Comment 5 for bug 228296

Revision history for this message
TJ (tj) wrote :

SRU Justification:

Impact: Using dscverify (often embedded in other tools) fails to verify Ubuntu archive keys.

The script doesn't add the Ubuntu-installed keyrings (package ubuntu-keyring) to the list of keyrings passed to gpg.

testcase: Without the keyrings dscverify will fail, reporting "dscverify: can't find any Debian keyrings"

Adding the keyrings to the list results in successful verification of the package.