Bug#954743: lintian: orig-tarball-missing-upstream-signature does not say how to add it to uploaded tarballs

[Robert Luberda <robert@debian.org>]

Chris Lamb pisze:
> Hi Robert,

Hi,

> 
>> The upstream tarball was uploaded to Debian archive in 2013, and there
>> have been no new upstream releases since then. 
> 
> Did you try the recently-closed #872864 references in that tag's long
> description, just out of interest?


Yes, but I don't think it contains answer to my concerns.

I've just put the *.sig file in the directory where the package is built
from, what made lintian to stop complaining.

But I am still not sure if I am allowed to upload a package in which the
*.dsc file refers to a *.asc file, without uploading the *.asc file itself.
Should use the '-sa' option to force both the *.orig.tar.gz and *.asc
into .*.changes? I think that such an upload will be rejected by DAK, as
the *.tar.gz is already in the archive. But to be honest this is based
on my past experiences, but maybe something has changed since then. Is
re-uploading upstream tarballs permitted now?

Regards,
robert