[Pkg-auth-maintainers] Bug#876065: Invalid upstream-signing-key

[Luke W Faraone]

Package: yubico-piv-tool
Version: 1.4.2-2
Severity: normal

The file is in ASCII-armoured format, which is incorrect for
`debian/upstream-signing-key.pgp`. The file should should instead be
renamed to `debian/upstream/signing-key.asc`.

$ uscan
uscan: Newest version of yubico-piv-tool on remote site is 1.4.3, local version is 1.4.2
uscan:    => Newer package available from
      https://developers.yubico.com/yubico-piv-tool/Releases/yubico-piv-tool-1.4.3.tar.gz
gpgv: Signature made Tue 18 Apr 2017 11:11:00 UTC using RSA key ID B2168C0A
gpgv: [don't know]: invalid packet (ctb=2d)
gpgv: keydb_search failed: invalid packet
gpgv: Can't check signature: public key not found
uscan warn: OpenPGP signature did not verify.


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.12.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages yubico-piv-tool depends on:
ii  libc6         2.24-17
ii  libpcsclite1  1.8.22-1
ii  libssl1.0.2   1.0.2l-2
ii  libykpiv1     1.4.2-2

yubico-piv-tool recommends no packages.

yubico-piv-tool suggests no packages.

-- no debconf information