Package: debian-archive-keyring
Version: 2017.5
Severity: normal
Hey there!
/usr/share/keyrings/debian-archive-keyring.gpg
and
/usr/share/keyrings/debian-archive-removed-keys.gpg
contain more than just OpenPGP certificates -- they also contain
"Trust packets", which are basically underspecified blobs that
different PGP implementations can treat differently.
some implementations even choke when they encounter them, for example:
https://bitbucket.org/skskeyserver/sks-keyserver/issues/52
But whether other implementations handle them correctly or not,
there's no point in shipping them in the archive keyring.
You can filter them out (and sanitize the keyring) with:
gpg --import-options import-export --import < crufty.gpg > clean.gpg
I recommend removing them from the shipped keyrings entirely.
Thanks for maintaining the archive keyring in debian,
--dkg
-- System Information:
Debian Release: buster/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (500, 'oldstable'),
(200, 'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1,
'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.11.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages debian-archive-keyring depends on:
ii gpgv 2.1.21-4
Versions of packages debian-archive-keyring recommends:
ii gnupg 2.1.21-4
debian-archive-keyring suggests no packages.
-- Configuration Files:
/etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg [Errno 2] No such
file or directory: '/etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg'
/etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg [Errno 2]
No such file or directory:
'/etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg'
/etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg [Errno 2] No such file
or directory: '/etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg'
/etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg [Errno 2] No such
file or directory: '/etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg'
/etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg [Errno 2] No such file
or directory: '/etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg'
-- no debconf information
