sts-sponsors team mailing list archive

[Christian Ehrhardt  <2013081@xxxxxxxxxxxxxxxxxx>]

Michal has found the same,
he will work on pushing the fix to block-proposed for Focal and Jammy to not hit anyone else again in the future.

Furthermore he will need it to fix 1870360 in Bionic.

For Kinetic, since this is just a quality of life for potential future updates I think we can ignore, it just has a few weeks of support left.
Setting won't fix

** Also affects: simplestreams (Ubuntu Jammy)
   Importance: Undecided
       Status: New

** Also affects: simplestreams (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: simplestreams (Ubuntu Kinetic)
   Importance: Undecided
       Status: New

** Also affects: simplestreams (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Changed in: simplestreams (Ubuntu Kinetic)
       Status: New => Won't Fix

** Changed in: simplestreams (Ubuntu Jammy)
       Status: New => Triaged

** Changed in: simplestreams (Ubuntu Focal)
       Status: New => Triaged

** Changed in: simplestreams (Ubuntu Bionic)
       Status: New => Triaged

** Changed in: simplestreams (Ubuntu Bionic)
     Assignee: (unassigned) => Michał Małoszewski (michal-maloszewski99)

** Changed in: simplestreams (Ubuntu Focal)
     Assignee: (unassigned) => Michał Małoszewski (michal-maloszewski99)

** Changed in: simplestreams (Ubuntu Jammy)
     Assignee: (unassigned) => Michał Małoszewski (michal-maloszewski99)

-- 
You received this bug notification because you are a member of MAAS
Maintainers, which is subscribed to simplestreams in Ubuntu.
https://bugs.launchpad.net/bugs/2013081

Title:
  Autopkgtest/build fails, because example gpg key is expired

Status in simplestreams package in Ubuntu:
  Fix Released
Status in simplestreams source package in Bionic:
  Triaged
Status in simplestreams source package in Focal:
  Triaged
Status in simplestreams source package in Jammy:
  Triaged
Status in simplestreams source package in Kinetic:
  Won't Fix

Bug description:
  Running the autopkgtest fails to build the package. During the build
  process the example gpg key (examples/keys/example.pub and
  examples/keys/example.sec) gets imported. When the example key is used
  to test the package during build time; the build fails, because gpg
  fails to sign something with the expired gpg key.

  How to verify:
  1. Checkout the source tree
  2. import examples/keys/example.pub with gpg --import examples/keys/example.pub
  3. see details about key: gpg --list-keys 198E8D3C27227898CB4D413CA9714A203967536E

  Should display something like this:
  pub   rsa1024 2013-02-26 [SCEA] [expired: 2023-02-24]
        198E8D3C27227898CB4D413CA9714A203967536E
  uid           [ expired] Simple Streams Test User (Test Usage Only. Do Not Import.) <simplestreams@xxxxxxxxxxxxxxxxx>

  4. Note that the key expired at 24.02.2023
  5. (optional) remove key: gpg --delete-keys 198E8D3C27227898CB4D413CA9714A203967536E

  How to fix this:
  Generate a new key upstream or do the key generation dynamically to avoid this problem entirely.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/simplestreams/+bug/2013081/+subscriptions