Package: debian-archive-keyring
Version: 2019.1
Severity: normal
The Debian 8 (Jessie) signing keys are no longer used, but still
shipped in debian-archive-keyring.gpg:
pub rsa4096/0xCBF8D6FD518E17E1 2013-08-17 [SC] [expires: 2021-08-15]
75DDC3C4A499F1A18CB5F3C8CBF8D6FD518E17E1
uid Jessie Stable Release Key
<debian-rele...@lists.debian.org>
pub rsa4096/0x7638D0442B90D010 2014-11-21 [SC] [expires: 2022-11-19]
126C0D24BD8A2942CC7DF8AC7638D0442B90D010
uid Debian Archive Automatic Signing Key (8/jessie)
<ftpmas...@debian.org>
pub rsa4096/0x9D6D8F6BC857C906 2014-11-21 [SC] [expires: 2022-11-19]
D21169141CECD440F2EB8DDA9D6D8F6BC857C906
uid Debian Security Archive Automatic Signing Key (8/jessie)
<ftpmas...@debian.org>
They should be rotated out into debian-archive-removed-keys.gpg.
Ansgar
