Tag: orig-tarball-missing-upstream-signature
Severity: warning
Check: upstream-signature
Explanation: The packaging includes an upstream signing key but the corresponding
.asc
signature for one or more source tarballs are not included
in your .changes file.
.
Please ensure a
<package>_<version>.orig.tar.<ext>.asc
file
exists in the same directory as your
<package>_<version>.orig.tar.<ext>
tarball prior
to dpkg-source --build
being called.
.
If you are repackaging your source tarballs for Debian Free Software
Guidelines compliance reasons, ensure that your package version includes
dfsg
or similar.
.
Sometimes, an upstream signature must be added for an orig.tar.gz
that is already present in the archive. Please include the upstream sources
again with dpkg-genchanges -sa
while the signature is also present.
Your upload will be accepted as long as the new orig.tar.gz
file
is identical to the old one.
See-Also: Bug#954743, Bug#872864