Le 16/10/2018 à 14:35, Tommi Höynälänmaa a écrit : > > On 12.10.2018 04:40, Sergio Durigan Junior wrote: >> Having said all that, and using uscan v4's substitution strings: >> version=4 >> http://www.tohoyn.fi/theme-d/theme-d-gnome.html >> theme-d-gnome_(\d[\d.]*)@ARCHIVE_EXT@ >> >> > > Now downloading the upstream package works but gpgv doesn't. I get the > following output from uscan: > ---cut here--- > tohoyn@tohoyn-laptop:~/tyo/omat/ohj/scheme/theme-d-gnome-new/work/theme-d-gnome-0.7.0$ > uscan > uscan: Newest version of theme-d-gnome on remote site is 0.7.1, local > version is 0.7.0 > uscan: => Newer package available from > http://localhost/theme-d-gnome-0.7.1.tar.gz > gpgv: Signature made ke 10. lokakuuta 2018 19.34.04 EEST > gpgv: using RSA key B43FA0D088169151F80AC4966CCCB104182F7616 > gpgv: [don't know]: invalid packet (ctb=2d) > gpgv: keydb_search failed: Invalid packet > gpgv: Can't check signature: No public key > uscan warn: OpenPGP signature did not verify. > ---cut here--- > > Checking the signature with "gpg --verify" works fine.
Hello, you must install upstream key in debian/upstream/signing-key.asc: uscan should verify key with its own keystore, not yours. Cheers, Xavier > The contents of the watch file are: > ---cut here--- > version=4 > opts="pgpsigurlmangle=s/$/.sig/" http://localhost/theme-d-gnome.html > theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz) > ---cut here--- > > Subdirectory /var/www/html contains the source code and signature files. > > - Tommi Höynälänmaa >