Re: broken .orig.tar.gz (Re: package upload rejected - no email)
On Sun, Mar 16, 2008 at 01:37:29PM +0100, Marc 'HE' Brockschmidt wrote:
> "Bernhard R. Link" <firstname.lastname@example.org> writes:
> > * Steve Langasek <email@example.com> [080315 21:12]:
> >> $ cat /srv/ftp.debian.org/queue/reject/rhinote_0.7.0-2_i386.reason
> >> Rejected: md5sum and/or size mismatch on existing copy of rhinote_0.7.0.orig.tar.gz.
> >> Rejected: can not overwrite existing copy of 'rhinote_0.7.0.orig.tar.gz' already in the archive.
> > Looking at the file currently in unstable:
> > |$ tar -tvvzf ../rhinote_0.7.0.orig.tar.gz | head -n1
> > |drwxr-xr-x kiyuko/kiyuko 0 2006-03-24 02:15 rhinote-0.7.0.orig/
> > So the original file looks repackaged without any reason (and not
> > comment about this in the the rhinote_0.7.0-1.diff.gz).
> > How could this happen? This is a classic error and three people seem
> > to not have noticed it. The maintainer is no DD, so I won't blame him.
> > But is there a way to know who the sponsor of rhinote_0.7.0-1 was?
> he@pindar:~$ lynx -dump http://packages.qa.debian.org/r/rhinote/news/20080316T114705Z.html | gpg --verify
> gpg: Signature made Sun 16 Mar 2008 12:40:47 CET using DSA key ID 8CE11941
> gpg: Good signature from "Kevin Coyner (Greenwich and Tokyo) <firstname.lastname@example.org>"
> gpg: aka "Kevin Coyner <email@example.com>"
> gpg: aka "Kevin Coyner <firstname.lastname@example.org>"
> gpg: aka "Kevin Coyner (Greenwich, CT Station 2) <email@example.com>"
I think you want the one that uploaded the .orig.tar.gz, so:
lynx -dump http://packages.qa.debian.org/r/rhinote/news/20060625T184700Z.html | gpg --verify
gpg: Signature made Sun 11 Jun 2006 03:11:54 PM CEST using DSA key ID B345BDD3
gpg: Good signature from "Neil McGovern <firstname.lastname@example.org>"
gpg: aka "Neil McGovern <email@example.com>"
gpg: aka "Neil McGovern (SPI) <firstname.lastname@example.org>"