A problem with a watch file

classic Classic list List threaded Threaded
11 messages Options
Reply | Threaded
Open this post in threaded view
|

A problem with a watch file

Tommi Höynälänmaa-3
Hi

What is wrong with the following watch file:

---cut-here---

version=4
pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/ 
theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)

---cut-here---

It gives the following error message with uscan:

---cut-here---

uscan warn: Filename pattern missing version delimiters () without
filenamemangle
   in debian/watch, skipping:
   pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/ 
theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)

---cut-here---

No source is downloaded with uscan.

      - Tommi Höynälänmaa


Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Jonas Smedegaard-2
Hi Tommi,

[cc'ing you discretely - please subscribe to the list if you haven't]

Quoting Tommi Höynälänmaa (2018-10-11 14:13:19)

> Hi
>
> What is wrong with the following watch file:
>
> ---cut-here---
>
>
> ---cut-here---
>
> It gives the following error message with uscan:
>
> ---cut-here---
>
> uscan warn: Filename pattern missing version delimiters () without
> filenamemangle
>    in debian/watch, skipping:
>    pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/ 
> theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)
>
> ---cut-here---
>
> No source is downloaded with uscan.
>
>       - Tommi Höynälänmaa
>
>
The mangling and URL should be tied together with the matching.

Either like this (escaping the newline):

version=4
pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/ \
theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)

Or like this (keeping on same line):

version=4
pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/ theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)

There is still something else wrong, however...


 - Jonas

--
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/

 [x] quote me freely  [ ] ask before reusing  [ ] keep private

signature.asc (849 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Sergio Durigan Junior-3
In reply to this post by Tommi Höynälänmaa-3
On Thursday, October 11 2018, Tommi Höynälänmaa wrote:

> Hi
>
> What is wrong with the following watch file:
>
> ---cut-here---
>
> version=4
> pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/
> theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)
>
> ---cut-here---
>
> It gives the following error message with uscan:
>
> ---cut-here---
>
> uscan warn: Filename pattern missing version delimiters () without
> filenamemangle
>   in debian/watch, skipping:
>   pgpsigurlmangle=s/$/.sig/ http://www.iki.fi/tohoyn/theme-d/
> theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)
>
> ---cut-here---
Complementing what Jonas said, you have a few more errors:

1) The "theme-d-gnome*" packages are not listed in
<http://www.iki.fi/tohoyn/theme-d/>.  Instead, they're at
<http://www.tohoyn.fi/theme-d/theme-d-gnome.html>.

2) Upstream uses "_" as the "NAME_VERSION" separator (instead of
"NAME-VERSION").  Your regex doesn't match that.  Also, you have to be
careful because upstream provides both "NAME_VERSION.tar.gz" and
"NAME_VERSION.orig.tar.gz".

3) Upstream doesn't seem to offer GPG signatures for the tarballs, so
you don't need "pgpsigurlmangle".

Having said all that, and using uscan v4's substitution strings:

  version=4
  http://www.tohoyn.fi/theme-d/theme-d-gnome.html theme-d-gnome_(\d[\d.]*)@ARCHIVE_EXT@

Thanks,

--
Sergio
GPG key ID: 237A 54B1 0287 28BF 00EF  31F4 D0EB 7628 65FC 5E36
Please send encrypted e-mail if possible
http://sergiodj.net/

signature.asc (847 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Tommi Höynälänmaa-3
Hi


On 12.10.2018 04:40, Sergio Durigan Junior wrote:
> Complementing what Jonas said, you have a few more errors:
> 1) The "theme-d-gnome*" packages are not listed in
> <http://www.iki.fi/tohoyn/theme-d/>.  Instead, they're at
> <http://www.tohoyn.fi/theme-d/theme-d-gnome.html>.
URL www.iki.fi/tohoyn is a link to www.tohoyn.fi.
> 2) Upstream uses "_" as the "NAME_VERSION" separator (instead of
> "NAME-VERSION").  Your regex doesn't match that.  Also, you have to be
> careful because upstream provides both "NAME_VERSION.tar.gz" and
> "NAME_VERSION.orig.tar.gz".
The filename is theme-d-gnome-0.7.0.tar.gz. I checked it in the server.

>
> 3) Upstream doesn't seem to offer GPG signatures for the tarballs, so
> you don't need "pgpsigurlmangle".
I have uploaded theme-d-gnome-0.7.0.tar.gz.sig into the server.
>
> Having said all that, and using uscan v4's substitution strings:
>
>    version=4
>    http://www.tohoyn.fi/theme-d/theme-d-gnome.html theme-d-gnome_(\d[\d.]*)@ARCHIVE_EXT@
>
> Thanks,
>
I tried the following:
---cut-here---
version=4
opts="pgpsigurlmangle=s/$/.sig/"
http://www.tohoyn.fi/theme-d/theme-d-gnome.html 
theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)
---cut-here---

Now uscan doesn't complain anything but nothing gets downloaded.

Thanks for help,

      Tommi Höynälänmaa

Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Adam D. Barratt
On Sat, 2018-10-13 at 15:23 +0300, Tommi Höynälänmaa wrote:

> Hi
>
>
> On 12.10.2018 04:40, Sergio Durigan Junior wrote:
> > 2) Upstream uses "_" as the "NAME_VERSION" separator (instead of
> > "NAME-VERSION").  Your regex doesn't match that.  Also, you have to
> > be
> > careful because upstream provides both "NAME_VERSION.tar.gz" and
> > "NAME_VERSION.orig.tar.gz".
>
> The filename is theme-d-gnome-0.7.0.tar.gz. I checked it in the
> server.

That file apparently does exist on the server. However, it is not
linked from anywhere on http://www.tohoyn.fi/theme-d/ or http://www.toh
oyn.fi/theme-d/theme-d-gnome.html , so uscan can't be expected to
simply imagine that it might exist.

Regards,

Adam

Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Joël Krähemann-2
Hi,
Might be you should rename the signature having .asc suffix instead of .sig

Bye,
Joël

On Sat, Oct 13, 2018 at 2:33 PM Adam D. Barratt
<[hidden email]> wrote:

>
> On Sat, 2018-10-13 at 15:23 +0300, Tommi Höynälänmaa wrote:
> > Hi
> >
> >
> > On 12.10.2018 04:40, Sergio Durigan Junior wrote:
> > > 2) Upstream uses "_" as the "NAME_VERSION" separator (instead of
> > > "NAME-VERSION").  Your regex doesn't match that.  Also, you have to
> > > be
> > > careful because upstream provides both "NAME_VERSION.tar.gz" and
> > > "NAME_VERSION.orig.tar.gz".
> >
> > The filename is theme-d-gnome-0.7.0.tar.gz. I checked it in the
> > server.
>
> That file apparently does exist on the server. However, it is not
> linked from anywhere on http://www.tohoyn.fi/theme-d/ or http://www.toh
> oyn.fi/theme-d/theme-d-gnome.html , so uscan can't be expected to
> simply imagine that it might exist.
>
> Regards,
>
> Adam
>

Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Tommi Höynälänmaa-3
In reply to this post by Sergio Durigan Junior-3

On 12.10.2018 04:40, Sergio Durigan Junior wrote:
> Having said all that, and using uscan v4's substitution strings:
>    version=4
>    http://www.tohoyn.fi/theme-d/theme-d-gnome.html theme-d-gnome_(\d[\d.]*)@ARCHIVE_EXT@
>
>

Now downloading the upstream package works but gpgv doesn't. I get the
following output from uscan:
---cut here---
tohoyn@tohoyn-laptop:~/tyo/omat/ohj/scheme/theme-d-gnome-new/work/theme-d-gnome-0.7.0$
uscan
uscan: Newest version of theme-d-gnome on remote site is 0.7.1, local
version is 0.7.0
uscan:    => Newer package available from
       http://localhost/theme-d-gnome-0.7.1.tar.gz
gpgv: Signature made ke 10. lokakuuta 2018 19.34.04 EEST
gpgv:                using RSA key B43FA0D088169151F80AC4966CCCB104182F7616
gpgv: [don't know]: invalid packet (ctb=2d)
gpgv: keydb_search failed: Invalid packet
gpgv: Can't check signature: No public key
uscan warn: OpenPGP signature did not verify.
---cut here---

Checking the signature with "gpg --verify" works fine.

The contents of the watch file are:
---cut here---
version=4
opts="pgpsigurlmangle=s/$/.sig/" http://localhost/theme-d-gnome.html 
theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)
---cut here---

Subdirectory /var/www/html contains the source code and signature files.

      - Tommi Höynälänmaa

Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Xavier Guimard-2
Le 16/10/2018 à 14:35, Tommi Höynälänmaa a écrit :

>
> On 12.10.2018 04:40, Sergio Durigan Junior wrote:
>> Having said all that, and using uscan v4's substitution strings:
>>    version=4
>>    http://www.tohoyn.fi/theme-d/theme-d-gnome.html
>> theme-d-gnome_(\d[\d.]*)@ARCHIVE_EXT@
>>
>>
>
> Now downloading the upstream package works but gpgv doesn't. I get the
> following output from uscan:
> ---cut here---
> tohoyn@tohoyn-laptop:~/tyo/omat/ohj/scheme/theme-d-gnome-new/work/theme-d-gnome-0.7.0$
> uscan
> uscan: Newest version of theme-d-gnome on remote site is 0.7.1, local
> version is 0.7.0
> uscan:    => Newer package available from
>       http://localhost/theme-d-gnome-0.7.1.tar.gz
> gpgv: Signature made ke 10. lokakuuta 2018 19.34.04 EEST
> gpgv:                using RSA key B43FA0D088169151F80AC4966CCCB104182F7616
> gpgv: [don't know]: invalid packet (ctb=2d)
> gpgv: keydb_search failed: Invalid packet
> gpgv: Can't check signature: No public key
> uscan warn: OpenPGP signature did not verify.
> ---cut here---
>
> Checking the signature with "gpg --verify" works fine.

Hello,

you must install upstream key in debian/upstream/signing-key.asc: uscan
should verify key with its own keystore, not yours.

Cheers,
Xavier

> The contents of the watch file are:
> ---cut here---
> version=4
> opts="pgpsigurlmangle=s/$/.sig/" http://localhost/theme-d-gnome.html
> theme-d-gnome-(\d[\d.]*)\.tar\.(?:gz|bz2|xz)
> ---cut here---
>
> Subdirectory /var/www/html contains the source code and signature files.
>
>      - Tommi Höynälänmaa
>

Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Fritz Reichwald-2
In reply to this post by Tommi Höynälänmaa-3
Hi Tommi,

> gpgv: Can't check signature: No public key

You can find the steps to retrieve and store the key here:
https://wiki.debian.org/debian/watch#Cryptographic_signature_verification

Regards Fritz

signature.asc (847 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Tommi Höynälänmaa-3
In reply to this post by Xavier Guimard-2


On 16.10.2018 15:40, Xavier wrote:
> Hello,
> you must install upstream key in debian/upstream/signing-key.asc: uscan
> should verify key with its own keystore, not yours.
>
> Cheers,
> Xavier
>
>
I have installed the key to both debian/upstream/signing-key.pgp and
debian/upstream/signing-key.asc. It still doesn't work.

Regards,

      Tommi


Reply | Threaded
Open this post in threaded view
|

Re: A problem with a watch file

Georg Faerber-2
Hi,

On 18-10-17 15:11:00, Tommi Höynälänmaa wrote:
> I have installed the key to both debian/upstream/signing-key.pgp and
> debian/upstream/signing-key.asc. It still doesn't work.

Run uscan with increased verbosity (-v), it might give you a hint what
is going wrong.

Cheers,
Georg

signature.asc (849 bytes) Download Attachment