[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: updated copyright file for two packages



On 2021-08-23 3:38 p.m., Jonas Smedegaard wrote:
> Quoting Bobby de Vos (2021-08-23 22:11:15)
>>
>> Nico and I considered putting in a comment field. Regardless if I add a
>> comment field, the updated package (fonts-sil-awami-nastaliq 2.200) does
>> not seem to be updated, despite being uploaded correctly [0]. Is there
>> something I missed, and/or are package transitions still on hold after
>> the recent release of Debian?
>>
>> [0]
>> https://lists.debian.org/debian-fonts/2021/08/msg00022.html
> 
> Above links shows confirmation of an upload, but that it was accepted.
> 
> Yes, that is confusing: Upload is public, can be done by anyone.  About 10 minutes later one of 3 things will happen:
> 
>  a) confirmation that the upload was accepted
>  b) notice that the upload was queued for ftpmaster approval
>  c) total silence, indicating rejection
> 
> That third option is annoying and confusing - it is silent because 
> anyone can upload, meaning that contact information can be fraudelent 
> and to avoid the equivalent of backscatter no email is sent in case if 
> rejection.
> 
> If accepted it would appear at 
> https://tracker.debian.org/pkg/fonts-sil-awami-nastaliq
> 
> If queued it would appear at https://ftp-master.debian.org/new.html
> 
> Since this upload doesn't appear at either of those places, I guess you 
> received no followup mail and it was rejected.  Maybe bad PGP signature?

I think maybe the issue was an expired PGP signature. My key expired
earlier this year, I extended the validity (hours before the key
expired, I don't know if that mattered). I tried to upload the key (with
the extended validity) to SKS [0] but that did not work, I don't
remember what the issue was. I did upload the key to Ubuntu [1] and I
thought that would be sufficient, since I thought all PGP keyservers
sync'd with each other. But now reading about GPG keys in Debian [2] it
seems that the Debian keyserver only send keys to other keyservers, it
does not import from other keyservers.

So now Debian has my updated key, and I re-uploaded the package (I still
had the files locally). While they uploaded [3] I don't see any
confirmation (from FTP Master nor from the Debian tracker).

So do I bump the Debian version (to -2) and upload that? And since the
package will not have a Debian version number of -1 do I have to do
something extra to get the source to be included?

[0]
https://sks-keyservers.net/

[1]
https://keyserver.ubuntu.com/

[2]
https://keyring.debian.org/

[3]
https://lists.debian.org/debian-fonts/2021/08/msg00032.html

Thanks, Bobby

-- 
Bobby de Vos
/bobby_devos@sil.org/


Reply to: