- Package:
- gpg-from-sq
- Source:
- gpg-from-sq
- Submitter:
- Aurélien COUDERC
- Date:
- 2025-01-11 09:51:02 UTC
- Severity:
- normal
Dear Maintainers, while testing gpg-from-sq I noticed that I get an incorrect behaviour trying to retrieve a key from a keyserver and exporting it as upstream/signing-key.asc. I have a script that does something like : rm ~/addkey.keyring gpg --no-default-keyring --keyring ~/addkey.keyring --keyserver hkp://keyserver.ubuntu.com --recv-keys F1955ED9D1C2D10D80B31B3B14EE37CD15C53BDD gpg --yes --no-default-keyring --keyring ~/addkey.keyring --export --export-options export-minimal,export-clean --armor --output debian/upstream/signing-key.asc 1. This breaks with gpg-from-sq which tells me gpg: error: Key resource "/home/coucouf/addkey.keyring" does not exist 2. If I touch ~/addkey.keyring first then the steps above will run without errorring out, but the resulting ascii key is incorrect. Running uscan --download-current-version afterwards tells me: uscan die: Failed to dearmor key(s) from debian/upstream/signing-key.asc at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77. You’ll find the keys exported by gpg and sq in attachment. This examples comes from skrooge master or debian/2.33.0-1 tag. [1] [1] https://salsa.debian.org/qt-kde-team/extras/skrooge Thanks for your work on the sequoia stack. -- Aurélien
I tried to reproduce this on my sid system, and there gpg-sq didn't manage to download the key at all: capitol@tone3:/tmp$ rm addkey* capitol@tone3:/tmp$ touch addkey2.keyring capitol@tone3:/tmp$ LANG=C gpg --no-default-keyring --keyring /tmp/addkey.keyring --keyserver hkp://keyserver.ubuntu.com --recv-keys F1955ED9D1C2D10D80B31B3B14EE37CD15C53BDD gpg: keybox '/tmp/addkey.keyring' created gpg: WARNING: server 'dirmngr' is older than us (2.2.45 < 2.2.46) gpg: Note: Outdated servers may lack important security fixes. gpg: Note: Use the command "gpgconf --kill all" to restart them. gpg: key 14EE37CD15C53BDD: public key "St�hane MANKOWSKI <stephane@mankowski.fr>" imported gpg: Total number processed: 1 gpg: imported: 1 capitol@tone3:/tmp$ LANG=C gpg-sq --no-default-keyring --keyring /tmp/addkey2.keyring --keyserver hkp://keyserver.ubuntu.com --recv-keys F1955ED9D1C2D10D80B31B3B14EE37CD15C53BDD gpg: key 14EE37CD15C53BDD: "Stéphane MANKOWSKI <stephane@mankowski.fr>" not changed gpg: Total number processed: 0 gpg: unchanged: 1 capitol@tone3:/tmp$ ls -la addkey* .rw-rw-r-- capitol capitol 688 B Sat Jan 11 10:42:12 2025 addkey.keyring .rw------- capitol capitol 32 B Sat Jan 11 10:42:12 2025 addkey.keyring~ .rw-rw-r-- capitol capitol 0 B Sat Jan 11 10:42:01 2025 addkey2.keyring Still looks like a bug to me. //Alex