Bug#433091: [patch] possible fix

[Michael Vogt <mvo@debian.org>]

On Tue, Apr 07, 2009 at 06:16:49PM +0200, martin f krafft wrote:
> also sprach Michael Vogt <mvo@debian.org> [2009.04.07.1739 +0200]:
> > That should hopefully cover the problem without breaking strings and
> > compatibility. Feedback/review/testing is very welcome. I tested it in
> > a etch chroot with various expired settings and it works as it should,
> > but I need to make a test-suit for it too.
> 
> Packages for amd64/i386 will be at
> http://debian.madduck.net/repo/pool/main/a/apt/ shortly.

Thanks a lot for this. I did a simple "test-suite" to test problem and
fix via:
$ bzr get lp:~mvo/+junk/apt-gpgv-tests
$ cd apt-gpgv-tests
$ sudo ./test.sh

It does test "good","expired","revoked","revoked+good","expired+good".

It should fail for expired and revoked (they are no good) but should
pass for revoked+good and expired+good. Basicly it will ignore expired
or revoked signatures if there is anohter valid signature on the
Release file.

Again, feedback/review is very welcome.

Cheers,
 Michael