Dear Maintainer,

I use this doc since a few months to upgrade Debian 12 hosts.
I believe the section #adding-apt-internet-sources has changed recently (<1month?)
It now presents this line:
```
Signed-By: /usr/share/keyrings/debian-archive-keyring.pgp
```
And I belive the correct line for Debian 12 is:
```
Signed-By: /usr/share/keyrings/debian-archive-keyring.pgp
```
As the .pgp file can't be found. But the .gpg version is here.
So I have this error when adding the new source:
```
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://security.debian.org/debian-security trixie-security InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BDE6D2B9216EC7A8 NO_PUBKEY 8E9F831205B4BA95
W: Failed to fetch https://security.debian.org/debian-security/dists/trixie-security/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY BDE6D2B9216EC7A8 NO_PUBKEY 8E9F831205B4BA95
W: Some index files failed to download. They have been ignored, or old ones used instead.
```
Setting the Signed-By option with the .gpg filename fixes it, and I can
update and upgrade as wanted

Thanks for reading!

did you mean debian 12 ie oldstable, ie bookworm but trixie is Debian 13?
if you meant 12, i think you have used the wrong release-notes

These are the same lines?

that seems to be an issue on your system? you should have symlinks
from the .gpg to the .pgp in trixie

did you mean debian 12 ie oldstable, ie bookworm but trixie is Debian 13?
if you meant 12, i think you have used the wrong release-notes

These are the same lines?

that seems to be an issue on your system? you should have symlinks
from the .gpg to the .pgp in trixie

Hi Richard,


I guess his point is that when you upgrade, you start from a bookworm
system. (I have not checked what you have there).

Paul

Le 04/03/2026 à 23:03, Paul Gevers - elbrus@debian.org a écrit :


Right, that's my point! Thanks. (and I'm a woman :p)

I want to upgrade a debian 12 host to debian 13. And on debian 12 the
keyring ends with .gpg.
I'm about to perform the upgrade, so I don't already have a .pgp file.

ppom

Le 04/03/2026 à 22:56, Richard Lewis -
richard.lewis.debian@googlemail.com a écrit :

 > These are the same lines?

Yes, my bad. I meant this:

 > It now presents this line:
 > ```
 > Signed-By: /usr/share/keyrings/debian-archive-keyring.pgp
 > ```
 > And I belive the correct line for Debian 12 is:
 > ```
 > Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 > ```

---

 > did you mean debian 12 ie oldstable, ie bookworm but trixie is Debian 13?

I'm upgrading from 12 to 13, and I'm writing about this URL:
https://www.debian.org/releases/stable/release-notes/upgrading.html#adding-apt-internet-sources

Le 04/03/2026 à 22:56, Richard Lewis -
richard.lewis.debian@googlemail.com a écrit :

 > These are the same lines?

Yes, my bad. I meant this:

 > It now presents this line:
 > ```
 > Signed-By: /usr/share/keyrings/debian-archive-keyring.pgp
 > ```
 > And I belive the correct line for Debian 12 is:
 > ```
 > Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
 > ```

---

 > did you mean debian 12 ie oldstable, ie bookworm but trixie is Debian 13?

I'm upgrading from 12 to 13, and I'm writing about this URL:
https://www.debian.org/releases/stable/release-notes/upgrading.html#adding-apt-internet-sources

Hi


I'm sorry for assuming.

Paul

Hi,

I'd like to confirm this issue: I have two Debian bookworm machines and both only have .gpg files in /usr/share/keyrings

Regards,
Peter