Package: aptly
Version: 1.4.0+ds1-4+b4
Severity: normal

Hello,

thank you for maintaining aptly!

Trying to use aptly with keyrings generated with the current version of
gpg fails with semi-obscure gpg errors:

gpgv: Signature made Sat 18 Dec 2021 11:39:50 CET using RSA key ID 22F3D138
gpgv: [don't know]: invalid packet (ctb=00)
gpgv: keydb_search failed: invalid packet
gpgv: Can't check signature: public key not found

This is mentioned in a couple of upstream bugs:

* https://github.com/aptly-dev/aptly/issues/838
* https://github.com/aptly-dev/aptly/issues/822

Given that gpg2 is the default version of gpg in Debian, this
invalidates, for example, following the tutorial at
https://www.aptly.info/tutorial/mirror/

I would consider this not a problem of Debian and rather a problem of
aptly, though.


Thanks,

Enrico


-- System Information:
Debian Release: 11.2
  APT prefers stable-security
  APT policy: (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-10-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_IE:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages aptly depends on:
ii  bzip2     1.0.8-4
ii  gnupg     2.2.27-2
ii  gpgv      2.2.27-2
ii  libc6     2.31-13+deb11u2
ii  xz-utils  5.2.5-2

aptly recommends no packages.

Versions of packages aptly suggests:
ii  graphviz  2.42.2-5

-- no debconf information

Reply via email to