我正在尝试构建这个包：http://mentors.debian.net/package/isbg
我因此跑：
dget http://mentors.debian.net/debian/pool/main/i/isbg/isbg_0.99-5.dsc
但是gpg验证失败：
dget: retrieving http://mentors.debian.net/debian/pool/main/i/isbg/isbg_0.99-5.dsc
--2014-05-21 14:52:20-- http://mentors.debian.net/debian/pool/main/i/isbg/isbg_0.99-5.dsc
Resolving mentors.debian.net (mentors.debian.net)... 185.22.221.46
Connecting to mentors.debian.net (mentors.debian.net)|185.22.221.46|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1070 (1,0K) [text/plain]
Saving to: ‘isbg_0.99-5.dsc’
100%[======================================>] 1 070 --.-K/s in 0s
2014-05-21 14:52:20 (179 MB/s) - ‘isbg_0.99-5.dsc’ saved [1070/1070]
dget: using existing isbg_0.99.orig.tar.bz2
dget: using existing isbg_0.99-5.debian.tar.xz
isbg_0.99-5.dsc:
dscverify: isbg_0.99-5.dsc failed signature check:
gpg: Signature made sam 19 avr 2014 05:28:51 EDT using DSA key ID 50D0AE60
gpg: Can't check signature: public key not found
我确实通过以下方式下载了作者的 gpg 公钥：
gpg --keyserver pool.sks-keyservers.net --recv-keys 50D0AE60
我究竟做错了什么？
答案1
默认情况下，dscverify仅检查官方 Debian 密钥环。如果您还想使用您的个人密钥环来验证签名，请将此行放入~/.devscripts：
DSCVERIFY_KEYRINGS="~/.gnupg/pubring.gpg"