Control: tag 1012524 + patch - pending A patch to match against any authorsied keys is attached. Without this change uscan will error out when encoutering future releases not signed with the current key — even if the key used is authorised for release signatures.
The contents of signing-key.asc can be inspected and verified with `gpg --list-packets`. Note that not for all keys, signing and primary key are identical. MAINTAINERS lists and the output of verification commands typically shows the former, but both appear in gpg -k and gpg --list-packets. Alternatively, the new content can be reproduced by following these steps (assuming gpg does not fetch additional signatures for the imported keys from its default keyring or so. If unsure, temporarily rename ~/.gnupg): alias gpg_t='command gpg --no-default-keyring --keyring /tmp/tmp.keys' curl https://github.com/astiob.gpg | gpg_t --import - curl https://github.com/TheOneric.gpg | gpg_t --import - curl https://github.com/rcombs.gpg | gpg_t --import - gpg_t --export --export-options export-minimal --armor > debian/upstream/signing-key.asc # To verify which keys are included gpg --list-packets debian/upstream/signing-key.asc The export options are copied from uscan’s man page. Cheers Oneric
From ee09c54c1728e1757608b5160edf66b9a2109245 Mon Sep 17 00:00:00 2001 From: Oneric <one...@oneric.de> Date: Wed, 29 Jun 2022 17:05:40 +0200 Subject: [PATCH] Add alternate signing keys Upstream's release note for 0.16.0 announced that the release may be signed with other keys in the future. A list of authorised keys was included in the MAINTAINERS file of (signed) tarball. Additionally, the git commit adding this file is also signed by the same key as the release tarball and future changes are promised to be signed with an pre-existing key. Without adding the additional authorised keys, uscan will error out when encoutering future releases not signed with the current key. To verify which keys are in signing-key.asc, `gpg --list-packets` can be used and the output checked against the IDs listed in MAINTAINERS. --- debian/upstream/signing-key.asc | 137 +++++++++++++++++++++++++++++++- 1 file changed, 133 insertions(+), 4 deletions(-) diff --git a/debian/upstream/signing-key.asc b/debian/upstream/signing-key.asc index 77c8d9f..c611b07 100644 --- a/debian/upstream/signing-key.asc +++ b/debian/upstream/signing-key.asc @@ -45,8 +45,137 @@ OtUMRG8I/EfGyhYH+PN2cHa9VGIss//OJWTpCfnAyD3g4qVRcYAnbtK2jVVe9wJS 6zDhMMUJ9QHjMLRFi06f/MHxuES34UhFTmRx1oWv+OUlYCBFWTblI8OXSbgTjsJy i1zbNywyGrGjUVv0GrrWq7L0b/bukqBObhyeWpl2kED2+/llZb4rn93GB4VSqvkr jkGWoF8NU7ZhwpVEB3M0j3Z8GsctvQ6NIpFqGf3uNQsk1qngUnMqNZE3zHCnt8Do -dUi2f9uJDlzXNQ5LAgj2pVnqreUwqIh4BBgRCAAJBQJNlOPMAhsMACEJEIB50Ywh -qqr/FiEEVFjDEAZx8lKw9MdwgHnRjCGqqv+9QgEAoTdOzovu5crCzIbwpBw62IkC -oe9yiIkrDfNxun95uWwA/jP6yvA884C98+/WFIl4JPtxpljOYlbtyab0zKhhaZwf -=EtRt +dUi2f9uJDlzXNQ5LAgj2pVnqreUwqIhhBBgRCAAJBQJNlOPMAhsMAAoJEIB50Ywh +qqr/vUIBAKE3Ts6L7uXKwsyG8KQcOtiJAqHvcoiJKw3zcbp/eblsAP4z+srwPPOA +vfPv1hSJeCT7caZYzmJW7cmm9MyoYWmcH5kCDQRhNOowARAA3MqpsowLf42S6qXe +h1xrUHNTRMb1v3nEP29uGWx9SjJBB2TKw0U7+nTSQwInU0zHTaiAmbgG3v2sG6sw +bI28iBPkb9hpF13zsFzlrb8ZSrqKRGyQ3J/O5w8/kcIn+OYeQCE8Up5nwkwWYnl0 +iyEJuoTZyKshm0HaDazxuGvlisQa8FXnT9V/6D99HJQEzVvC5Sghvh8iROW3+J3s +geCVjGsFYtoM/xKneKUV9g6MD1tELlWTjPayzmbbzQzKGXk27hN1u88I2lY23ohQ +6V1+jy5jZoJfyQnUFqIx/hGPuHg+frdhYFqD7IVmAaGFRuKJyqG3Re1UYTvTLSle +kJXuLlfbeE3hTqec3/KLC1EaB5hB/rnGCGVP3muY/nJu3oF+hLheN6OEBH5WY7P0 +TKGINEGSOEJkW/mvsVnPJOCMzkDWvGpkLtmVZqjoa3jaVoQ17JCMAhKQlp038wC4 +/phEDte407EMD+UUVvians6baqSl7J9pkS9n1iPqF/BMc/x7lW5VeSFhVZEDq04T +uWIzkkdqZERFt4MO71dJG4zf05adFZelz+hKLGr9nHL+vG2rYTj41j1BEMS6MvRH +DoWwHzRG53SiulGDLVqWvn68YJul/5aByED+dfu6Il0cxFW3oE+C1e7tmdDGWgr8 +1lJtYudt8Q7WlF1/s7K3uNzOsksAEQEAAbQZT25lcmljIDxvbmVyaWNAb25lcmlj +LmRlPokCVAQTAQgAPhYhBF7mPypxvxMs/jVn4d/+YV8oJMcgBQJhNOowAhsDBQkN +KGiABQsJCAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJEN/+YV8oJMcgPMAP/RMGUKjx +MIeiyf0vLnvGpTSdVMX9jdm8A7MmOex44U/AB0UfpQEoYpLX59EPvxsMBhQLMQmA +zILF1GGRncfLNetRbxaKrXbNSplC2FMFbVnDneX9lzjXsw8MXxT8K0P8D9NDgoUb +AMn6o1MXyye9TjtgCKOEqXxSUAU0z8sh9ruEt0GKevfhU5OlExxaRRx6E1SSsFHp +To2qyxRj8uF+vFuKppBlHuhP8sbWRiANgiUdAHGbyLbTJhj9qX6BITt5C9vPqExo +uJUfUtnQs3C6P1wfYKobEPKodY52eBemE1w4hDAZivN+5AEUsApaYcxwzks4Dr9A +vBfLDSKGWG+yPobS/LWqoDAOnjGzmEkjVkPwIElBEhitDZdh3WpYFYU848AEpVG+ +m8tic3vp5BleBxjH2WDDVTsHsOaL3loJ3YAluFWHuAp/IKNMO5tnU4x8FbCv1hoe +H5s/m80aThGcGwJOwN9YGdUIG9KtqufghVfiBvpn2q3XujpKmN52EopauQw3sUda +0pD2Q7BnXH30ggihOPVuTF64TkLOe4nXLbsrKu0PQfHOZMSbLRYO36/rZD4KRMBF +RW4Ex7w9ijCjjgPE82Bvrf/T8n5ije+2SqbYl/WMkZd8e6H3wvP9VlbBKE4wDKNY +U5tjB97pY3fyiCv9/P+kNcUl4EWcDHDqvBQEuQINBGE06sABEADcZCBCxKKF7yMk +qQjZrZiHOknhUoUOV6rc7CYBji+30MZ9s2ml522OhH5eCsplM1a6Ya04OJBUDJzF +aAj6zhgMnkJLXv4VIvJvCGbPYDsRm1eRpx7xyXN2LWWSv6gJ2Hl0yRUp5UjSsrjD +Ym4Om326MbhvqDzKktWB8XDgftzMd8tOkblJl5eLVHtMp/3SPoyRw+NGrf3+m029 +aYovxgcGIDdWZ1n62k5MQ+G4IxYs5SUSPKoYY//h2SrTtOE6eXiBatPnjh8klq1U +5UOg/rAbzWXCO2gksXDFkEJ1DfkZvdXMBWqfWum8qlHODMuf1cqPdcoMF5EwhV74 +BKWUL4iizahcDTrIKFQdoOgSyH6e2l1DwQGVLQx/r7Bb4ksJlSB4pCmrvd2bryLn +vkyMxhx7/wcimq5l9xN46BpEDzWFhDvq2mZJ/hkfufHdlhfti2n+gCTCcG3rUDNT +hqgM56VPJCDrdiaiBZtPRyCTx/hI2FjJYcz4ZCTCw/3Tv+HpO5BBTEdjemyG/dd6 +gYCtJZH9hgNwOtrd0LokFZH4ObkMTppGO6oRR1l3959rh4es33dBCSiGCCCrXn+7 +TDj+g+aN/jfy//xPegaFk4dX+xRRiEGHRC4OhwuMW3DJ6LnS4zS0eysUvC9p9bo1 +k1+2m5w0gbss3AUmOe3e+LJIz8mwOQARAQABiQRyBBgBCAAmFiEEXuY/KnG/Eyz+ +NWfh3/5hXygkxyAFAmE06sACGw4FCQlmAYACQAkQ3/5hXygkxyDBdCAEGQEIAB0W +IQTdr8GeRrKtLWsm+EOXoI4M/9cJUQUCYTTqwAAKCRCXoI4M/9cJUVeWD/9QTYnL +tPZfL+tkWm9KJBC2tmKVOz0pcoJLfKVkuMCKTxJNTXg4f4QlLegBS6WEq3LWSHUM +7Ihyki96h62DKiW+ZJsI/xi0f65Cxz6weMAZpi2oht+VuyLPb8JWi+QcMxaMCg62 +zSkn985j1fxhPTcmsT6Ead8tV5zjjT8bC0kvEQwjMcrDtw2nwlxwbSBl+lDmIdHV +luUxm9qgihXFRCKGkHIxj8V8pTIk4P3uMfIykxsqXPkmkP6zwGWss1xsHYsbbu7G +akaPe2kG/+Owxf2NUC+qXBR7MK8h4gJMb2UaQ7Uh4P3LfSf61XsA6hlN/vs/39wy +diHb2opoSyO0+JXS6msYlMoGict0a5WU8aD0kX1VupP5dStQbhzNoqa1B0lhulkf +Tzh5du3lMUFVi3QpUj1So8L+1DjTqHkg/6eB3HMWbLmJ1xgtnNID7UbOJjZSRoaT +kgNDKtwXMr1r4KtcgaB00USVGV5cKo95cNVfdPWRLsakhP8ECGZu41R1+RzbDu1S +mDTVWU0sQ6pWUYNOidf95BtxIRadbF37ejWfFYWf8pYjlPjZeUQWPcwVqMUJfs2I +wGiuQd16XK6Bngyi+NI8lQCCacYOey1Ijl2qL3aL3LXJH339T8PfR9zgUtDalXmJ +Egq0MhgTewhAycZP3CCYBgHLkMGZ5B5p9wknrMOqD/91Ops06x/RbiUnsLoYfpKp +IDBp+TE/N5v2IKcDuQoR4lXoRuMxm4IKf6stz8KM5mvm5quVlcP1XrKlAOVsJxtv +Luz8Psy1khDewRC+wjxoEoNLxlnnnomN8anX+iBgn9dMvStxn22sI3dB2K3+P8PI +VjR3A1hvb27Qx9z4jCNnQlVbATboR2GBChPo6LvV0VoPCNKb3ta8P9l2xYVHkQuf +7oFAvSwwy08r/JQCXngdI0o3F/n4Z/LEG7yuykv64NbbwoW0TK9y8Lc8VUeBOPYX +19Y1X1KpgnruNusMQgWGskjcAies0e9PmKwO1CvbUW9qSXb2EIfmz1UQczQYkwpE +a0S79eqHLES/HL6MKAnESyGitsbwEKzUKaqhjASL+M5vMRVqV0iZ/m7oBaMcgScw +VTZy5z/BedqVgRiAcsw6sRPLvjWCjYosAfNh07J0FzkClIfF6yPJDW/58udVbqLC +7/Gswrf+W3tmdle0gXp9V8NsweDRLq1j96McegU9085C+hPXvp6p/truU4IRc4yY +ZIcOa7hvvtwLSq8Y4H5SVcLnQOKkZ0Yn60rvH5jaNYsdqKnfKnoQi3iWB/U6bY9I +a4F46WQGXOSraaMLxmMhGr+u2ZrNIIE3KpQVoOWOsb0K9MeajqG6lQn/hbrMtF7k +IInnjx1j2GoOd6Yu7IJ5nLkCDQRhNOtdARAAsUJplzogwg/eB/p4VsuHOHEPXdY/ +AyVbaHF7YlVFeKbQTNQPR8GZhzKhSpTWeqE35GLoYoKoLUA15mLgBfrNtIllmENN +v4MYry+zW5FH0DMzsi2qGNGfGIxrngxqpMERVdn0g9ljunrTZ5qYQ6STtcif+5Dv +3imGzS0HpHS/fH3x8aNAIo5RvyjAzPyDd+9sVqEPG6jKLonagg/U1KhnYmKoEy3N +Wqtyehzf0kcwtgipBLtb1OqJhzZzIQS+/gGlwfrd8O1jiZZpEG4ege3dslhJpGoR +i+wM12dhHlyBbS4kAfZjdhZNMq5mUt+yEMCzv2EhQqWL2Ksvpk4sSkbi+WX3wDcf +sW8rB3c3M1SC8jPkgLAB+kEHN+J3RwToKYbuTEHbYokaxBv/Cq251vxXGUd7Zt/i +3xLSXEiyadr7AFVTWJUuW7uDhrLtHBQ7vEwJvv+bDA6W+l7fBNus+NEFrbR2SPUq +aFIn1MKX5YXS85XstWvvpbAifWhbbm+kaRxmak7TMV1zFpZVSwGgNsDOzjW7U7QV +7MP/qTZMXIv2LcMwhTFc1POgfwjrKSj7nFKgwSXolBmCieP9k4vJqnQbeR/ylNcH +t3yBQilQY/l0mQarjyU3ACclaoY1laMs6dhUBvW2I9wGdVyFinGGVIeEHvbe+YOX +LCYG5iiHHHbAKuMAEQEAAYkCPAQYAQgAJhYhBF7mPypxvxMs/jVn4d/+YV8oJMcg +BQJhNOtdAhsgBQkJZgGAAAoJEN/+YV8oJMcgZRgP/2tFYfouQiLXHodGDZ7e1QHS +P1j3xpPzNLJgvo9tfpMRSkPPVsnJ26bmFMkw9bxo08u75osE0Hq+bV0++h3KmDRk +IGNSGafTmRs7bh3LXYDXF4cMVYykFW6tPMqO0+SDomDG8Fv4QdYXuKHNZvjAAAon +RFGGH/aTG4RSxn/UuNP5FBYPvoadugLd5Sc38HF99Sny96qntmOpbIAQguE6LASm +0s9qgCpcI4EXIKjvME9mDg3F8eyk6L7owbgO8kIAuz0EO+K1tl/rXeuKKmj72fW2 +vEZxu/gzWupEL98fiz2Hd+lQsiUlktyIIU3NXJvK6sJ3RDGv8UxWTV4Kyuby35Um +k8mBT6BV1sHdkPjmcK3alAObN1MkKdA861XtANU+UVkJFfRfPMMWX5NhNXQFrt3o +MCF2kBgUdOpMifk0KJXUNRX1Q/5Wevc1pZGiV/PLP1Tqm8hSEpUKdEK+zKYNdYbT ++fhBvYl68s1OmhWkb05wvM+cXZbMiuNH8k+9rvgRBpLfwg4lG9L7AgwE8Oh5ANWx +cr5Hl5m9sbIEehKRo6/tFMvKKDFFA6HvBj9jtnqc5ZQI8iEWWzrMcSYQJMJ5/58z +XcnDtX8fisfwxLmElPDLSCA2N5TxEsAiOZGEXJN7rlwbjldcVD9YbO8RzURA6l0U +pUqQE6+6oWiPvsvDpGdtmQINBGJ67F4BEAClVxDdMoX3Wi91HOi0+4i3K+tkISIk +L56KyMhLkDbeLD9w9BOB3SKMHIzNPZ5qv/eQNXiSbQihTdtqoISpiFJip+/9XIjd +ptdBHgofDSmzXeyIU3cMx3P1OF6jmbYqUWvQ91Iy6xkxLbxjDYNBIGpbskbOHeAK +ivg2WD4w9/5Ag5j4rIKxq85ExKA4wzv/D4Q3/7xpSoy0N5wWsnxXbZuMedpdhf/0 +hT0GI8xiHJSoOH9XmmBPAhTxtZ1ZLCJ6DB5meZ/GY21SCUBf7ZQtf1RxzQr7mIJS +WixsIsmGQm7Vgt/r+9SY0bqLlZWWl8O1w9h2LhYUtQNKLCmERRVMTeVTknm+KU0t +/3qvSBYNSwS11q7L1enKJfBXlm7HNIzh6NhwQK6ExBol1oSo+0JcjRrzLXWQbsJv +ZToiWoWeWpDJWToKP4kM8m2o393uFOuI3y2At6GRpKhXMfFx7oykaAZYDqWiGiqw +OGlTFKN1t4hTwfacFvnityMLIqrhjWcnnUhV265iLYxE+wEXwtxPD6t7PMDVbtnh +prwJLsH0rN7dh1feGzNUZQ3/XbAdozZIY7I3zytnl2uZVJzX5u6IBlu6z6AMgILp +si8cante4BPdizJapvQmnxxdXvhZWhJV5hgRoaWOxGiNIRBfu5aeKJHwRjOYbIe9 +Y8E5SuRbKywe1wARAQABtB9SaWRsZXkgQ29tYnMgPHJjb21ic0ByY29tYnMubWU+ +iQJOBBMBCgA4FiEE4NXpWpRM86r4/Bz75nTJQgd3Z+sFAmJ67F4CGwMFCwkIBwMF +FQoJCAsFFgIDAQACHgECF4AACgkQ5nTJQgd3Z+scRg//X+7zsqlGKgOkWxLmBcKj +mJkw3oH1SfH7YOE+USRrMFTr2ioWaR5J4JInt360KhpLkwA+xZjbee8scPNB/2pV +eOkHyvnzmJm5aSc/hGYpm7Pak7/lRjFUa1X+4VfJsTj7L5ExHwHyMd2aTMQN1wiI +7iFUbsIefsLZbLsKSoc3R/rKc5EYq4PXB+bdL84M9qiFuM/7IQW1jrf5NVTh+MFn +Mg6IIIr1tTts8FkBZkqvHVN0PVukfkGPV1COdHliuMqSMvbbZ/07F6LH6QXC+Tff +tNr/u24iTR9HxCrAig6gcBTU/vx4WzLasiy9vMkGlrngBLQ/nS0hlT4Q8hwhTFLH +F+FcQR9nJLKUWrUhJDrREWGe6WoV2AYYuzCLO4B1oGCLpPguJZ7JCsNZ3ss8AKts +hvDoPoK65Ua1HZ4fyKEVkTDkuTa2en77Nf7K1ydGwhXIS8BHUmjTA52x2PV9I1AB +EP7WNXty4WhehhzAx+3npw8Xlgv8RTrZ/wJWy7xtvAI+7MMAUPWgAXF50UMUsV4o +5P64JPS5wHCfOE1pqtgr4XiJlvTpLbv6yqstbudmA6GbK15nfppgBrxijOChxivK +xFWHrnDpWz1F7PdhnMgnoNR4VbAB0Zuk/2CQdRLlQeyO2Lu3qSMviqV9FPelJ3bv +7QL5nAtVKtFoVUPC2FQuCBS5Ag0EYnrsXgEQAMCJzdDxBCM1BntJ8ghpuxyG6oiK +WP0iMcU6P0hO+5MV/WnnUx2ZsKZ7d4g2jFOnB2POa5bKS0diDXw4/OXWNVl8vOiv +PE8NRme5m9Vlfjp3BqCB9BSaGGgCgS63OwDGIOFwDH8C/vufs+HavfzZVIKSzxBp +cDSNkGRGReI/JdOGB37vccdkl1pccCTKo/MS8xJngdcQZxRl0arldxNioyYrIe89 +af0j5Vzv6jCnOphMMZUj1qg12FpemG/3aHLbPwFdvRjG/Pu28qORIrp/tvotr+mG +LhhVbFwqbjkSgbuFM/CMlQcaAudMA1DugroK/3MwOGGt2cDvb3TvP+uC9IoK2F/z +VhhFPrO88D/mknm/Jh9bsEuTbhC/tMjrUeuck80Fr40jU+aicCjRu8MKbsr9RilI +fGNStrEZphUNODhK2g1VpmEnmNsc2vQZ3CERUhYpqixomWRNKL1UBZVfrh/oF803 +9cFg2/tfprE8D+B7RhESnL0RdupDKg8RSBOAX2v00XZ/fDA8cAWsxQ6+M0SmdxUB +08nqP3vTnlXR2HKdb9Y2NcMtXKCkj9ItkSvrR9XMFJexSgX/cxlBuvZuwn9l21+A +3mFOmSrfUyd3P8KwVFVkqA1tQcuVQ5DUn5UbcU9wuCibP5p6uKN8YpuvFlVQoy3I +IVfhg0PfeU7Uu+cTABEBAAGJAjYEGAEKACAWIQTg1elalEzzqvj8HPvmdMlCB3dn +6wUCYnrsXgIbDAAKCRDmdMlCB3dn69SoD/91ntODwdviY+FdziF97a7FeLAycm7i +b2df96Ft76oZCK6NoOetv5pgIobC2ifx78LsC2wLoSITtXQLLYNVVDF3gE32puif +RYlarMBIPzyXSWZFsYZrEgEoxwE3GBQNCYTWpSCaI75r7HDqMhGQhD7UgCgckbNl +9SpekzeXOLFP149IoxRUq2tB5Bl5mnikedgNe8gRS/++i4965ggOt6avs8v8L/jz +8BNwodnQ7YZ94y1FcuuAb7D10h5y5gJo2pNcEFwPOTO93Hg5jrfjnYDK2i07ZK5S +M5dsb3HPVtmxndcwM5u3kwlu0aYdFlzBddA4N2OhEqMfg5A3xvb7Ro7pPPtErg65 +71I69It+M1Uco6uDiSEaxpkBejhi/3oIl6ldxn7ARB6c2wlMGWRUvBG1JR6WMvc9 +G+lcx9fOilwi0Nyi14zNMDOU9yOHj62/z+356r+vvMcf2IR7l00r4P9RmOmd/aZd +yqRiQjSi8xn2kJPFK2JvucBRlDp895S766kpg8AoksOq2L2tsDzhkXpNbk3sFiYS +6Xx9DnkHRsolLi866T/1QitLnVBWNwNsQ2lykjUs2qdRL4x/kPMmKtLmUaXEOq0W +YnjOXWsLIwwzRA1BEW8x8n85FvllI1KuJ1v/4iDNtXOnFoPe7nsBOJrNTNJX2lhe +ZHQVCmpbts9Ffg== +=lIjB -----END PGP PUBLIC KEY BLOCK----- -- 2.30.2
signature.asc
Description: PGP signature