orig-tarball-missing-upstream-signature

The packaging includes an upstream signing key but the corresponding .asc signature for one or more source tarballs are not included in your .changes file.

Please ensure a <package>_<version>.orig.tar.<ext>.asc file exists in the same directory as your <package>_<version>.orig.tar.<ext> tarball prior to dpkg-source --build being called.

If you are repackaging your source tarballs for Debian Free Software Guidelines compliance reasons, ensure that your package version includes dfsg or similar.

Sometimes, an upstream signature must be added for an orig.tar.gz that is already present in the archive. Please include the upstream sources again with dpkg-genchanges -sa while the signature is also present. Your upload will be accepted as long as the new orig.tar.gz file is identical to the old one.

Severity: warning
Experimental: false

See also