[pkg-gnupg-maint] Bug#985793: Outdated debian/upstream/signing-key.asc

[Christoph Biedl]

Source: libgpg-error
Version: 1.38-2
Severity: normal

Hello,

the upstream signing key debian/upstream/signing-key.asc in the
libgpg-error source package (likewise for at least gnupg1, gpa,
gpgme1.0, pinentry) has expired:

    $ cat debian/upstream/signing-key.asc | gpg --import-options show-only --import
    pub   rsa2048 2011-01-12 [SC] [expired: 2019-12-31]
          D8692123C4065DEA5E0F3AB5249B39D24F25E3B6
    uid                      Werner Koch (dist sig)

This causes uscan to fail.

Replacing with the key shown at https://www.gnupg.org/signature_key.html
will make uscan pass, tested with libgpg-error 1.42.

    Christoph

-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.20 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20210323/eba57481/attachment.sig>