Control: tags -1 + moreinfo
On Fri, Aug 01, 2025 at 09:10:15PM +0200, Thorsten Glaser wrote:
Version: 2.25.15
tg@tgb1:/tmp $ dget http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed 100 3449 100 3449 0 0 17626 0 --:--:-- --:--:-- --:--:-- 17687
dget: retrieving http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed 100 5609k 100 5609k 0 0 662k 0 0:00:08 0:00:08 --:--:-- 683k
dpkg_1.22.21.dsc:
Good signature found
dscverify: no file spec lines in dpkg_1.22.21.dsc
Validation FAILED!!
tg@tgb1:/tmp $ dscverify dpkg_1.22.21.dsc
dpkg_1.22.21.dsc:
Good signature found
dscverify: no file spec lines in dpkg_1.22.21.dsc
Validation FAILED!!
I cannot reproduce this. A minimal working example:
mmdebstrap --include=devscripts,curl,debian-keyring --chrooted-customize-hook='dget
http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc' testing /dev/null
I: running --chrooted-customize-hook in shell: sh -c 'dget
http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc && dscverify dpkg_1.22.21.dsc'
dget: retrieving
http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.dsc
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed 100 3449 100 3449 0 0 12721 0 --:--:-- --:--:-- --:--:-- 12726 dget: retrieving
http://deb.debian.org/debian/pool/main/d/dpkg/dpkg_1.22.21.tar.xz
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed 100 5609k 100 5609k 0 0 3026k 0 0:00:01 0:00:01 --:--:-- 3025k dpkg_1.22.21.dsc:
Good signature found
validating dpkg_1.22.21.tar.xz
All files validated successfully.
dpkg-source: info: extracting dpkg in dpkg-1.22.21
dpkg-source: info: unpacking dpkg_1.22.21.tar.xz
dpkg_1.22.21.dsc:
Good signature found
validating dpkg_1.22.21.tar.xz
All files validated successfully.
dscverify supposedly calls gpg to verify the signatures, and then uses the output as the .dsc contents. Maybe gpg is broken on your system.
Chris
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)