Hi again stef, On Thu, Aug 08, 2024 at 12:21:10PM +0200, Joost van Baal-Ilić wrote: > On Thu, Aug 08, 2024 at 12:06:44PM +0200, stef wrote: > > On Thu, Aug 08, 2024 at 07:08:13AM +0200, Joost van Baal-Ilić wrote: > > > > > > I just found out https://pypi.org/project/pysodium/#files lacks a > > > pysodium-0.7.18.tar.gz.asc . (It's not published on > > > https://github.com/stef/pysodium/releases either.) (You did sign your > > > pysodium > > > releases in the past, didn't you?) Could you please pgp sign your > > > release, > > > and upload the signature? Thanks! Bye, > > > > i just added the signatures to github: > > > > https://github.com/stef/pysodium/releases/tag/v0.7.18 >
OK, it's always something: after some fiddling I've found out our copy of your key we have in our git (in https://salsa.debian.org/python-team/packages/pysodium/-/blob/master/debian/upstream/signing-key.asc?ref_type=heads ) is expired: 4096/970DEB6694D50988 créé : 2014-08-23 expirée : 2018-09-03 utilisation : SC confiance : inconnu validité : expirée [ expirée ] (1). stefan marsiske (temp online key) <[email protected]> Where can we/Debian find an updated copy of that key? Thanks again! Bye, Joost
