1. Forum
  2. Usenet
  3. LINUX.DEBIAN.DEVEL

  • my package uploads silently rejected

    From Jonas Smedegaard@21:1/5 to All on Wed Nov 30 15:10:01 2022
    Hi,

    I am unable to succesfully dput packages. Most likely the cause is my
    too late updating my PGP key expiry date - but that should be solved by
    now, and I am unable to figure out how to debug the problem or whom to
    contact about it.

    I patiently waited until debian-archive-keyring package was updated with
    my refreshed key in it, and since then I have regularly tested
    re-uploading the package rust-criterion where I receive the initial confirmation that the upload was received but the seconed confirmation (typically appearing ~10 minutes later) that the package was accepted
    does not appear.

    I have tried ssh into the host ssh.upload.debian.org and (after fumbling around) found the file /srv/upload.debian.org/queued/run/log where I see
    only succesful notices about rust-criterion, no indication of rejection.

    What to do next? Who to nudge? Any clues, anyone?


    - Jonas

    --
    * Jonas Smedegaard - idealist & Internet-arkitekt
    * Tlf.: +45 40843136 Website: http://dr.jones.dk/
    * Sponsorship: https://ko-fi.com/drjones

    [x] quote me freely [ ] ask before reusing [ ] keep private --==============181572359794493710=MIME-Version: 1.0
    Content-Transfer-Encoding: 7bit
    Content-Description: signature
    Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmOHYpwACgkQLHwxRsGg ASHSdQ//fX7wTfVCJbc2k3xF65lnzx5BmEcs78Oa2QB3LuDNxeB6PXuJe4Rs+CXN Qt1rmWI8hROlT27kWqP0adAUYiyL7H/gagJ6LTHJcgVmZv3Jj9TKNpZTkvpQIhCA 8s8sqUa9I6fwX2x8yPqAhmM4Awi7/f7YD08EpcKWErnyaTY96461iwP04ZtX/7zd iHzJRtiqzcn8YOLHb+iAZB1+XMRTpi7d8ebyMtI59kvJB2ODfdapUJnmvCl48xs/ EJVixc+4zCCJ0+kxF3HsB0mBJDqUjgG1NYM4hcJVBAEY94ObToKqgz8WgsLCFUbv d4sA8cLeETjs54el7oiozuYlqMeKXADf5YXT/RlsVUKtd2zx/hxsVywlVsahDP3p DOuv5/N24VGj0TxGJnMWRh5Jdc2mHxA4VI4DREHS+vA9L9AnDHUsguZbNJLIo4AS agPBhv2x6YBG8YyPdb8+TDHWj1Hosn4HoNm+kO4q
  • From Peter B@21:1/5 to Jonas Smedegaard on Wed Nov 30 16:10:01 2022
    On 30/11/2022 14:03, Jonas Smedegaard wrote:
    Hi,

    I am unable to succesfully dput packages. Most likely the cause is my
    too late updating my PGP key expiry date - but that should be solved by
    now, and I am unable to figure out how to debug the problem or whom to contact about it.

    I patiently waited until debian-archive-keyring package was updated with
    my refreshed key in it, and since then I have regularly tested
    re-uploading the package rust-criterion where I receive the initial confirmation that the upload was received but the seconed confirmation (typically appearing ~10 minutes later) that the package was accepted
    does not appear.

    I have tried ssh into the host ssh.upload.debian.org and (after fumbling around) found the file /srv/upload.debian.org/queued/run/log where I see
    only succesful notices about rust-criterion, no indication of rejection.

    What to do next? Who to nudge? Any clues, anyone?


    - Jonas


    Same question was asked here back on 27th June this year,
    but there did not seem to be an easy answer.

    (Probably a key problem)

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gunnar Wolf@21:1/5 to All on Wed Nov 30 18:00:01 2022
    Jonas Smedegaard dijo [Wed, Nov 30, 2022 at 03:03:14PM +0100]:
    Hi,

    I am unable to succesfully dput packages. Most likely the cause is my
    too late updating my PGP key expiry date - but that should be solved by
    now, and I am unable to figure out how to debug the problem or whom to contact about it.

    I patiently waited until debian-archive-keyring package was updated with
    my refreshed key in it, and since then I have regularly tested
    re-uploading the package rust-criterion where I receive the initial confirmation that the upload was received but the seconed confirmation (typically appearing ~10 minutes later) that the package was accepted
    does not appear.

    While I cannot comment on the DAK side of this, I can confirm that
    your key was updated in this month's upload, three days ago:

    https://salsa.debian.org/debian-keyring/keyring/-/commit/f12a437730fc5f1f5ac72a0b914ef97a78d7f7a9
    https://salsa.debian.org/debian-keyring/keyring/-/commits/master/debian-keyring-gpg/0x2C7C3146C1A00121

    Your currently active key is set to expire on 2023.11.13.

    So, that _should_ not be the problem.

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQRNFAUGU6QC1zaHBJ0kBMlUbhRTYAUCY4eKvwAKCRAkBMlUbhRT YHc5AP4+KkIb051mp+EcQhvKUJgfsL9+HMSfwM1unVy539yWMwD9Etgf7pIcQA4e EtWAJxwahU5GvRW+TBgWiGZiO6oHFwk=
    =KyrG
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Timo =?utf-8?Q?R=C3=B6hling?=@21:1/5 to All on Wed Nov 30 18:10:01 2022
    * Gunnar Wolf <gwolf@debian.org> [2022-11-30 10:54]:
    While I cannot comment on the DAK side of this, I can confirm that
    your key was updated in this month's upload, three days ago:

    https://salsa.debian.org/debian-keyring/keyring/-/commit/f12a437730fc5f1f5ac72a0b914ef97a78d7f7a9
    https://salsa.debian.org/debian-keyring/keyring/-/commits/master/debian-keyring-gpg/0x2C7C3146C1A00121

    Your currently active key is set to expire on 2023.11.13.

    So, that _should_ not be the problem.
    I just updated the keyring with rsync from keyring.debian.org::keyrings/keyrings/ and still get Jonas' expired key (2022-11-12), so it seems there is *something* going wrong (even if
    it is not related to DAK activity).


    Cheers
    Timo


    --
    ⢀⣴⠾⠻⢶⣦⠀ ╭────────────────────────────────────────────────────╮
    ⣾⠁⢠⠒⠀⣿⡁ │ Timo Röhling │
    ⢿⡄⠘⠷⠚⠋⠀ │ 9B03 EBB9 8300 DF97 C2B1 23BF CC8C 6BDD 1403 F4CA │
    ⠈⠳⣄⠀⠀⠀⠀ ╰────────────────────────────────────────────────────╯

    -----BEGIN PGP SIGNATURE-----

    iQGzBAEBCgAdFiEEJvtDgpxjkjCIVtam+C8H+466LVkFAmOHjhoACgkQ+C8H+466 LVkTQAv/Sui4K5XytYlXpPiRkv5dDjTh0+lKMBGZ6G7Fy0c7f5u9zMzTZ/yOpmy3 4M1p7e+jmgmFEdGutxOebj5vBImXimx0YdJ1a91NX9JANjTGZshbmGTpdccGYxtP f464GqukN++W8YMqjIv2vMKpemCoBxr8i7Ywg0hLVC24pzkfxbcQP1iY0bmqI2jY Qj1cTfdrOMsDa6A7aqpzeOEqtutrXu9xZ+o8ZJ92MJZADOcR4trXdL4wVxEDu7rw mSqDO+TkzIAGn6jc5b3DnvUs/y+0StrTC6oefHvTbPNcC20EDakczidUJdcjWlNb NFOBOIE3HveEU5vOLurDnvNIj+QGgEWC7O6sdfApPbU
  • From Andrey Rahmatullin@21:1/5 to Jonas Smedegaard on Wed Nov 30 19:40:01 2022
    On Wed, Nov 30, 2022 at 03:03:14PM +0100, Jonas Smedegaard wrote:
    I have tried ssh into the host ssh.upload.debian.org and (after fumbling around) found the file /srv/upload.debian.org/queued/run/log where I see
    only succesful notices about rust-criterion, no indication of rejection.
    The second log to check is /srv/ftp-master.debian.org/log/current on
    coccia (mirror.ftp-master.debian.org).

    20221129000459|process-upload|dak|rust-criterion_0.3.6-2_source.changes|Error while loading changes file rust-criterion_0.3.6-2_source.changes: No valid signature found. (GPG exited with status code 0)
    gpg: Signature made Mon Nov 28 14:29:33 2022 UTC
    gpg: using RSA key 9FE3E9C36691A69FF53CC6842C7C3146C1A00121
    gpg: Good signature from "Jonas Smedegaard <dr@jones.dk>" [expired]
    gpg: aka "Jonas Smedegaard <js@debian.org>" [expired]
    gpg: WARNING: Using untrusted key!




    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmOHmYAtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh XaAP/26d39KYttgXWEIXYKGUinmL8FvZ8/1DC2I2aty9AVSjD6OVbO4m50whWy3C qVM1F+juFsik3l5g/Gy83zUyOQVlU5FBRxbrWu1joslqiusq5jqmb3yz4YXiRIae DHHTSALjfuEs97dgp7lu6fDHUkVfuZDqlhZaXOuQidK9EZHQvenWzbv3pECKmPbV tppbpC4MZ5w4fvp7m3vu/wgDVRSsstdimuz9qX3cHdSFLpq7xsentBuF4gAc+Z5j r2woGy+N/dyGMh/Q48dV/lN0LpQcon9xvAi16tF9F48PfXYvKYoYtNJNs1zp0z3o 1X9BTSrcPGVfnICGyy8LdhizCWGIuE8apHBDDPSny9PjyZdb+yofENOtxVfi/XI7 NrRr5a2aQgSL5BzgOPwej2hv6fMQ0zzLlkGlcF0WueYFT8GGPv320VV78s0HJs9/ sjVGuh8HGM2u2DBwDAMlGk/Uj2epwTzyCLdseQO13Ev84yjNWG2QFlrCiWIsLqED 9vwG6xUBhU79FAqiMfAABNoxISbRHEtGJV1SEysRxAuVlLACtXgxZijKgzn3dObd bJ2rKOpyt+l+CxQm1Lkb8srPRoG268uGAefnswBb7G/SU6ZsBdxG0cOiXyFG5bOS GGUI43fYHsESK3bHPjODcWJ/TSOqfgyDkqm8gDjjIUfUDwQz
    =x4Cn
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From John Sullivan@21:1/5 to Jonas Smedegaard on Thu Dec 1 04:10:01 2022
    On Wed, Nov 30, 2022 at 03:03:14PM +0100, Jonas Smedegaard wrote:
    Hi,

    I am unable to succesfully dput packages. Most likely the cause is my
    too late updating my PGP key expiry date - but that should be solved by
    now, and I am unable to figure out how to debug the problem or whom to contact about it.


    I'm so sorry, Jonas. This was the result of an error I made in the last keyring push on the 26th. I believe I've addressed it now -- please let me know if it is still not performing as expected. Thank you for flagging the issue.

    -john

    -----BEGIN PGP SIGNATURE-----

    iQEzBAABCAAdFiEErTIZZp0ejPBs+QvIjTYo236v4woFAmOIGrIACgkQjTYo236v 4wpYyQf/XvxdSl6ddNA43Hx0xAxRyhrFUzqo+hhuRsZHNS34vHXyMX4WBVkOPUmx rhGhimZOo0if7Up+nCwh873dqWKbhJHJEhypItMxTkavvdWgkvEaGEEk1RZYsMtt qw9oJPjoSI9iQ6v1pLpbMbJlsCzY19QORU5ZBTfRO1tplWxOmyjnzYIX32VCYsLT 2ati56QXXvu/SeZ4yP3YA0UnOO9j34/pBBmZfrhcsB6LHznTsKKjfBrH8nOH5hPB PuVX37zBVtATW86kCualY2YQnh//CUghxD81Sbna/tBaehwddxvc2JyGizWP702s 5XvfkFM0VbDCvX/+HiIAWdFkP97SDg==
    =0kJK
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)