[pkg-php-pear] RFS: php-net-socket, php-net-url, php-http, php-net-ldap
zigo at debian.org
Wed Jun 19 08:17:51 UTC 2013
On 06/18/2013 06:29 PM, Prach Pongpanich wrote:
> On Tue, Jun 18, 2013 at 3:25 PM, Thomas Goirand <zigo at debian.org> wrote:
>> On 06/05/2013 02:54 PM, Prach Pongpanich wrote:
>>> My Fingerprint: 0CA75D987B8ECF6EA9443AD839091E8123CE1C09
>> This key doesn't seem to be in the debian-keyring package (which is
>> mandatory for the dcut command).
>> Also please, next time you need access, please cut/past the full needed
>> dcut command. For example:
>> dcut dm --uid 0x23CE1C09 --allow php-cache-lite php-calendar
>> php-html-template-it php-net-dime php-net-sieve php-services-weather
>> php-symfony2-yaml pear-symfony2-channel
>> (though again here, the key isn't found...)
> Hi Thomas,
> dcut --force dm --uid 0CA75D987B8ECF6EA9443AD839091E8123CE1C09 \
> --allow php-cache-lite php-calendar php-html-template-it php-net-dime \
> php-net-sieve php-services-weather php-soap php-mdb2-driver-mysql \
> Please use the --force option .
>  http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=711057
Though, I have to tell you: I've been doing this very reluctantly,
because your key is only signed by 2 signatures of persons that I don't
know. Lucky, these persons have signatures from people I know well in
person (Christian Perrier, Paul Wise, Andrew Lee, and Yabuki). So to me,
your PGP key 0x0CA75D987B8ECF6EA9443AD839091E8123CE1C09 is only half
trust-able. I hope you can have more signature in the future.
The other way would have been to trust the DM keyring, but you're not in
it, as uploaded in Debian. It would have been safer for me to wait until
your key was there... I don't think this was a bug in dcut, I think it's
a very normal feature. Probably we should ask that the debian keyring is
uploaded more often (at least in Sid).
More information about the pkg-php-pear