Bug#1022200: CPAN should be more helpful on missing key when check_sigs is enabled (Was: Re: cpan: cannot check signatures)

On 2022-10-22 17:33:03 +0200, Clément Hermann wrote: > Le 22/10/2022 à 15:59, Vincent Lefevre a écrit : > > I agree. There should be at least sufficient documentation when the > > error occurs. If Debian could automatically provide the key and use > > it, this would be better, IMHO: less work for

Bug#1022200: CPAN should be more helpful on missing key when check_sigs is enabled (Was: Re: cpan: cannot check signatures)

Hi, Le 22/10/2022 à 15:59, Vincent Lefevre a écrit : Hi, On 2022-10-22 14:31:24 +0200, Clément Hermann wrote: I could reproduce your issue if I enable check_sigs option in CPAN (which is _not_ the default). OK, I forgot about that (though I think that it should be the default for security

Bug#1022200: CPAN should be more helpful on missing key when check_sigs is enabled (Was: Re: cpan: cannot check signatures)

Hi, On 2022-10-22 14:31:24 +0200, Clément Hermann wrote: > I could reproduce your issue if I enable check_sigs option in CPAN > (which is _not_ the default). OK, I forgot about that (though I think that it should be the default for security reasons, and IIRC, this was recommended for this reason

Bug#1022200: CPAN should be more helpful on missing key when check_sigs is enabled (Was: Re: cpan: cannot check signatures)

Hi! Thanks for your report. I could reproduce your issue if I enable check_sigs option in CPAN (which is _not_ the default). Thing is, it's not a bug, really. Or not quite. It's a result of the correction of a bug in CPAN < 2.29 who would succeed silently if there is no signature/no way to