[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#841000: lintian: bogus debian-watch-may-check-gpg-signature



Package: lintian
Version: 2.5.48
Severity: normal

While preparing new upload of rlinetd I decided to make lintian happy
and add gpg signature checking in debian/watch in the following way:

  # control file for the uscan(1) tool
  version=4
  opts="pgpmode=next" http://alioth.debian.org/frs/?group_id=30928 \
          (?:.*)/@PACKAGE@@ANY_VERSION@@ARCHIVE_EXT@ debian
  opts="pgpmode=previous" http://alioth.debian.org/frs/?group_id=30928 \
          (?:.*)/@PACKAGE@@ANY_VERSION@@SIGNATURE_EXT@ previous

But lintian still complains that debian-watch-may-check-gpg-signature,
even though uscan actually checks the signature:

  uscan info: Newest upstream tarball version selected for download
  (uversionmangled): 0.9.1
  uscan info: Download filename (filenamemangled):
  rlinetd-0.9.1.tar.gz.sig
  uscan: Newest version of rlinetd on remote site is 0.9.1, specified
  download version is 0.9.1
  uscan info: Downloading OpenPGP signature from
     http://alioth.debian.org/frs/download.php/file/4194/rlinetd-0.9.1.tar.gz.sig
  (pgpmode=previous)
     as rlinetd-0.9.1.tar.gz.sig
  uscan info: Requesting URL:
     http://alioth.debian.org/frs/download.php/file/4194/rlinetd-0.9.1.tar.gz.sig
  uscan info: Use rlinetd-0.9.1.tar.gz as upstream package
  (pgpmode=previous)
  uscan info: Verifying OpenPGP signature rlinetd-0.9.1.tar.gz.sig for
  rlinetd-0.9.1.tar.gz
  gpgv: Signature made nie, 16 paź 2016, 19:04:32 CEST
  gpgv:                using RSA key 631DE7553BE8AFD4
  gpgv: Good signature from "Robert Luberda <robert@debian.org>"

Regards,
robert


-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (200, 'testing')
Architecture: i386 (i686)

Kernel: Linux 4.7.0-1-686-pae (SMP w/1 CPU core)
Locale: LANG=pl_PL.UTF-8, LC_CTYPE=pl_PL.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages lintian depends on:
ii  binutils                          2.27-8
ii  bzip2                             1.0.6-8
ii  diffstat                          1.61-1
ii  file                              1:5.28-4
ii  gettext                           0.19.8.1-1
ii  intltool-debian                   0.35.0+20060710.4
ii  libapt-pkg-perl                   0.1.29+b6
ii  libarchive-zip-perl               1.59-1
ii  libclass-accessor-perl            0.34-1
ii  libclone-perl                     0.38-2+b1
ii  libdpkg-perl                      1.18.10
ii  libemail-valid-perl               1.202-1
ii  libfile-basedir-perl              0.07-1
ii  libipc-run-perl                   0.94-1
ii  liblist-moreutils-perl            0.416-1+b1
ii  libparse-debianchangelog-perl     1.2.0-11
ii  libperl5.24 [libdigest-sha-perl]  5.24.1~rc3-3
ii  libtext-levenshtein-perl          0.13-1
ii  libtimedate-perl                  2.3000-2
ii  liburi-perl                       1.71-1
ii  libyaml-libyaml-perl              0.63-1+b1
ii  man-db                            2.7.5-1
ii  patchutils                        0.3.4-1
ii  perl                              5.24.1~rc3-3
ii  t1utils                           1.39-2
ii  xz-utils                          5.2.2-1.2

Versions of packages lintian recommends:
ii  dpkg                                 1.18.10
pn  libperlio-gzip-perl                  <none>
ii  perl                                 5.24.1~rc3-3
ii  perl-modules-5.24 [libautodie-perl]  5.24.1~rc3-3

Versions of packages lintian suggests:
pn  binutils-multiarch     <none>
ii  dpkg-dev               1.18.10
ii  libhtml-parser-perl    3.72-2+b1
ii  libtext-template-perl  1.46-1

-- no debconf information


Reply to: