Package: debian-keyring
Version: 2025.09.18
Severity: normal
Dear keyring maintainers,
Currently keyring.debian.org lookup with op=get shows:
gpg: WARNING: "--secret-keyring" is an obsolete option - it has no effect
The related removal code of the secret keyring and its option
`--secret-keyring` in gnupg was written in 2010.
[source code]
https://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=commit;h=8e5010a958ded63ab6df89e1ba4d45ed9f2e572a
(see `gnu10/gpg.c: case oSecretKeyring:` and others)
These removal changes were released at 2014, with gnupg 2.1.0.
[announcement] https://gnupg.org/faq/whats-new-in-2.1.html#nosecring
The option was functional up to gnupg 2.0 (2.0.31 as of 2017-12-30).
It has been ignored since GnuPG 2.1.0 (2014-11-06).
It now triggers a warning in the following versions, due to the fix for
[bug t2749]:
2.2.31 <= gnupg < 2.3.0
2.3.3 <= gnupg
[bug t2749] https://dev.gnupg.org/T2749
Therefore, I believe the option `--secret-keyring` can be safely removed
safely if keyring debian.org uses gnupg >= 2.1.0.
-- System Information:
Debian Release: forky/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.16.12+deb14-amd64 (SMP w/22 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8), LANGUAGE=en_US.UTF-8
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
debian-keyring depends on no packages.
Versions of packages debian-keyring recommends:
ii gnupg 2.4.8-3
debian-keyring suggests no packages.
-- no debconf information
