Ubuntu
apt package

  1. Bug #857472
  2. Comment #1

Comment 1 for bug 857472

Revision history for this message
Michael Vogt (mvo) wrote :

Looking at this problem I think we should actually change the way we provide the keyring on the server and provide it
there as a signed keyring file.

I did not manage to get reliable key signature verification checks with gpg if there are multiple identical keyids in the keyring, so I think the best approach is to simplify and just provide the complete archive keyring file signed with the master-key.

I will outline a debdiff with the new approach.