Debian package: signing-key.asc
rpgoldman at sift.info
Fri Oct 13 16:30:12 UTC 2017
On 13 Oct 2017, at 10:44, Kambiz Darabi wrote:
> there are questions from the Debian dev who helps publishing the
> about the signing key which is in the debian/ subtree.
> Can someone please comment?
> Thank you
Hm. Is this because you are grabbing tar balls from there, and Debian
would like to see those tar balls signed? I should probably modify the
make script for releasing to make a pop signature for the tar balls and
I don't really have the capability of going back to regenerate and sign
the old tar balls I'm afraid. And anyway, I simply won't do it.
I have no idea what key is stored at debian
> ----- Forwarded Message -----
> From: "Sébastien Villemot" <sebastien at debian.org>
> To: "Kambiz Darabi" <darabi at m-creations.com>
> Cc: 878167 at bugs.debian.org
> Sent: Friday, 13 October, 2017 5:07:45 PM
> Subject: Re: Bug#878167: RFS: cl-asdf/3.3.0 - Another System
> Definition Facility
> Also, there is a GPG key under debian/upstream/signing-key.asc, but I
> see no
> signature on upstream website
> Am I missing something? Or should the key be removed?
> ⢀⣴⠾⠻⢶⣦⠀ Sébastien Villemot
> ⣾⠁⢠⠒⠀⣿⡁ Debian Developer
> ⢿⡄⠘⠷⠚⠋⠀ http://sebastien.villemot.name
> ⠈⠳⣄⠀⠀⠀⠀ http://www.debian.org
More information about the asdf-devel