Bug#1064951: UDD/upload_history: importer broken by switch to detached PGP signatures

2024-02-28 Thread Lucas Nussbaum
Hi Ansgar,

On 28/02/24 at 08:51 +0100, Ansgar  wrote:
> Hi Lucas,
> 
> On Wed, 28 Feb 2024 08:30:28 +0100 Lucas Nussbaum wrote:
> > The upload_history importer parses email received by the
> > debian-devel-changes mailing list. On 2024-02-11, the format of those
> > emails changed to multipart/signed. Previously the PGP signature was
> > inlined.
> 
> This isn't correct: the mails themselves were not signed previously,
> but contained a inlined-signed part (the .changes signed by the
> uploader), but that wasn't the full mail.
>
Right. Thanks for pointing this out.

> Now the mail also has a signature from the archive software, but the
> importer could just ignore the outer signature and process the inner
> part in the same way as before.

I'll do just that (and fix other email-parsing issues at the same time)

Lucas



Bug#1064951: UDD/upload_history: importer broken by switch to detached PGP signatures

2024-02-28 Thread Ansgar 
Hi Lucas,

On Wed, 28 Feb 2024 08:30:28 +0100 Lucas Nussbaum wrote:
> The upload_history importer parses email received by the
> debian-devel-changes mailing list. On 2024-02-11, the format of those
> emails changed to multipart/signed. Previously the PGP signature was
> inlined.

This isn't correct: the mails themselves were not signed previously,
but contained a inlined-signed part (the .changes signed by the
uploader), but that wasn't the full mail.

Now the mail also has a signature from the archive software, but the
importer could just ignore the outer signature and process the inner
part in the same way as before.

Ansgar



Bug#1064951: UDD/upload_history: importer broken by switch to detached PGP signatures

2024-02-27 Thread Lucas Nussbaum
Package: qa.debian.org
Severity: important
User: qa.debian@packages.debian.org
Usertags: udd

The upload_history importer parses email received by the
debian-devel-changes mailing list. On 2024-02-11, the format of those
emails changed to multipart/signed. Previously the PGP signature was
inlined.

The script that parses the email archives to generate a simpler deb822
summary needs to be adapted. See
https://salsa.debian.org/qa/udd/-/blob/master/scripts/upload_history_extractor.py?ref_type=heads#L63

Help is very much welcomed to fix that -- I don't know when I'll be able
to work on it myself.

Lucas