On 08/29/2014 12:56 PM, Eriberto wrote: > I would like to suggest you to add a GPG signature for your upstream > code in next release. To see more details, '$ man uscan' (search for > pgpsigurlmangle). To sign your tarball, you can use 'gpg -ab > <tarball_name>'.
I am already signing upstream tarballs since few releases. That's the
.asc files at [1].
Unfortunely, few months ago when I worked on adding the signature, I
discovered that there is a different behaviour between actual versions
of Lintian in Ubuntu and Debian (path of the signature) releases . I
would prefer to wait until it is aligned before adding the signature to
avoid the extra work of changing the packaging when syncing Ubuntu
packages from Debian packages.
Regards,
JeanFI.
[1] http://wpitchoune.net/psensor/files/
signature.asc
Description: OpenPGP digital signature
