Previous-Subject: Bug#1088102: Please package a newer upstream release On Tue, Dec 31, 2024 at 11:57:56AM +0100, Geert Stappers wrote: > On Tue, Dec 31, 2024 at 10:59:38AM +0200, Faidon Liambotis wrote: > > > > v2.20 was released a couple of hours ago. > > Yeah, I saw something in Subject line from upstream emails. > (and I saw it coming due my involvement with upstream :-) For those who see "Hey, this BR was ignored for five weeks": Yes, available time was spent on upstream work, not on the Debian side.
> } Let me know if you need any help with the Debian package, happy to help. > > Has the upstream release a signature > from the same key as the previous release? Yes, same key. And even better, it is the same key as in https://salsa.debian.org/debian/radvd/-/tree/debian/main/debian/upstream However the key is expired and `gpg --recv-key` fails. |stappers@paddy:~/verify |$ gpg --verify radvd-2.20.tar.xz.asc |gpg: assuming signed data in 'radvd-2.20.tar.xz' |gpg: Signature made Tue Dec 31 07:19:47 2024 CET |gpg: using RSA key BDEBB6A52F156FDF3168D91119395F23C58826C4 |gpg: Good signature from "Robin Hugh Johnson <robin.john...@bc.libraries.coop>" [expired] |gpg: Note: This key has expired! |Primary key fingerprint: 7D0B 3CEB E9B8 5B1F 825B CECF EE05 E6F6 A48F 6136 | Subkey fingerprint: BDEB B6A5 2F15 6FDF 3168 D911 1939 5F23 C588 26C4 |stappers@paddy:~/verify |$ gpg --list-key BDEBB6A52F156FDF3168D91119395F23C58826C4 |pub rsa4096 2015-08-08 [C] [expired: 2023-07-11] | 7D0B3CEBE9B85B1F825BCECFEE05E6F6A48F6136 |uid [ expired] Robin Hugh Johnson <robin.john...@bc.libraries.coop> | |stappers@paddy:~/verify |$ gpg --recv-key BDEBB6A52F156FDF3168D91119395F23C58826C4 |gpg: keyserver receive failed: Server indicated a failure |stappers@paddy:~/verify |$ So now am I search for a none expired public part of GPG key of Robin H. Johnson. > > Let me know if you need > > any help in bringing the Debian package up to speed, happy to help. > > We agree about new release is needed, > we don't agree about a new release is needed quickly. > > Please postpone a next "poke" until after Janary 21 of 2025. @paravoid: "I've got this!" (and I got your offer for help) Groeten Geert Stappers -- Silence is hard to parse
