diff options
| author | Guillem Jover <guillem@debian.org> | 2019-05-01 23:23:03 +0200 |
|---|---|---|
| committer | Guillem Jover <guillem@debian.org> | 2019-10-30 22:02:41 +0100 |
| commit | 3821f024d92aabf24a333025c1c1956d8a45e718 (patch) | |
| tree | 4ddef8038f73de273c3e56fd2a2cdf8a4f5c53c9 /debian | |
| parent | 2f238b0e7286d401acd1325e30c86363a1e380db (diff) | |
| download | dpkg-3821f024d92aabf24a333025c1c1956d8a45e718.tar.gz | |
Dpkg::Source::Package: Verify original tarball signatures at build time
When we are building the source package, while detecting whether there
is any original upstream tarball signature to be included in the .dsc,
it's the best time to verify them, so that when the .dsc gets eventually
signed there's a certification path for the maintainer that they are
including what they expected to be there.
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 168e2d281..16428b983 100644 --- a/debian/changelog +++ b/debian/changelog @@ -16,6 +16,8 @@ dpkg (1.20.0) UNRELEASED; urgency=medium to specify multiple packages. Closes: #926669 Based on a patch by Frank Schaefer <kelledin@gmail.com>. * perl: Remove support for versioned GnuPG 2 program and packages. + * Perl modules: + - Dpkg::Source::Package: Verify original tarball signatures at build time. * Documentation: - man: Fix uncommon wording constructs. * Code internals: |