Package: grml-keyring
Version: 2025.03.11
Severity: important

Hi,

it was reported at https://github.com/grml/grml-keyring/issues/23
that our keyring file /usr/share/keyrings/grml-archive-keyring.pgp
doesn't work as expected via its symlink
/usr/share/keyrings/grml-archive-keyring.gpg, when being used as:

  Signed-By: /usr/share/keyrings/grml-archive-keyring.gpg

in /etc/apt/sources.list.d/grml.sources.

But it's known to be working fine with:

  Signed-By /usr/share/keyrings/grml-archive-keyring.pgp

The expectation by apt seems to be that a .pgp (or previously .gpg)
named keyring contains binary OpenPGP data, not ASCII Armor data.

A fix for this is already available as
https://github.com/grml/grml-keyring/pull/24 ->
https://github.com/grml/grml-keyring/pull/24/commits/37d4667bf779ad3d3b1f22f76912325cc14c2182

Reporting this also here, to have a tracking bug, since
we'd like to have this fixed also for Debian/trixie.

Thanks to Sebastian Boehm for the initial bug report,
and Guillem Jover for looking into this with me.

regards
-mika-

Reply via email to