Register | Log in

debsig-verify

Debian package signature verification tool

Choose email to subscribe with

general

source: debsig-verify (main)
version: 0.23
maintainer: Dpkg Developers (archive) (DMD)
uploaders: Guillem Jover [DMD]
arch: any
std-ver: 4.5.1
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 0.16
oldstable: 0.19
stable: 0.23
testing: 0.23
unstable: 0.23

versioned links

0.16: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.19: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
0.23: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

debsig-verify

action needed

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 0.24, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 4b16e7f0c997e21605975bec98038843242d0a9b
Author: Guillem Jover <guillem@debian.org>
Date:   Wed May 19 01:21:41 2021 +0200

    doc: Clarify the requirement for OpenPGP keyrings
    
    The tools in general expect standard compliant OpenPGP keyrings, and not
    tool specific formats such as GnuPG keybox databases.
    
    Ref: #988646
    Prompted-by: Steve McIntyre <steve@einval.com>

commit 5a6dce82929c2c4d883d228e643152ec5edb0c51
Author: Guillem Jover <guillem@debian.org>
Date:   Thu May 6 03:55:07 2021 +0200

    test: Remove obsolete and non-compliant test data
    
    These .deb archives contain old signatures that do not concatenate the
    debian-binary ar member, which is not compliant with the newer expected
    format. Remove them to avoid confusion, alongside the ancillary policies
    and keyrings.
    
    Reported-by: Charles Duffy <charles@dyfis.net>

commit 1377779982e20c631224c656e90bfb6b6332af29
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:49:47 2021 +0100

    Move checkSigExist() from misc to openpgp module
    
    This function handles OpenPGP signatures.

commit 42b763b68b292e75e7183d1b5b56ecb5c4041bf3
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:46:02 2021 +0100

    Abstract the OpenPGP operations behind a frontend driver
    
    Add an abstraction so that we can more easily add alternative
    OpenPGP backend implementations.

commit 2def1a6ad4033e6f7111cd92994f1841268d065c
Author: Guillem Jover <guillem@debian.org>
Date:   Sat Mar 20 01:42:29 2021 +0100

    Add a new find_command() function
    
    This is imported from dpkg, because it currently does not provide it in
    libdpkg. Once that is done we can drop it.

commit 08f951143d6296af78954e25b044d1bf018d59b1
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:30:00 2021 +0100

    test: Add sqop and sq OpenPGP backend support
    
    Prefer the sqop, over sq, over gpg when detecting the commands, but
    preserve the current Build-Depends order with gpg being preferred to
    sqop and sq.

commit ff03579ecbf30758372cf1786910b1222a91c2a8
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:30:00 2021 +0100

    test: Check OpenPGP backend availability
    
    Detect whether we can find a required OpenPGP backend during test time.

commit f693465364f62ea5d511d7ea172ecfe689af13ad
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:25:04 2021 +0100

    test: Abstract OpenPGP details into debsig_openpgp_* functions
    
    These were previously called debsig_*_gpg, which makes adding new
    backends problematic. And the detached signature code was inlined.

commit 0ec08e7f8273459e8ae2e7589bdf0224d8d42248
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:10:38 2021 +0100

    doc: Mention OpenPGP instead of gpg in generic code comments

commit 4aadd78ca6a7574974835e1c3ae3a33b244252a8
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 01:08:57 2021 +0100

    Rename gpgVerify() to sigVerify()
    
    The function should be a backend-neutral abstraction.

commit 60e5fe0fcd7adce978e91b9cf97bbb529ded46a1
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 00:47:17 2021 +0100

    Move GnuPG specific macros to the GnuPG backend module
    
    Let's not pollute the generic code with backend-specific code.

commit e28a48a29c2c516c96f7940bb14d3291b3927422
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 00:45:37 2021 +0100

    doc: Update .gpg keyring references to .pgp in man page.
    
    The standard is called OpenPGP, and GnuPG is just one implementation
    among several, even though a pretty wide-spread one. Use the more
    neutral name which is closer to the standard.
    
    Still reference the .gpg extensions for a transitional period.

commit 159447644312f0b07f923d87ed71e8e34c167be5
Author: Guillem Jover <guillem@debian.org>
Date:   Wed Mar 10 00:45:37 2021 +0100

    test: Rename .gpg keyrings to .pgp
    
    The standard is called OpenPGP, and GnuPG is just one implementation
    among several, even though a pretty wide-spread one. Use the more
    neutral name which is closer to the standard.

Created: 2021-03-20 Last update: 2021-09-25 11:37

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.6.0 instead of 4.5.1).

Created: 2021-08-18 Last update: 2021-08-18 14:03

news

[2020-12-27] debsig-verify 0.23 MIGRATED to testing (Debian testing watch)
[2020-12-27] debsig-verify 0.23 MIGRATED to testing (Debian testing watch)
[2020-12-24] Accepted debsig-verify 0.23 (source) into unstable (Guillem Jover)
[2019-12-13] debsig-verify 0.22 MIGRATED to testing (Debian testing watch)
[2019-12-11] Accepted debsig-verify 0.22 (source) into unstable (Guillem Jover)
[2019-10-29] debsig-verify 0.21 MIGRATED to testing (Debian testing watch)
[2019-10-27] Accepted debsig-verify 0.21 (source) into unstable (Guillem Jover)
[2019-10-19] Accepted debsig-verify 0.20 (source) into unstable (Guillem Jover)
[2018-07-07] debsig-verify 0.19 MIGRATED to testing (Debian testing watch)
[2018-07-05] Accepted debsig-verify 0.19 (source) into unstable (Guillem Jover)
[2017-11-11] debsig-verify 0.18 MIGRATED to testing (Debian testing watch)
[2017-11-05] Accepted debsig-verify 0.18 (source) into unstable (Guillem Jover)
[2017-08-18] debsig-verify 0.17 MIGRATED to testing (Debian testing watch)
[2017-08-12] Accepted debsig-verify 0.17 (source) into unstable (Guillem Jover)
[2017-02-03] debsig-verify 0.16 MIGRATED to testing (Debian testing watch)
[2017-01-24] Accepted debsig-verify 0.16 (source) into unstable (Guillem Jover)
[2016-07-19] debsig-verify 0.15 MIGRATED to testing (Debian testing watch)
[2016-07-14] Accepted debsig-verify 0.15 (source) into unstable (Guillem Jover)
[2016-02-24] debsig-verify 0.14 MIGRATED to testing (Debian testing watch)
[2016-02-13] Accepted debsig-verify 0.14 (source) into unstable (Guillem Jover)
[2015-04-27] debsig-verify 0.13 MIGRATED to testing (Britney)
[2014-10-28] Accepted debsig-verify 0.13 (source) into unstable (Guillem Jover)
[2014-10-28] Accepted debsig-verify 0.12 (source) into unstable (Guillem Jover)
[2014-10-28] Accepted debsig-verify 0.11 (source) into unstable (Guillem Jover)
[2014-08-09] debsig-verify 0.10 MIGRATED to testing (Britney)
[2014-07-29] Accepted debsig-verify 0.10 (source amd64) into unstable (Guillem Jover)
[2014-06-18] debsig-verify 0.9 MIGRATED to testing (Debian testing watch)
[2014-06-07] Accepted debsig-verify 0.9 (source amd64) (Guillem Jover)
[2012-05-31] debsig-verify 0.8 MIGRATED to testing (Debian testing watch)
[2012-05-20] Accepted debsig-verify 0.8 (source amd64) (Emanuele Rocca)

1
2

bugs [bug history graph]

all: 0

links

lintian
buildd: logs, clang, reproducibility, cross
popcon
browse source code
edit tags
other distros
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 0.23
1 bug (1 patch)

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing