Source: debian-archive-keyring Version: 2017.5 Severity: serious Tags: buster sid
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/debian-archive-keyring.html ... gpg --no-options --no-default-keyring --no-auto-check-trustdb --trustdb-name ./trustdb.gpg \ --keyring keyrings/team-members.gpg --verify \ keyrings/debian-archive-keyring.gpg.asc \ keyrings/debian-archive-keyring.gpg gpg: Signature made Thu May 25 06:30:03 2017 -12 gpg: using RSA key C5CE5DC2C542CD59 gpg: BAD signature from "Adam D. Barratt <a...@adam-barratt.org.uk>" [unknown] Makefile:17: recipe for target 'verify-results' failed make[1]: *** [verify-results] Error 1 make[1]: Leaving directory '/build/1st/debian-archive-keyring-2017.5' dh_auto_build: make -j1 returned exit code 2 debian/rules:3: recipe for target 'build' failed make: *** [build] Error 2 Works after downgrading gnupg to the buster version. The Debian GnuPG Maintainers are Cc'ed, please reassign if the bug turns out to be there.
