Lintian tag: orig-tarball-missing-upstream-signature

Type: warning

Description (from lintian-explain-tags)

The packaging includes an upstream signing key but the corresponding .asc
signature for one or more source tarballs are not included in your
.changes file.

Please ensure a <package>_<version>.orig.tar.<ext>.asc file exists in the
same directory as your <package>_<version>.orig.tar.<ext> tarball prior to
dpkg-source --build being called.

If you are repackaging your source tarballs for Debian Free Software
Guidelines compliance reasons, ensure that your package version includes
dfsg or similar.

Sometimes, an upstream signature must be added for an orig.tar.gz that is
already present in the archive. Please include the upstream sources again
with dpkg-genchanges -sa while the signature is also present. Your upload
will be accepted as long as the new orig.tar.gz file is identical to the
old one.

Please refer to Bug#954743 and Bug#872864 for details.

Visibility: warning
Show-Always: no
Check: upstream-signature

Affected packages