Re: debian-archive-keyring: should probably depend on apt >= 0.6

[<Bill.Allombert@math.u-bordeaux1.fr>]

On Thu, Nov 30, 2006 at 11:43:12PM +0100, Peter Palfrader wrote:
> Package: debian-archive-keyring
> Version: 2006.11.22
> Severity: serious
> 
> debian-archive-keyring does not depent on an apt that comes with
> apt-key, so in the course of upgrading from sarge to etch one can
> end up with a system that has only two keys in apt's keyring,
> the signing keys from 2005 and 2006 which are shipped with apt itself.

In my opinion, since apt depends debian-archive-keyring, the proper fix
is to do 'apt-key update' in apt postinst (in supplement to 
doing it in debian-archive-keyring postinst).

Adding a dependency on apt to debian-archive-keyring would create a
circular dependency and would not fix the problem.

This bug is similar to #400935.

Cheers,
-- 
Bill. <ballombe@debian.org>

Imagine a large blue swirl here.