-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 28 Jan 2019 11:41:12 +0000 Source: debmirror Architecture: source Version: 1:2.31 Distribution: unstable Urgency: medium Maintainer: Colin Watson <cjwatson@debian.org> Changed-By: Colin Watson <cjwatson@debian.org> Closes: 904927 918304 Changes: debmirror (1:2.31) unstable; urgency=medium . [ Ondřej Nový ] * d/copyright: Use https protocol in Format field * d/changelog: Remove trailing whitespaces . [ Colin Watson ] * Fetch Packages-all and Contents-all if they exist (closes: #904927). * Fix mirroring of suites that have InRelease but not Release.gpg. * Improve GPG verification: accept a signature file as long as there's at least one good signature from a trusted key, and borrow code from APT to explicitly verify the structure of InRelease files (closes: #918304). Checksums-Sha1: 228c3bfbde1ad55024599da166679d37dd09767d 1665 debmirror_2.31.dsc 9673388fa77501b56f1ea45d14db0df6c39dc9e8 54764 debmirror_2.31.tar.xz a123593f0ecb4142d9dc8d8cc1ae739840137e4b 7109 debmirror_2.31_source.buildinfo Checksums-Sha256: fb754acde599f5ef0c499d25231d9ed4915d7f9c1cc941da2f66a65ebb8aaae2 1665 debmirror_2.31.dsc 4ead621f019b7883a218a70449f9694822b2b292fa8099c264f782a2100b44f7 54764 debmirror_2.31.tar.xz 9135d57f42d3b0d792f2af20aea9099818ad68c17479b0bf4c2225f0f4558282 7109 debmirror_2.31_source.buildinfo Files: ba7dfefcb42eb9faccee833e8607cc68 1665 net optional debmirror_2.31.dsc 4866887b9095ed1800cc3680a35086f8 54764 net optional debmirror_2.31.tar.xz f3c3e5a2b01fec04bd719e013f4d0e72 7109 net optional debmirror_2.31_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEErApP8SYRtvzPAcEROTWH2X2GUAsFAlxO6mIACgkQOTWH2X2G UAtXhQ/9E0xFp1JGg7txjj6JyHoMM8zmjyoIa1OnK/MXH6M5769x7Q61Ce/oKB5K SEQBcjjIaKNrxrzHD+2Dcg6mRD2NQHW/BDarScIIpjO6XTzFc3xF1vXc+bZ9GATi aTJHXN8FU5kH0f8hv6eoi40IbGpVXUvg0SIslIgDA6pDdhUbl5x9cK4L+1RH8IH3 CzmRHJ5njAT/Q3QTAKcmK8Eg53i2KxRyjWpz3nHbz9jP/okugsLcVT/l5B1OlV7t flk9O0wZGiJ5sEDuN3hq2lqLiyah385QVNjiM6E4R8miIQ+Bwl+wS2CPcv9agxzX UGeBxP0AOTL8ZwbNVEcgTjrLkdy+y7HbUshukbcGrQMHVs/lOeOstZfmZsucJdku cLgJ7JOpbl+EbFinpN213vpmmeJ6PEW+BsrmNzpnqro9qPeH+U3ORGTjphjrKAX/ FlmdKB3bL26jRsxZvbAWwvdyRvJ5ppilF/pLdQjNdmcXO1uPpDJT+lGZfAt/46l5 pRukqeiI60d3h9wMjY/FMBwg3G8lf+lM5Vtlyp0is2z+5HwwAXQhT4V7R5U7iGOM A9zI+08ZfDsMlla0skB8fOkAxNKAB+KAyLP+fiMsU+7zggqpli967K9r/8mfgizZ DKU6fIGgy6+gr+tj1bw4/E7oyJtl/3bjCwONEOKsPQIE8Opm1Vs= =qD36 -----END PGP SIGNATURE-----