[Pkg-rust-maintainers] Bug#1108506: gpg-sq: clear-sign failed with debsign

[Holger Levsen]

Hi Leonardo,

thanks for your bug report!

On Sun, Jun 29, 2025 at 04:57:13PM -0600, Leonardo Arias Fonseca wrote:
> I want to sign my debian package with sequoia, so I tried with gpg-sq and got the error "Unusable secret key".
> 
> ```
> golang-github-offchainlabs-go-bitfield import/git20250408.ad7364d 
> ❯ debsign -k 814701B018F2684D4234E927C279C6A1E423C96C -p gpg-sq
>  signfile dsc ../golang-github-offchainlabs-go-bitfield_0.0~git20250408.ad7364d-2.dsc 814701B018F2684D4234E927C279C6A1E423C96C
> gpg: skipped "814701B018F2684D4234E927C279C6A1E423C96C": Unusable secret key
> gpg: /tmp/debsign.JSl3QUmL/golang-github-offchainlabs-go-bitfield_0.0~git20250408.ad7364d-2.dsc: clear-sign failed: Unusable secret key
> debsign: gpg-sq error occurred!  Aborting....
> ```

you might get a better error message with sq directly. 
can you please try 'sq sign --cleartext --signer FINGERPRINT' and post the output?

Also the output of 'sq inspect --cert FINGERPRINT' would be helpful.


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

🔥 - this is fine.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-rust-maintainers/attachments/20250630/f637dcb1/attachment.sig>