 BST
gpgv:                using RSA key ED31791B2C5C1613AF388B8AD113FCAC3C4E599F
gpgv: [don't know]: invalid packet (ctb=2d)
gpgv: keydb_search failed: Invalid packet
gpgv: [don't know]: invalid packet (ctb=2d)
gpgv: keydb_search failed: Invalid packet
gpgv: Can't check signature: No public key

A binary keyring works fine:

> gpg --output signing-key.gpg --export --export-options export-minimal 
> nikol...@rath.org
> gpgv --keyring ./signing-key.gpg ../s3ql-3.7.3.tar.bz2.asc 
> ../s3ql-3.7.3.tar.bz2
gpgv: Signature made Thu 03 Jun 2021 20:40:47 BST
gpgv:                using RSA key ED31791B2C5C1613AF388B8AD113FCAC3C4E599F
gpgv: Good signature from "Nikolaus Rath <nikol...@rath.org>"



-- Package-specific info:

--- /etc/devscripts.conf ---
Empty.

--- ~/.devscripts ---
DEBCHANGE_RELEASE_HEURISTIC=changelog

-- System Information:
Debian Release: 11.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages devscripts depends on:
ii  dpkg-dev              1.20.9
ii  fakeroot              1.25.3-1.1
ii  file                  1:5.39-3
ii  gnupg                 2.2.27-2
ii  gpgv                  2.2.27-2
ii  libc6                 2.31-13
ii  libfile-dirlist-perl  0.05-2
ii  libfile-homedir-perl  1.006-1
ii  libfile-touch-perl    0.11-1
ii  libfile-which-perl    1.23-1
ii  libipc-run-perl       20200505.0-1
ii  libmoo-perl           2.004004-1
ii  libwww-perl           6.52-1
ii  patchutils            0.4.2-1
ii  perl                  5.32.1-4+deb11u1
ii  python3               3.9.2-3
ii  sensible-utils        0.0.14
ii  wdiff                 1.2.2-2+b1

Versions of packages devscripts recommends:
ii  apt                         2.2.4
ii  curl                        7.74.0-1.3+b1
ii  dctrl-tools                 2.24-3+b1
pn  debian-keyring              <none>
ii  dput                        1.1.0
ii  equivs                      2.3.1
pn  libdistro-info-perl         <none>
ii  libdpkg-perl                1.20.9
ii  libencode-locale-perl       1.05-1.1
pn  libgit-wrapper-perl         <none>
pn  libgitlab-api-v4-perl       <none>
pn  liblist-compare-perl        <none>
ii  liblwp-protocol-https-perl  6.10-1
pn  libsoap-lite-perl           <none>
ii  libstring-shellquote-perl   1.04-1
ii  libtry-tiny-perl            0.30-1
ii  liburi-perl                 5.08-1
pn  licensecheck                <none>
pn  lintian                     <none>
ii  man-db                      2.9.4-2
ii  patch                       2.7.6-7
pn  pristine-tar                <none>
ii  python3-apt                 2.2.1
ii  python3-debian              0.1.39
pn  python3-magic               <none>
ii  python3-requests            2.25.1+dfsg-2
pn  python3-unidiff             <none>
ii  python3-xdg                 0.27-2
ii  strace                      5.10-1
ii  unzip                       6.0-26
ii  wget                        1.21-1+b1
ii  xz-utils                    5.2.5-2

Versions of packages devscripts suggests:
pn  adequate                     <none>
pn  at                           <none>
pn  autopkgtest                  <none>
pn  bls-standalone               <none>
ii  build-essential              12.9
pn  check-all-the-things         <none>
pn  cvs-buildpackage             <none>
ii  debhelper                    13.3.4
pn  devscripts-el                <none>
pn  diffoscope                   <none>
pn  disorderfs                   <none>
pn  dose-extra                   <none>
pn  duck                         <none>
ii  faketime                     0.9.8-9
pn  gnuplot                      <none>
pn  how-can-i-help               <none>
pn  libauthen-sasl-perl          <none>
pn  libdbd-pg-perl               <none>
ii  libfile-desktopentry-perl    0.22-2
pn  libnet-smtps-perl            <none>
pn  libterm-size-perl            <none>
ii  libtimedate-perl             2.3300-2
pn  libyaml-syck-perl            <none>
ii  mailutils [mailx]            1:3.10-3+b1
pn  mmdebstrap                   <none>
pn  mozilla-devscripts           <none>
pn  mutt                         <none>
ii  openssh-client [ssh-client]  1:8.4p1-5
pn  piuparts                     <none>
pn  postgresql-client            <none>
pn  pristine-lfs                 <none>
pn  quilt                        <none>
pn  ratt                         <none>
pn  reprotest                    <none>
pn  svn-buildpackage             <none>
ii  w3m                          0.5.3+git20210102-6

-- no debconf information

Reply via email to