dscverify does not find Debian keyring

$ dpkg -l devscripts
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Installed/Config-f/Unpacked/Failed-cfg/Half-inst/t-aWait/T-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name Version Description
+++-=============================================-=============================================-==========================================================================================================
ii devscripts 2.10.26ubuntu3~hardy1 scripts to make the life of a Debian Package maintainer easier

12:26 < cjwatson> perhaps somebody should add the Ubuntu keyring to the list of
                  keyrings checked by dscverify, though
12:26 < jdong> hmm this particular package is an Ubuntu one
12:26 < cjwatson> (/usr/share/keyrings/ubuntu-archive-keyring.gpg)
12:26 < jdong> oh is the Ubuntu keyring not recognized by dscverify?
12:26 < cjwatson> right

Looks like Devscripts doesn't recognize the Ubuntu keyring.

I've been affected by this too trying to use prevu to backport Intrepid packages to Hardy.

I've added the ubuntu master and archive keyrings to the script, and am attaching debdiffs for the hardy and intrepid releases.

devscripts (2.10.11ubuntu6) hardy; urgency=low

  * dscverify: Add Ubuntu keyrings (LP: #228296).

 -- TJ <email address hidden> Sun, 28 Sep 2008 23:00:00 +0200

devscripts (2.10.26ubuntu13) intrepid; urgency=low

  * dscverify: Add Ubuntu keyrings (LP: #228296).

 -- TJ <email address hidden> Sun, 28 Sep 2008 23:00:00 +0200

SRU Justification:

Impact: Using dscverify (often embedded in other tools) fails to verify Ubuntu archive keys.

The script doesn't add the Ubuntu-installed keyrings (package ubuntu-keyring) to the list of keyrings passed to gpg.

testcase: Without the keyrings dscverify will fail, reporting "dscverify: can't find any Debian keyrings"

Adding the keyrings to the list results in successful verification of the package.

Intrepid fix sponsored, waiting in unapproved. Will probably stall until after beta freeze.

Accepted into hardy-proposed, please test.

This bug was fixed in the package devscripts - 2.10.26ubuntu13

---------------
devscripts (2.10.26ubuntu13) intrepid; urgency=low

  * dscverify: Add Ubuntu keyrings (LP: #228296).

 -- TJ <email address hidden> Sun, 28 Sep 2008 23:00:00 +0200

I confirmed that this works. Copied to hardy-updates.

I still see the same effect on an up-to-date hardy

reopening

Try "dget -x http://ftp.de.debian.org/debian/pool/main/a/anthy/anthy_9100e-3.2.dsc"

Rolf, I initially assumed you actually meant "Ubuntu keyring is not taken into account", which was fixed in this SRU. Using the debian keyring has never been a problem. Maybe you don't have the "debian-keyring" package installed?