[pkg-gnupg-maint] Bug#1101007: Bug#1101007: regression: gpg --edit-key clean removes signature that was kept in 2.2.45

[Daniel Kahn Gillmor]

I just tried to make a local certification of Werner's own certificate
with my cert (D477040C70C2156A5C298549BB7E9101495E6BF7) , and GnuPG
refused to confirm the validity of Werner's user ID despite my own
having ultimate ownertrust.

I traced it back to the fact that my cert has a certification-only
primary key.

It looks like upstream's patch 9b7c067717d815e16f9ea3cec88bca09a6cce7cb
resolves the problem for me.  I've staged it in the debian/unstable
branch on salsa, but i won't make an upload for a few more days, to
allow 2.4.7-17 to migrate into unstable.

Uwe, if you can build what's on the debian/unstable branch in salsa and
confirm whether it resolves the problems you're seeing, it would be
great to get feedback here.  Or, wait a few days and i'll put it in
unstable anyway.

Thanks for reporting this, and sorry it has taken so long to get it
sorted out.

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20250507/bab4447a/attachment-0001.sig>