On Fri, Jan 06, 2006 at 01:22:50AM +0100, Petter Reinholdtsen wrote:
[Michael Vogt]
> Sorry for the delay. I'm preparing a new upload that adds the 2006
> archive key to the default keyring.
Sounds good. Will this automatically take care of the key update and
make sure no manual intervention is needed to get packages upgraded?
I uploaded a new apt that supports multiple signatures on the release
file. The policy is that it needs at least one good signature and no
bad signatures (but any number number of NO_PUBKEY signatures) to be
considered trusted. It will still warn about missing keys but that's
only fatal if no good signature was found.
The upload also contains the new key in apts default keyring. This
dosn't fix the key-upgrade problem yet. I outlined my proposal in
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345891
Early testing (from incoming) is welcome :)