Package: dpkg-sig
Version: 0.13.1
Severity: normal
Tags: patch

dpkg-sig correctly signs .deb files compressed with bz2 and xz, but
fails on verifying them:

$ dpkg-sig --verify libecpg-compat3_9.1.8-1_amd64.deb
Processing libecpg-compat3_9.1.8-1_amd64.deb...
BADSIG _gpgbuild

The attached patch fixes that.

Christoph
-- 
[email protected] | http://www.df7cb.de/
No differences were encountered between the control files

diff -Nru dpkg-sig-0.13.1/debian/changelog dpkg-sig-0.13.1+nmu1/debian/changelog
--- dpkg-sig-0.13.1/debian/changelog	2006-11-20 16:10:47.000000000 +0100
+++ dpkg-sig-0.13.1+nmu1/debian/changelog	2013-03-19 16:14:53.000000000 +0100
@@ -1,3 +1,10 @@
+dpkg-sig (0.13.1+nmu1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Allow data.tar.bz2 and data.tar.xz in .deb files.
+
+ -- Christoph Berg <[email protected]>  Tue, 19 Mar 2013 16:14:03 +0100
+
 dpkg-sig (0.13.1) unstable; urgency=low
 
   * Non-Maintainer Upload by Gunnar Wolf
diff -Nru dpkg-sig-0.13.1/dpkg-sig dpkg-sig-0.13.1+nmu1/dpkg-sig
--- dpkg-sig-0.13.1/dpkg-sig	2006-11-20 16:08:31.000000000 +0100
+++ dpkg-sig-0.13.1+nmu1/dpkg-sig	2013-03-19 16:13:55.000000000 +0100
@@ -634,7 +634,7 @@
 	}
 
 	return "FORCE_BAD" unless ($seen_files{"control.tar.gz"} &&
-	                     $seen_files{"data.tar.gz"} &&
+	                     ($seen_files{"data.tar.gz"} || $seen_files{"data.tar.bz2"} || $seen_files{"data.tar.xz"}) &&
 	                     $seen_files{"debian-binary"});
 
 	return "GOOD";

Reply via email to