[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Debian Archive Automatic Signing Key for jessie



Hello Everyone,

and congratulations on the release of Jessie!  But I think im seeing
some unexpected side effects, at least from my point of view.

This is the contents an sources.list of one of my squeeze systems:
deb http://ftp.at.debian.org/debian/ squeeze main
deb-src http://ftp.at.debian.org/debian/ squeeze main

deb http://security.debian.org/ squeeze/updates main
deb-src http://security.debian.org/ squeeze/updates main

deb http://ftp.at.debian.org/debian/ squeeze-updates main
deb-src http://ftp.at.debian.org/debian/ squeeze-updates main

deb http://ftp.at.debian.org/debian/ squeeze-lts main
deb-src http://ftp.at.debian.org/debian/ squeeze-lts main

an aptitude update currently produces:

Hit http://ftp.at.debian.org squeeze Release.gpg                                                         
Hit http://ftp.at.debian.org/debian/ squeeze/main Translation-de            
Ign http://ftp.at.debian.org/debian/ squeeze/main Translation-en            
Hit http://ftp.at.debian.org squeeze-updates Release.gpg                    
Ign http://ftp.at.debian.org/debian/ squeeze-updates/main Translation-de    
Ign http://ftp.at.debian.org/debian/ squeeze-updates/main Translation-en    
Hit http://ftp.at.debian.org squeeze-lts Release.gpg                        
Ign http://ftp.at.debian.org/debian/ squeeze-lts/main Translation-de        
Ign http://ftp.at.debian.org/debian/ squeeze-lts/main Translation-en        
Hit http://ftp.at.debian.org squeeze Release                                                          
Hit http://ftp.at.debian.org squeeze-updates Release                                                  
Hit http://ftp.at.debian.org squeeze-lts Release                                                      
Hit http://ftp.at.debian.org squeeze/main Sources                                                        
Hit http://ftp.at.debian.org squeeze/main i386 Packages                                                  
Hit http://ftp.at.debian.org squeeze-updates/main Sources/DiffIndex                                   
Hit http://ftp.at.debian.org squeeze-updates/main i386 Packages/DiffIndex                             
Hit http://ftp.at.debian.org squeeze-lts/main Sources/DiffIndex                                       
Hit http://ftp.at.debian.org squeeze-lts/main i386 Packages/DiffIndex                                 
Hit http://security.debian.org squeeze/updates Release.gpg                                               
Ign http://security.debian.org/ squeeze/updates/main Translation-de                                      
Ign http://security.debian.org/ squeeze/updates/main Translation-en                                      
Hit http://security.debian.org squeeze/updates Release                                                   
Hit http://security.debian.org squeeze/updates/main Sources                                              
Hit http://security.debian.org squeeze/updates/main i386 Packages                                        
W: There is no public key available for the following key IDs:                                           
7638D0442B90D010
W: There is no public key available for the following key IDs:
7638D0442B90D010

This key seems to be a key relevant for Jessie release:
Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>
It is signed by the wheezy release key:
46925553 2014-11-21  Debian Archive Automatic Signing Key (7.0/wheezy) <ftpmaster@debian.org>

So I'm assuming that this is legitimate and it would be safe to:
gpg -a --export 7638D0442B90D010|sudo apt-key add -

But it would be nice if that wouldn't be necessary.
And it is unclear to me, why this key should be relevant for Squeeze.

Thank you!
David Ayers

-- 
David Ayers - Team Austria
Free Software Foundation Europe (FSFE) []          (http://www.fsfe.org)
Join the Fellowship of FSFE!         [][][]      (https://fsfe.org/join)
Your donation powers our work!         ||       (http://fsfe.org/donate)

Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: