[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#480478: marked as done (RFP: debian-backports-keyring -- GnuPG archive key of the backports.org repository)

Your message dated Mon, 6 Sep 2010 12:08:07 +0200
with message-id <20100906100807.GA15532@anguilla.debian.or.at>
and subject line Re: Bug#480478: trust chain is broken; please get this in lenny
has caused the Debian Bug report #480478,
regarding RFP: debian-backports-keyring -- GnuPG archive key of the backports.org repository
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
480478: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=480478
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: debian-backports-keyring
Version: 2007.06.10
Severity: wishlist

[ Not sure if the BTS groks backports.org.  Maybe it gets confused and asks
  someone for help, but I suppose this is the best way to find out, anyway
  (Martin, sorry for the nuissance if you read this). ]

Well, to the point.  The fact that the package providing a key to validate
packages from bpo is itself a bpo package, kinda defeats the point.  It's
only useful to shut up APT warnings AFAICS.

Please, consider uploading this to sid, so that it is included in lenny and
a complete trust chain from lenny to bpo can be used.

Thanks!

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-amd64
Locale: LANG=ca_AD.UTF-8, LC_CTYPE=ca_AD.UTF-8 (charmap=UTF-8)

--- End Message ---
--- Begin Message --- 
	Hi!

* Robert Millan <rmh@aybabtu.com> [2008-05-10 13:06:21 CEST]:
> Well, to the point.  The fact that the package providing a key to validate
> packages from bpo is itself a bpo package, kinda defeats the point.  It's
> only useful to shut up APT warnings AFAICS.
> 
> Please, consider uploading this to sid, so that it is included in lenny and
> a complete trust chain from lenny to bpo can be used.

 Not needed anymore since yesterday:

#v+
Additionally the archive is now signed by the standard ftpmaster signing
key, currently the Lenny key.
#v-
<http://lists.debian.org/debian-devel-announce/2010/09/msg00002.html>

 Please note that for a short transition period apt-get/aptitude update
will complain about an unknown key. This is because for a short
transition time we do double signatures - this can be safely ignored
because the other signature key is known, package installs won't require
any unknown signature anymore.


 Thanks for your patience!
Rhonda
-- 
"Lediglich 11 Prozent der Arbeitgeber sind der Meinung, dass jeder
Mensch auch ein Privatleben haben sollte."
        -- http://www.karriere.at/artikel/884/

--- End Message ---
Reply to: