Bug#892255: lintian: orig-tarball-missing-upstream-signature with signed .tar
Package: lintian
Version: 2.5.78
Severity: normal
Hello,
uwe@taurus:~/debpkg/microcom$ xzcat microcom_2017.03.0.orig.tar.xz | gpg --verify microcom_2017.03.0.orig.tar.asc -
gpg: Signature made Tue 06 Mar 2018 02:21:38 PM CET
gpg: using RSA key 7E722A169018ACFF3E74A40BC1FC1478ADCAEC09
gpg: Good signature from "Uwe Kleine-König <uwe@kleine-koenig.org>" [ultimate]
gpg: aka "Uwe Kleine-König <ukleinek@strlen.de>" [ultimate]
gpg: aka "Uwe Kleine-König <ukleinek@debian.org>" [ultimate]
gpg: aka "Uwe Kleine-König <uwe@kleine-könig.de>" [ultimate]
gpg: aka "Uwe Kleine-König <ukleinek@lug-freiburg.de>" [ultimate]
gpg: aka "Uwe Kleine-König <u.kleine-koenig@pengutronix.de>" [ultimate]
Primary key fingerprint: 0D25 11F3 22BF AB1C 1580 266B E2DC DD91 3266 9BD6
Subkey fingerprint: 7E72 2A16 9018 ACFF 3E74 A40B C1FC 1478 ADCA EC09
uwe@taurus:~/debpkg/microcom$ grep microcom_2017.03.0.orig.tar.asc microcom_2017.03.0-1_source.changes
f26feeaf212c5be8fa203f2102ac68024ab4cda0010f0b84c8a4415fd9c6471d 310 microcom_2017.03.0.orig.tar.asc
bea45ee0c144df466f1340ea45771353e6aa5e49 310 microcom_2017.03.0.orig.tar.asc
918dc12abfcb768c5563351a21b144f6 310 - - microcom_2017.03.0.orig.tar.asc
uwe@taurus:~/debpkg/microcom$ lintian microcom_2017.03.0-1_source.changes
W: microcom changes: orig-tarball-missing-upstream-signature microcom_2017.03.0.orig.tar.xz
It would be great if lintian considered a signature on the extracted
orig.tar that is shipped in the changes file.
This is (slightly) related to https://bugs.debian.org/882694 .
Best regards
Uwe
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (700, 'testing'), (600, 'unstable'), (500, 'unstable-debug'), (500, 'stable'), (499, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.15.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages lintian depends on:
ii binutils 2.30-5
ii bzip2 1.0.6-8.1
ii diffstat 1.61-1+b1
ii dpkg 1.19.0.5
ii file 1:5.32-2
ii gettext 0.19.8.1-4
ii intltool-debian 0.35.0+20060710.4
ii libapt-pkg-perl 0.1.33
ii libarchive-zip-perl 1.60-1
ii libclass-accessor-perl 0.51-1
ii libclone-perl 0.39-1
ii libdpkg-perl 1.19.0.5
ii libemail-valid-perl 1.202-1
ii libfile-basedir-perl 0.07-1
ii libipc-run-perl 0.96-1
ii liblist-moreutils-perl 0.416-1+b3
ii libparse-debianchangelog-perl 1.2.0-12
ii libperl5.26 [libdigest-sha-perl] 5.26.1-5
ii libtext-levenshtein-perl 0.13-1
ii libtimedate-perl 2.3000-2
ii liburi-perl 1.73-1
ii libxml-simple-perl 2.24-1
ii libyaml-libyaml-perl 0.69+repack-1
ii man-db 2.8.2-1
ii patchutils 0.3.4-2
ii perl 5.26.1-5
ii t1utils 1.41-2
ii xz-utils 5.2.2-1.3
Versions of packages lintian recommends:
ii libperlio-gzip-perl 0.19-1+b4
Versions of packages lintian suggests:
ii binutils-multiarch 2.30-5
ii dpkg-dev 1.19.0.5
ii libhtml-parser-perl 3.72-3+b2
ii libtext-template-perl 1.47-1
-- no debconf information
Reply to: