Package: devscripts
Version: 2.23.7
Severity: normal
File: /usr/bin/dscverify
When running dscverify on one of my own packages,
so the dsc is signed by me and successfully verify the sig,
dscverify --keyring ~/.gnupg/pubring.gpg x2gpm_11-0.1.dsc
I get an error
dscverify: no file spec lines in x2gpm_11-0.1.dsc
Validation FAILED!!
The dsc file does contains "Files:" section and I hoped dscverify
would check the hashes listed. It did so in the past, for
instance in version 2.20.1.
I suspect this problem is from change at version 2.21.6.
When gpg2 (version 2.0.28) is run without --verify (as dscverify
did previously), gpg prints the dsc contents to stdout, and
dscverify captures that into "$out". Now with --verify, that
doesn't happen.
Perhaps process_files() shouldn't have depended on gpg output
including the dsc contents, but instead slurp the dsc file
unconditionally at the desired point.
