Package: dpkg-dev Version: 1.13.17 Severity: wishlist Tags: patch Would be nice if dpkg-source could use "--keyring /usr/share/keyrings/debian-keyring.gpg" when this file is available. This way it wouldn't be mandatory to keep our ~/.gnupg/keyring.pub up-to-date for proper .dsc verification.
Patch attached. -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.15-1-amd64-k8 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C) Versions of packages dpkg-dev depends on: ii binutils 2.16.1cvs20060117-1 The GNU assembler, linker and bina ii cpio 2.6-11 GNU cpio -- a program to manage ar ii dpkg 1.13.17 package maintenance system for Deb ii make 3.80+3.81.rc2-1 The GNU version of the "make" util ii patch 2.5.9-4 Apply a diff file to an original ii perl [perl5] 5.8.8-3 Larry Wall's Practical Extraction ii perl-modules 5.8.8-3 Core Perl modules Versions of packages dpkg-dev recommends: ii bzip2 1.0.3-2 high-quality block-sorting file co ii gcc [c-compiler] 4:4.0.2-2 The GNU C compiler ii gcc-3.4 [c-compiler] 3.4.5-2 The GNU C compiler ii gcc-4.0 [c-compiler] 4.0.3-1 The GNU C compiler -- no debconf information
diff -ur dpkg-1.13.18.old/scripts/dpkg-source.pl dpkg-1.13.18/scripts/dpkg-source.pl --- dpkg-1.13.18.old/scripts/dpkg-source.pl 2006-04-25 11:35:47.000000000 +0200 +++ dpkg-1.13.18/scripts/dpkg-source.pl 2006-04-25 11:35:58.000000000 +0200 @@ -581,7 +581,11 @@ if ($is_signed) { if (-x '/usr/bin/gpg') { - my $gpg_command = 'gpg -q --verify '.quotemeta($dsc).' 2>&1'; + my $gpg_command = 'gpg -q --verify '; + if (-e '/usr/share/keyrings/debian-keyring.gpg') { + $gpg_command = $gpg_command.'--keyring /usr/share/keyrings/debian-keyring.gpg '; + } + $gpg_command = $gpg_command.quotemeta($dsc).' 2>&1'; my @gpg_output = `$gpg_command`; my $gpg_status = $? >> 8; if ($gpg_status) {