780280">

Debian Bug report logs - #780280
dak: generate rejection mail for mails with expired signature

Package: ftp.debian.org; Maintainer for ftp.debian.org is Debian FTP Master <ftpmaster@ftp-master.debian.org>;

Reported by: Ansgar Burchardt <ansgar@debian.org>

Date: Wed, 11 Mar 2015 15:21:06 UTC

Severity: normal

Reply or subscribe to this bug.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian FTP Master <ftpmaster@ftp-master.debian.org>:
Bug#780280; Package ftp.debian.org. (Wed, 11 Mar 2015 15:21:11 GMT) (full text, mbox, link).


Acknowledgement sent to Ansgar Burchardt <ansgar@debian.org>:
New Bug report received and forwarded. Copy sent to Debian FTP Master <ftpmaster@ftp-master.debian.org>. (Wed, 11 Mar 2015 15:21:11 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Ansgar Burchardt <ansgar@debian.org>
To: submit@bugs.debian.org
Subject: dak: generate rejection mail for mails with expired signature
Date: Wed, 11 Mar 2015 16:20:07 +0100
Package: ftp.debian.org
User: ftp.debian.org@packages.debian.org
Usertag: dak
Priority: wishlist

It would be nice if dak would generate rejection mails for uploads that
have a valid signature, but where the signature is expired or from an
expired key.

daklib/gpg.py already has some support for differentiating between
expired and invalid signatures, but some bits are still missing.

Ansgar



Information forwarded to debian-bugs-dist@lists.debian.org, Debian FTP Master <ftpmaster@ftp-master.debian.org>:
Bug#780280; Package ftp.debian.org. (Fri, 13 Nov 2015 10:27:04 GMT) (full text, mbox, link).


Acknowledgement sent to Jérémy Bobbio <lunar@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian FTP Master <ftpmaster@ftp-master.debian.org>. (Fri, 13 Nov 2015 10:27:04 GMT) (full text, mbox, link).


Message #10 received at 780280@bugs.debian.org (full text, mbox, reply):

From: Jérémy Bobbio <lunar@debian.org>
To: 780280@bugs.debian.org
Subject: Re: Bug#780280: dak: generate rejection mail for mails with expired signature
Date: Fri, 13 Nov 2015 11:22:34 +0100
[Message part 1 (text/plain, inline)]
Ansgar Burchardt:
> It would be nice if dak would generate rejection mails for uploads that
> have a valid signature, but where the signature is expired or from an
> expired key.

It would not only be nice, it would help not being trapped in very silly
situation: files uploaded with a valid signature but with an expired
key are not removed from the queue. That means teammates are unable to
sponsor the upload while waiting for the keyring to be updated.
It's not possible to remove them using dcut either as the key will still
be expired…

I would be grateful if you could properly REJECT uploads for such cases.

Thanks,
-- 
Lunar                                .''`. 
lunar@debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian FTP Master <ftpmaster@ftp-master.debian.org>:
Bug#780280; Package ftp.debian.org. (Sun, 06 Aug 2017 11:51:03 GMT) (full text, mbox, link).


Acknowledgement sent to Rolf Leggewie <debian-bugs@rolf.leggewie.biz>:
Extra info received and forwarded to list. Copy sent to Debian FTP Master <ftpmaster@ftp-master.debian.org>. (Sun, 06 Aug 2017 11:51:03 GMT) (full text, mbox, link).


Message #15 received at 780280@bugs.debian.org (full text, mbox, reply):

From: Rolf Leggewie <debian-bugs@rolf.leggewie.biz>
To: 780280-subscribe@bugs.debian.org, 780280@bugs.debian.org
Cc: ansgar@debian.org, lunar@debian.org
Subject: Re: dak: generate rejection mail for mails with expired signature
Date: Sun, 6 Aug 2017 19:41:02 +0800
Hello!

Currently, the uploader of a package using an expired key is left
guessing as to why the package was accepted but doesn't show up in the
archive.  Please remove this guesswork to improve productivity.  Thank you.

Regards

Rolf



Information forwarded to debian-bugs-dist@lists.debian.org, Debian FTP Master <ftpmaster@ftp-master.debian.org>:
Bug#780280; Package ftp.debian.org. (Fri, 26 Feb 2021 15:57:02 GMT) (full text, mbox, link).


Acknowledgement sent to Matthijs Kooijman <matthijs@stdin.nl>:
Extra info received and forwarded to list. Copy sent to Debian FTP Master <ftpmaster@ftp-master.debian.org>. (Fri, 26 Feb 2021 15:57:02 GMT) (full text, mbox, link).


Message #20 received at 780280@bugs.debian.org (full text, mbox, reply):

From: Matthijs Kooijman <matthijs@stdin.nl>
To: 780280-subscribe@bugs.debian.org, 780280@bugs.debian.org
Subject: Re: Bug#780280: dak: generate rejection mail for mails with expired signature
Date: Fri, 26 Feb 2021 16:17:25 +0100
[Message part 1 (text/plain, inline)]
Hey folks,

this issue still seems to exist, I just discovered that an upload I did
three months ago was never processed because I forgot to push my
extended key to Debian, which is a bit of a bummer.

Gr.

Matthijs
[signature.asc (application/pgp-signature, inline)]

Severity set to 'normal' from 'wishlist' Request was from Luca Falavigna <dktrkranz@debian.org> to control@bugs.debian.org. (Sun, 11 Sep 2022 12:39:10 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Thu Jan 30 23:55:23 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.