- Package:
- devscripts
- Source:
- devscripts
- Description:
- scripts to make the life of a Debian Package maintainer easier
- Submitter:
- Johannes 'josch' Schauer
- Date:
- 2021-01-25 15:06:04 UTC
- Severity:
- normal
Hi,
dscverify ignores the GPGHOME environment variable. Instead it hardcodes
$ENV{HOME}/.gnupg/trustedkeys.gpg.
Second bug: modern gpg doesn't use trustedkeys.gpg but pubring.kbx.
It seems that trustedkeys.gpg is an implementation detail of gpg and
should not be relied upon.
Thanks!
cheers, josch