Old PPA has no GPG signature

[Toni Ruottu]

I'm moving this here. It was originally reported by ^rooker at https://bugs.launchpad.net/ubuntu/+bug/248231
The bug report is about problems this particular PPA: https://launchpad.net/~dooooomi/+archive/ppa
The original message follows:

I wanted to use Dominic's PPA repository for Hardy, but although I've imported his key into gpg (following the PPA instructions), both pyliblo packages cannot be authenticated.

Was a different key used than the one announced on the PPA page, which is:
keyID: 1024R/6B51D222
fingerprint: 0x3c9a1a9ef7cb86c1bc885f40ca9840026b51d222

I'm willing to help clearing this up (might as well just be on my side).
Thanks!

[Toni Ruottu (toni-ruottu)]

I have experienced the bug myself as well.

[Martin Pool (mbp)]

There don't seem to be any gpg signature files in that repository.

[Toni Ruottu (toni-ruottu)]

Are they supposed to appear there by magic?

[Martin Pool (mbp)]

2009/3/5 Toni Ruottu <email address hidden>:
> Are they supposed to appear there by magic?

Well, automatically at least.

--
Martin <http://launchpad.net/~mbp/>

[William Grant (wgrant)]

They will only appear when their pocket is republished, which will only happen when it becomes dirty, which hasn't happened since the last packages were published on January 26. PPA signing wasn't turned on until later, so that PPA isn't signed.

[Martin Pool (mbp)]

Thanks wgrant.

We could document this, but since it's going to affect less and less PPAs as time goes on I suggest we just close it.

[^rooker (rooker)]

So this means that for now, the packages are just unsigned, but will be signed as soon as they're updated?

Thanks for this fast response!
I will keep this thing in mind when I finally find the time to fill my own PPA. :)

[Martin Pool (mbp)]

2009/3/5 ^rooker <email address hidden>:
> So this means that for now, the packages are just unsigned, but will be
> signed as soon as they're updated?
>
> Thanks for this fast response!
> I will keep this thing in mind when I finally find the time to fill my own PPA. :)

As soon as any package is added or removed it will all be re-signed, I believe.

--
Martin <http://launchpad.net/~mbp/>

[Dominic Sacré (dooooomi)]

> As soon as any package is added or removed it will all be re-signed, I believe.

Yup. I've recently added another package to the PPA. All packages, including the older ones, are now signed properly.