I think you want to upload to mentors.debian.net and NOT to ftp.upload.debian.org. I don't think ftp-master checks against public key repositories, but only to it's database of known debian developers and maintainers. Therefore, if you are not an established maintainer or a DD, you can not upload to ftp-master. Paul On 10/08/11 22:05, Tal Hadad wrote: > I did took your advice, but same error happens again! > I did wait till xnoise files were deleted from debian ftp master, but when > I typed: > dput xnoise_0.1.29_source.changes > It gives error to the maintainer, because his signature was associated with > the previous changes file, which I've made the known mistake, even known > dput say upload was successful. > The maintainer send me this: > > ---------- Weitergeleitete Nachricht ---------- > Von: "Debian FTP Masters" <ftpmaster@ftp-master.debian.org > <mailto:ftpmaster@ftp-master.debian.org>> > Datum: 08.10.2011 20:04 > Betreff: Processing of xnoise_0.1.29_source.changes > An: <shuerhaaken@googlemail.com <mailto:shuerhaaken@googlemail.com>> > > GnuPG signature check failed on xnoise_0.1.29_source.changes > gpg: Signature made Sat Oct 8 17:55:02 2011 UTC using DSA key ID 260F6A05 > gpg: Can't check signature: public key not found > (Exit status 2) > /xnoise_0.1.29_source.changes has bad PGP/GnuPG signature! > Removing /xnoise_0.1.29_source.changes, but keeping its associated files > for now. > > Greetings, > > Your Debian queue daemon (running on host franck.debian.org > <http://franck.debian.org/>) > > This makes me think the problem is not really related to the maintainer > signature > which described before in my story. > As you can see, it tells me it can't find the public key. > But in my account, it says: > Current GPG key: 3072D/260F6A05 > And this match! > Which makes me wonder why it can't find it, and what wrong whit this > changes file. > Note that I created it by: > debuild -sa -S > > And about the story- it kinda like what you said, but it doesn't really > matter know. > Why can't it find me? > I hope the changes file could help! > Tal > >> Date: Fri, 7 Oct 2011 11:26:54 +0200 >> From: debian@toell.net >> To: debian-mentors@lists.debian.org >> Subject: Re: Did mistake in signaturing, and can't fix this by dcut. >> > Hello Tal, > > On 07.10.2011 10:08, Tal Hadad wrote: >> The maintainer, whom the failure mail was send to, have suggest me >> to remove >> the package and try again. Still 0.1.29 is there so I can't. >> Then I've found out that I can use dcut. I've created a signed >> reset.commands file: > .. >> FTP Master queue daemon sent me this: >>> gpg: Can't check signature: public key not found >>> (Exit status 2) >>> /reset.commands has bad PGP/GnuPG signature! > > > I'm sorry if I can't help you appropriately but your question confused > me a bit. I try to paraphrase what you tried, please tell me where I'm > wrong: > > You are neither a Debian Developer nor a Debian Maintainer, hence a > sponsor of you uploaded xnoise 0.1.29. For some reasons I don't quite > understood that turned out to be the wrong package which was not > supposed to be uploaded to Debian. > > Hence, you now decided to dcut (cancel) that upload, but the ftp-master > refuses your signature because it didn't find your public key? > > > Given I was right with my summary, you can't dcut uploads made to > Debian. ftp-master only accepts signatures from Debian Developers (not > sure about Debian Maintainers who try to dcut their own package with > DMUA set). The key you uploaded to mentors.debian.net is not related > here, that key is only used _there_ to verify your uploads, it has no > relevance for the ftp-master. > > If you: > > a) uploaded xnoise to ftp-master yourself but you are not a Debian > Developer or Debian Maintainer with DMUA set (don't worry if you don't > understand, I can see the package is NEW - so it does not matter anyway) > just wait. Your upload will automatically be removed as you can't upload > directly to Debian anyway > > b) You seem not to have uploaded a changes file, hence ftp-master > considers your upload incomplete. Just wait, it will remove both of your > uploads automatically anyway > > c) had a sponsor which uploaded xnoise for you, only your sponsor can > use dcut, or at least he needs to sign your commands file. > >> >> >> -- >> To UNSUBSCRIBE, email to debian-mentors-REQUEST@lists.debian.org >> with a subject of "unsubscribe". Trouble? Contact > listmaster@lists.debian.org >> Archive: 4E8EC5DE.7020808@toell.net">http://lists.debian.org/4E8EC5DE.7020808@toell.net >>
Attachment:
signature.asc
Description: OpenPGP digital signature