On Thu, Aug 24, 2017 at 09:02:38PM +0000, tim@timakro.de wrote: > The upstream signature is already included in the debian directory You are confusing the signing key with the actual signature. > what is further needed to add it to the source package? From dpkg-source(1): "each original tarball can be accompanied by a detached upstream signature (.orig.tar.ext.asc and .orig-component.tar.ext.asc)" > The man page contains everything the README.md contains and more, should the > README.md file be also shipped in that case? In that case it's OK to not ship it. -- WBR, wRAR
Attachment:
signature.asc
Description: PGP signature