> On Thu, Jan 23, 2014 at 03:01:28PM +0000, Ofek Rakesh wrote: > > Is this meant as "Debian keyring" as in > > > > 1. http://keyring.debian.org/ > > > > or > > > > 2. /usr/share/keyrings/debian-keyring.gpg but not in /usr/share/keyrings/debian-maintainers.gpg ? > > > > It's the former, I believe. Well, more precicely: > < directhex> i'm validating against the debian keyring files > < directhex> which are about 1000 DDs, 200 DMs, and 10 non-uploading > contributors > > Neil (This is where I get crucified for missing the in-reply-to etc headers. Sorry.) My specific process for this has been: * Create a new blank keyring * Install the most recent debian-keyring package from Unstable * Import debian-maintainers.gpg, debian-nonupload.gpg and debian-keyring.gpg * Wait a long time & hope for no thermal cutout * Run gpg --refresh-keys to pick up any new UIDs or signatures * Wait a long time & hope for no thermal cutout So to be absolutely clear: Debian Maintainers should feel welcome too, and in no way was the intention to belittle their contribution to the project.
Description: This is a digitally signed message part