[Pkg-rust-maintainers] Bug#1076358: gpgv-sq: fails to verify some good signatures with reason "Bad public key"

Holger Levsen holger at layer-acht.org
Tue Nov 26 14:53:26 GMT 2024


On Tue, Nov 26, 2024 at 03:04:00PM +0100, Julian Andres Klode wrote:
> Control: clone -1 -2
> Control: reassign -2 apt
> Control: tag -1 wontfix
[...] 
> You can override this with a custom security policy:
[...] 
> The next version of APT will include said policy and apply it
> by default to give a grace period of about one year, but as
> for gpgv-sq, I think the default behavior makes sense.

for the avoidance of doubt: I agree & thanks Julian! 


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

Alles weird gut.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20241126/c1c02b09/attachment.sig>


More information about the Pkg-rust-maintainers mailing list