debian-archive-keyring (2025.1) unstable; urgency=medium
[ Debian Janitor ]
* Remove 2 obsolete maintscript entries in 1 files.
* Bump debhelper from old 10 to 12.
* Set debhelper-compat version in Build-Depends.
* Update standards version to 4.6.2, no changes needed.
[ Guillem Jover ]
* Add .gitignore files
* Update maintainer documentation for trusted.gpg.d files removal
* Use «Debian» instead of the odd «Debian GNU» when referring to the project
* Use OpenPGP instead of GnuPG when referring to the specification
* Rename keyrings from .gpg to .pgp
[ Jonathan Wiltshire ]
* Clean up maintscript removal of ancient archive certificates
* Add NEWS entry warning of file extension renames
* Get rid of team-members/ and signature verification (Closes: #1099223)
* Remove buster keys
* Add automatic signing keys for trixie (Closes: #1100828)
* Add Debian Stable Release Key (13/trixie) (ID: 762F67A0B2C39DE4)
(Closes: #1100829)
-- Jonathan Wiltshire <jmw@debian.org> Wed, 09 Apr 2025 23:05:46 +0100
debian-archive-keyring (2023.4) unstable; urgency=medium
* Clean up leftover keyrings in trusted.gpg.d
-- Jonathan Wiltshire <jmw@debian.org> Sun, 30 Jul 2023 20:24:09 +0100
debian-archive-keyring (2023.3) unstable; urgency=medium
* Reinstate cleanup of the APT keyrings for buster (Closes: #1033153)
-- Jonathan Wiltshire <jmw@debian.org> Tue, 28 Mar 2023 21:31:07 +0100
debian-archive-keyring (2023.2) unstable; urgency=medium
* Reinstate buster keys for apt as fragments (Closes: #1033077)
-- Jonathan Wiltshire <jmw@debian.org> Fri, 17 Mar 2023 17:03:56 +0000
debian-archive-keyring (2023.1) unstable; urgency=medium
* Standards version 4.6.0 (no changes)
* Update my key and refresh signature
* Switch to use ASCII-armoured fragments for APT trust
* Add Debian Stable Release Key (12/bookworm) (ID: 0xF8D2585B8783D481)
(Closes: #1029215)
* Remove stretch's keys (automatic and release)
* Add automatic signing keys for bookworm (Closes: #1029214)
* Refresh signature over keyrings/debian-archive-keyring.gpg
-- Jonathan Wiltshire <jmw@debian.org> Thu, 16 Mar 2023 08:54:35 +0000
debian-archive-keyring (2021.1.1) unstable; urgency=medium
* No-change rebuild.
-- Jonathan Wiltshire <jmw@debian.org> Thu, 25 Feb 2021 17:38:08 +0000
debian-archive-keyring (2021.1) unstable; urgency=medium
[ Niels Thykier ]
* Add a lintian-brush.conf to assist janitor.d.n
[ Jonathan Wiltshire ]
* Remove jessie's archive keys (Closes: #981343)
* Add automatic signing keys for bullseye (Closes: #977911)
* Update my own key
* Add my transitional EC key
* Add Debian Stable Release Key (11/bullseye) (ID: 600062A9605C66F00D6C9793)
(Closes: #977910)
* Refresh signatures over keyrings/debian-archive-keyring.gpg and
keyrings/debian-archive-removed-keys.gpg
* Add myself to uploaders
-- Jonathan Wiltshire <jmw@debian.org> Wed, 24 Feb 2021 21:06:42 +0000
debian-archive-keyring (2019.1) unstable; urgency=medium
[ Adam D. Barratt ]
* Ensure separated keyrings for Wheezy's keys are removed. Thanks
to Sven Joachim.
(Closes: #912214)
[ Jonathan Wiltshire ]
* Add my own key to the team-members keyring
* Add Debian Stable Release key (10/buster) (ID: DCC9EFBF77E11517)
(Closes: #917536)
* Add Debian Archive Automatic Signing Key (10/buster)
(ID: BCDDDC30D7C23CBBABEE) and Debian Security Archive Automatic
Signing Key (10/buster) (ID: C5FF4DFAB270CAA96DFA)
(Closes: #917535)
* Refresh the signature over keyrings/debian-archive-keyring.gpg
[ Niels Thykier ]
* Add myself as uploader (Closes: #927765)
-- Niels Thykier <niels@thykier.net> Tue, 23 Apr 2019 13:42:28 +0200
debian-archive-keyring (2018.1) unstable; urgency=medium
* Team upload.
[ Philipp Kern ]
* Point Vcs-* headers to Salsa.
* Remove Wheezy's keys (automatic and stable release).
(Closes: #901320)
[ Niels Thykier ]
* Merge "separate keyring" installation and upload it to
unstable (see the changelog entry for 2017.7+exp).
-- Niels Thykier <niels@thykier.net> Sun, 28 Oct 2018 17:22:31 +0000
debian-archive-keyring (2017.7+exp) experimental; urgency=medium
* Team upload.
* Install separate keyrings for each release in /usr/share/keyrings
(both in the regular deb and the udeb). This is to enable
initial testing of narrowing the set of trusted keys per machine.
Thanks to Daniel Kahn Gillmor for the suggestion.
(Closes: #861695)
-- Niels Thykier <niels@thykier.net> Sat, 16 Dec 2017 20:25:55 +0000
debian-archive-keyring (2017.7) unstable; urgency=medium
* Team upload.
[ Adam D. Barratt ]
* Fix Vcs-* headers. Thanks to Daniel Baumann for noticing.
(Closes: #874723)
[ Niels Thykier ]
* Remove unnecessary "XC-" prefix for "Package-Type" in the udeb
package.
* Remove now obsolete versioned Breaks on apt.
* Set R³ to no as debian-archive-keyring does not require (fake)root
to build.
* Bump debhelper compat level to 10 but pass --no-parallel to
dh_auto_build as the Makefile is not parallel-safe.
* Bump Standards-Version to 4.1.2 - no additional change required.
-- Niels Thykier <niels@thykier.net> Sat, 16 Dec 2017 20:11:11 +0000
debian-archive-keyring (2017.6) unstable; urgency=medium
* Remove dependencies between the .deb package and gnupg / gpgv. apt has
had relevant relationships of its own for some time now, so there's no
need for us to do so. (Closes: #801381)
* Add Vcs-{Browser,Git} headers.
* Remove trust packets from generated keyrings. They're not required for
the purpose of archive keyrings and may change between GnuPG versions,
rendering the resulting keyrings unreproducible.
(Closes: #872525, #870780)
-- Adam D. Barratt <adam@adam-barratt.org.uk> Sun, 03 Sep 2017 17:52:14 +0100
debian-archive-keyring (2017.5) unstable; urgency=medium
* Team upload.
* Add Debian Stable Release Key (9/stretch) (ID: EF0F382A1A7B6500)
(Closes: #860831)
* Add Debian Archive Automatic Signing Key (9/stretch) (ID: E0B11894F66AEC98)
and Debian Security Archive Automatic Signing Key (9/stretch)
(ID: EDA0D2388AE22BA9) (Closes: #860830)
* Move the squeeze keys to the removed keyring (Closes: #863303)
* Update the maintainer README to document removing keys
-- Adam D. Barratt <adam@adam-barratt.org.uk> Thu, 25 May 2017 19:17:13 +0100
debian-archive-keyring (2014.3) unstable; urgency=medium
* Team upload.
* Also import signatures for Jessie archive keys.
-- Adam D. Barratt <adam@adam-barratt.org.uk> Sun, 30 Nov 2014 14:45:43 +0000
debian-archive-keyring (2014.2) unstable; urgency=medium
* Team upload. (Closes: #771008)
* Add Debian Archive Automatic Signing Key (8/jessie) (ID: 7638D0442B90D010)
* Add Debian Security Archive Automatic Signing Key (8/jessie)
(ID: 9D6D8F6BC857C906)
* Remove temporary keyring files (*.gpg~) in clean target.
* Add a maintainer README (not currently included in the binary package).
-- Adam D. Barratt <adam@adam-barratt.org.uk> Sun, 30 Nov 2014 12:29:30 +0000
debian-archive-keyring (2014.1) unstable; urgency=medium
* Team upload. (Closes: #757533)
[ Philipp Kern ]
* Replaced my 1024D key with my 8192R key. Resigned all relevant files
with my new key so that they can be validated again.
* Add Jessie Stable Release key (ID: CBF8D6FD518E17E1).
-- Philipp Kern <pkern@debian.org> Sat, 30 Aug 2014 19:55:17 +0200
debian-archive-keyring (2012.4) unstable; urgency=low
* Team upload.
* Mark as multiarch foreign.
-- Philipp Kern <pkern@debian.org> Sat, 02 Jun 2012 17:57:18 +0200
debian-archive-keyring (2012.3) unstable; urgency=low
* Team upload.
* Remove the two new keys from trusted.gpg in the postinst and change
the version check so that we can safely backport them to squeeze
in a non-split way.
-- Philipp Kern <pkern@debian.org> Mon, 14 May 2012 20:40:19 +0200
debian-archive-keyring (2012.2) unstable; urgency=low
* Team upload.
* Add Debian Archive Automatic Signing Key (7.0/wheezy) (ID: 46925553).
(Closes: #671105)
* Add Wheezy Stable Release Key (ID: 65FFB764). (Closes: #665380)
* Drop the apt dependency to fix the resulting circular dependency.
(Closes: #672598)
-- Philipp Kern <pkern@debian.org> Sun, 13 May 2012 17:07:09 +0200
debian-archive-keyring (2012.1) unstable; urgency=low
* Team upload.
[ Philipp Kern ]
* Do not require a gnupg homedir. (Closes: #665057)
* Set `Priority: important' in the source stanza of debian/control.
(Closes: #611805)
* Move Lenny keys to removed.
[ David Kalnischkies ]
* Ship each active key in a separate keyring in /etc/apt/trusted.gpg.d/
as conffiles for simpler usage of apt-secure(8).
* Remove all active keys from /etc/apt/trusted.gpg as they are shipped
now as fragment files.
* Depend on gpgv and only recommend gnupg. (Closes: #387688)
-- Philipp Kern <pkern@debian.org> Wed, 02 May 2012 12:45:26 +0200
debian-archive-keyring (2011.10.23) experimental; urgency=low
* Team upload.
* Work only on /etc/apt/trusted.gpg when removing keys.
* Forcely create the trusted.gpg.d symlink.
-- Philipp Kern <pkern@debian.org> Sun, 23 Oct 2011 13:57:23 +0200
debian-archive-keyring (2011.10.21) experimental; urgency=low
* Team upload.
* Put debian-archive-keyring.gpg into trusted.gpg.d.
* Remove old keys from trusted.gpg upon upgrade.
* Convert to dh7.
-- Philipp Kern <pkern@debian.org> Fri, 21 Oct 2011 12:36:10 +0200
debian-archive-keyring (2010.08.28) unstable; urgency=low
* Team upload.
* Add Debian Archive Automatic Signing Key (6.0/squeeze) (ID: 473041FA).
* Convert keyring generation to jetring.
-- Philipp Kern <pkern@debian.org> Sat, 28 Aug 2010 23:17:21 +0200
debian-archive-keyring (2010.08.15) unstable; urgency=low
* Team upload.
* Add Squeeze Stable Release Key (ID: B98321F9). (Closes: #540890)
* Add a DEBIAN/md5sums file to the non-udeb package. (Closes: #534934)
* Move to debian-archive-removed-keys.gpg:
- Debian Archive Automatic Signing Key (4.0/etch)
- Etch Stable Release Key
- Debian-Volatile Archive Automatic Signing Key (4.0/etch)
-- Philipp Kern <pkern@debian.org> Sun, 15 Aug 2010 22:59:38 +0200
debian-archive-keyring (2009.01.31) unstable; urgency=low
* Add Debian Archive Automatic Signing Key (5.0/lenny)
(ID: 55BE302B).
* Add Debian-Volatile Archive Automatic Signing Key (5.0/lenny)
(ID: 6D849617).
-- Luk Claes <luk@debian.org> Sat, 31 Jan 2009 22:25:18 +0000
debian-archive-keyring (2008.04.16+nmu1) unstable; urgency=low
* Non-maintainer upload.
* Move gnupg again to Depends. (closes: #476689)
-- Bastian Blank <waldi@debian.org> Fri, 25 Apr 2008 17:52:00 +0000
debian-archive-keyring (2008.04.16) unstable; urgency=low
* New maintainer: Debian Release Team.
* Add Lenny Stable Release key (ID: F42584E6).
* Move to debian-archive-removed-keys.gpg:
- Debian Archive Automatic Signing Key (2006) (ID: 2D230C5F).
* Move gnupg to Recommends (Closes: #387688).
-- Luk Claes <luk@debian.org> Wed, 16 Apr 2008 20:42:26 +0000
debian-archive-keyring (2007.07.31) unstable; urgency=low
* added 'volatile' signing key (ID: BBE55AB3)
-- Michael Vogt <mvo@debian.org> Tue, 31 Jul 2007 18:35:13 +0200
debian-archive-keyring (2007.02.19-0.1) unstable; urgency=low
* NMU for d-i.
* Add a postinst to the udeb that creates an archive.gpg symlink
if one doesn't yet exist. Closes: #423428
* Clean up use of dpkg-gencontrol, removing obsolete workaround.
* Remove removed-keys keyring from udeb to save space. Closes: #423422
* Set udeb priority to optional to match overrides.
-- Joey Hess <joeyh@debian.org> Wed, 30 May 2007 14:38:39 -0400
debian-archive-keyring (2007.02.19) unstable; urgency=low
* added Etch stable release key (ID: ADB11277) (closes: #410788)
* moved to debian-archive-removed-keys.gpg:
- Debian Archive Automatic Signing Key (2004) [1DB114E0]
- Debian Archive Automatic Signing Key (2005) [4F368D5D]
- Debian AMD64 Archive Key [B5F5BBED] (closes: #386956)
* improved the README (closes: #400942)
-- Michael Vogt <mvo@debian.org> Mon, 19 Feb 2007 10:02:06 +0100
debian-archive-keyring (2006.11.22) unstable; urgency=low
* Non-maintainer upload.
* Add Etch release key
* Bump priority to important (Closes: Bug#397698)
* Update FSF address in copyright.
-- Anthony Towns <aj@azure.humbug.org.au> Wed, 22 Nov 2006 01:30:50 +1000
debian-archive-keyring (2006.01.18) unstable; urgency=low
* changed priority to standard (closes: #348426)
* added empty debian-archive-removed-keys.gpg
-- Michael Vogt <mvo@debian.org> Wed, 18 Jan 2006 23:10:58 +0100
debian-archive-keyring (2006.01.10) unstable; urgency=low
* initial release
-- Michael Vogt <mvo@debian.org> Tue, 10 Jan 2006 09:17:43 +0100