Bug#433091: Clone+Reassign to gpgv of #433091 apt-get: ignores expiry of archive keys

2009-04-05 Thread Peter Palfrader
Goswin von Brederlow schrieb am Donnerstag, dem 04. September 2008: m...@book:% sudo gpgv --keyring etc/apt/trusted.gpg var/lib/apt/lists/localhost_debian_dists_sid_Release.gpg var/lib/apt/lists/localhost_debian_dists_sid_Release gpgv: Signature made Tue Sep 2 18:08:46 2008 CEST using RSA

Bug#433091: Clone+Reassign to gpgv of #433091 apt-get: ignores expiry of archive keys

2008-09-04 Thread Goswin von Brederlow
Hi, I just cloned and reassigned your bug about apt-get ignoring expired keys. apt-get forks gpgv to do the actual verification and that gives no indication of any expirey. So apt-get has no chance to detect and warn about such an event. [EMAIL PROTECTED]:% sudo gpgv --keyring