reopen 539701 thanks On Mon, 03 Aug 2009 17:55:52 +0200, Joerg Jaspert writes: > >> however, ftp-master (and merkel) still have the old key and therefore >> refuse to process my package uploads. > >You have to talk to keyring-maint. Importing key changes into the >official keyring is not done automagically. It is also nothing ftpmaster >can do.
you misunderstood me: dak on ftp-master does not use the
official keyring package, but something outdated which does not include
recent updates via the keyring.d.o. dak therefore does not process my
package uploads, and keyring-maint won't be able to help me convincing
dak to use an uptodate keyring.
as far as i know we're still expected to handle key expiration updates
by gpg-send-key'ing them to keyring.d.o, which i did - but which dak
ignores.
situation as observed on merkel:
a...@merkel:~$ fgrep .gpg /org/ftp.debian.org/dak/config/debian/dak.conf
"/srv/keyring.debian.org/keyrings/debian-keyring.gpg";
a...@merkel:~$ ls -la /srv/keyring.debian.org/keyrings/debian-keyring.gpg
lrwxrwxrwx 1 root root 41 Apr 18 2008
/srv/keyring.debian.org/keyrings/debian-keyring.gpg ->
/var/lib/misc/thishost/debian-keyring.gpg
a...@merkel:~$ ls -la /var/lib/misc/thishost/debian-keyring.gpg
/usr/share/keyrings/debian-keyring.gpg
-rw-r--r-- 1 root root 24796809 Jan 18 2009
/usr/share/keyrings/debian-keyring.gpg
-rw-rw-r-- 1 root root 26159217 Aug 5 00:55
/var/lib/misc/thishost/debian-keyring.gpg
very different files indeed, so the debian-keyring package has nothing
to do with what dak uses.
a...@merkel:~$ gpg --list-keys -v --keyring
/var/lib/misc/thishost/debian-keyring.gpg 42BD645D
...
sub 1600g/2C25A9D4 2001-12-09 [expired: 2009-06-18]
^^^^^ and what dak uses is outdated.
a...@merkel:~$ gpg --recv-key --keyserver keyring.debian.org 42BD645D
gpg: requesting key 42BD645D from hkp server keyring.debian.org
gpg: key 42BD645D: public key "Alexander Zangerl <a...@snafu.priv.at>" imported
...
a...@merkel:~$ gpg --list-keys -v 42BD645D
sub 1600g/2C25A9D4 2001-12-09 [expires: 2011-08-03]
^^^^^ and that is what keyring.debian.org says.
regards
az
--
+ Alexander Zangerl + DSA 42BD645D + (RSA 5B586291)
Give a man a fire and he's warm for a day, set a man on fire and he's
warm for the rest of his life. -- the fish analogy, according to Simon Cozens
signature.asc
Description: Digital Signature
