Bug#1089548: /usr/bin/uscan: uscan die: OpenPGP signature did not verify. at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77.

Path	csiph.com!news.samoylyk.net!gothmog.csi.it!bofh.it!news.nic.it!robomod
From	Salvatore Bonaccorso <carnil@debian.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.kernel
Subject	Bug#1089548: /usr/bin/uscan: uscan die: OpenPGP signature did not verify. at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77.
Date	Sun, 08 Dec 2024 21:10:01 +0100
Message-ID	<JRvLj-eXeJ-1@gated-at.bofh.it> (permalink)
X-Original-To	Debian Bug Tracking System <submit@bugs.debian.org>
X-Mailbox-Line	From debian-bugs-dist-request@lists.debian.org Sun Dec 8 20:09:09 2024
Old-Return-Path	<debbugs@buxtehude.debian.org>
X-Spam-Flag	NO
X-Spam-Score	-4.2
Reply-To	Salvatore Bonaccorso <carnil@debian.org>, 1089548@bugs.debian.org
Resent-To	debian-bugs-dist@lists.debian.org
Resent-Cc	debian-kernel@lists.debian.org, carnil@debian.org, Devscripts Maintainers <devscripts@packages.debian.org>
X-Debian-Pr-Message	report 1089548
X-Debian-Pr-Package	devscripts
X-Debian-Pr-Source	devscripts
Content-Type	text/plain; charset="us-ascii"
MIME-Version	1.0
Content-Transfer-Encoding	7bit
X-Mailer	reportbug 13.0.2
X-Debian-Message	from BTS
X-Mailing-List	<debian-bugs-dist@lists.debian.org> archive/latest/1872495
List-ID	<debian-bugs-dist.lists.debian.org>
List-URL	<https://lists.debian.org/debian-bugs-dist/>
Approved	robomod@news.nic.it
Lines	34
Organization	linux.* mail to news gateway
Sender	robomod@news.nic.it
X-Original-Date	Sun, 08 Dec 2024 21:06:47 +0100
X-Original-Message-ID	<173368840756.175009.12188079694752559539.reportbug@eldamar.lan>
Xref	csiph.com linux.debian.bugs.dist:1223260 linux.debian.kernel:84773

Cross-posted to 2 groups.

Show key headers only | View raw

Package: devscripts
Version: 2.24.6
Severity: serious
File: /usr/bin/uscan
X-Debbugs-Cc: debian-kernel@lists.debian.org, carnil@debian.org
Control: affects -1 + src:linux

Hi devscripts maintainers,

Note the severity might be overrated, please adjust as needed but I
believe right now it's safer to have it RC until clear on what to do
in other packages.

While fetching the new upstream version in src:linux the signature
verifification with the new version 2.24.6 fails:

$ uscan --download-current-version --vcs-export-uncompressed
Newest version of linux on remote site is 6.12.3, specified download version is 6.12.3
Cloning into bare repository '../linux-temporary.7164.git'...
remote: Enumerating objects: 91865, done.
remote: Counting objects: 100% (91865/91865), done.
remote: Compressing objects: 100% (89330/89330), done.
remote: Total 91865 (delta 7167), reused 18846 (delta 1562), pack-reused 0
Receiving objects: 100% (91865/91865), 256.56 MiB | 7.13 MiB/s, done.
Resolving deltas: 100% (7167/7167), done.
gpgv: Signature made vr 06 dec 2024 07:20:53 CET
gpgv:                using RSA key 647F28654894E3BD457199BE38DBBDC86092693E
gpgv: Can't check signature: No public key
uscan die: OpenPGP signature did not verify. at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77.

This works with the 2.24.5 version.

Regards,
Salvatore

Back to linux.debian.kernel | Previous | Next | Find similar | Unroll thread

Thread

Bug#1089548: /usr/bin/uscan: uscan die: OpenPGP signature did not verify. at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77. Salvatore Bonaccorso <carnil@debian.org> - 2024-12-08 21:10 +0100

csiph-web