Public bug reported:

Since version 2017.7ubuntu1, the keys installed by the Ubuntu version of
debian-archive-keyring are no longer trusted by default. Coming from
Debian, this surprised me, but now I've found the changelog entry, I
understand the reasoning.

Initially, though, I had expected installing debian-archive-keyring to
be sufficient to trust the debian archive keys. When it did not work, I
checked the README, which does not help here (in fact, it seems to
erronously document that keys *are* placed in trusted.gpg.d).

I would suggest improving the README:
 - Note that this package differs from the Debian version and does not install 
keys as trusted.
 - Provide a suggestion (preferably a copy-pastable shell command) on how to 
make these keys trusted.

** Affects: debian-archive-keyring (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1820586

Title:
  Should document keys are not trusted by default

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/debian-archive-keyring/+bug/1820586/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to