From 982ebe6a46fee1e6277200152bd7d889d0bba802 Mon Sep 17 00:00:00 2001 From: Mattia Rizzolo Date: Mon, 28 Oct 2019 14:35:01 +0100 Subject: [PATCH] Trust the installed debian-keyring when checking validity of dsc signatures. --- debian/changelog | 7 +++++++ ubuntutools/archive.py | 5 ++++- 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/debian/changelog b/debian/changelog index 99527a2..e9e86e2 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +ubuntu-dev-tools (0.175) UNRELEASED; urgency=medium + + * Trust the installed debian-keyring when checking validity of dsc + signatures. + + -- Mattia Rizzolo Mon, 28 Oct 2019 14:32:20 +0100 + ubuntu-dev-tools (0.174) unstable; urgency=medium [ Stefano Rivera ] diff --git a/ubuntutools/archive.py b/ubuntutools/archive.py index 71c7807..3bc54b3 100644 --- a/ubuntutools/archive.py +++ b/ubuntutools/archive.py @@ -265,7 +265,10 @@ class SourcePackage(object): message = None gpg_info = None try: - gpg_info = self.dsc.get_gpg_info() + gpg_info = self.dsc.get_gpg_info(( + '/usr/share/keyrings/debian-keyring.gpg', + '/usr/share/keyrings/debian-maintainers.gpg', + )) valid = gpg_info.valid() except IOError: message = ('Signature on %s could not be verified, install '