debian-archive-keyring (2021.1.1ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    + Do not trust debian archive keys by default, and instead ship those
      keys in usr/share/keyrings. On Ubuntu, this package is mostly used for
      validating chroots when debootstrapping Debian using
      /usr/share/keyrings/debian-archive-keyring.gpg.

 -- Gianfranco Costamagna <locutusofborg@debian.org>  Fri, 26 Mar 2021 12:11:13 +0100

debian-archive-keyring (2021.1.1) unstable; urgency=medium

  * No-change rebuild.

 -- Jonathan Wiltshire <jmw@debian.org>  Thu, 25 Feb 2021 17:38:08 +0000

debian-archive-keyring (2021.1) unstable; urgency=medium

  [ Niels Thykier ]
  * Add a lintian-brush.conf to assist janitor.d.n

  [ Jonathan Wiltshire ]
  * Remove jessie's archive keys (Closes: #981343)
  * Add automatic signing keys for bullseye (Closes: #977911)
  * Update my own key
  * Add my transitional EC key
  * Add Debian Stable Release Key (11/bullseye) (ID: 600062A9605C66F00D6C9793)
    (Closes: #977910)
  * Refresh signatures over keyrings/debian-archive-keyring.gpg and
    keyrings/debian-archive-removed-keys.gpg
  * Add myself to uploaders

 -- Jonathan Wiltshire <jmw@debian.org>  Wed, 24 Feb 2021 21:06:42 +0000

debian-archive-keyring (2019.1ubuntu3) hirsute; urgency=medium

  * No-change rebuild to drop the udeb package.

 -- Matthias Klose <doko@ubuntu.com>  Mon, 22 Feb 2021 10:30:41 +0100

debian-archive-keyring (2019.1ubuntu2) eoan; urgency=medium

  * Remove duplicate rm_conffile invocations for
    /etc/apt/trusted.gpg.d/debian-archive-wheezy-*.

 -- Colin Watson <cjwatson@ubuntu.com>  Mon, 08 Jul 2019 10:02:29 +0100

debian-archive-keyring (2019.1ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  LP: #1814536  Remaining changes:
    + Do not trust debian archive keys by default, and instead ship those
      keys in usr/share/keyrings. On Ubuntu, this package is mostly used for
      validating chroots when debootstrapping Debian using
      /usr/share/keyrings/debian-archive-keyring.gpg.

 -- Mattia Rizzolo <mapreri@ubuntu.com>  Sun, 07 Jul 2019 15:48:57 +0200

debian-archive-keyring (2019.1) unstable; urgency=medium

  [ Adam D. Barratt ]
  * Ensure separated keyrings for Wheezy's keys are removed.  Thanks
    to Sven Joachim.
    (Closes: #912214)

  [ Jonathan Wiltshire ]
  * Add my own key to the team-members keyring
  * Add Debian Stable Release key (10/buster) (ID: DCC9EFBF77E11517)
    (Closes: #917536)
  * Add Debian Archive Automatic Signing Key (10/buster)
    (ID: BCDDDC30D7C23CBBABEE) and Debian Security Archive Automatic
    Signing Key (10/buster) (ID: C5FF4DFAB270CAA96DFA)
    (Closes: #917535)
  * Refresh the signature over keyrings/debian-archive-keyring.gpg

  [ Niels Thykier ]
  * Add myself as uploader (Closes: #927765)

 -- Niels Thykier <niels@thykier.net>  Tue, 23 Apr 2019 13:42:28 +0200

debian-archive-keyring (2018.1) unstable; urgency=medium

  * Team upload.

  [ Philipp Kern ]
  * Point Vcs-* headers to Salsa.
  * Remove Wheezy's keys (automatic and stable release).
    (Closes: #901320)

  [ Niels Thykier ]
  * Merge "separate keyring" installation and upload it to
    unstable (see the changelog entry for 2017.7+exp).

 -- Niels Thykier <niels@thykier.net>  Sun, 28 Oct 2018 17:22:31 +0000

debian-archive-keyring (2017.7+exp) experimental; urgency=medium

  * Team upload.
  * Install separate keyrings for each release in /usr/share/keyrings
    (both in the regular deb and the udeb).  This is to enable
    initial testing of narrowing the set of trusted keys per machine.
    Thanks to Daniel Kahn Gillmor for the suggestion.
    (Closes: #861695)

 -- Niels Thykier <niels@thykier.net>  Sat, 16 Dec 2017 20:25:55 +0000

debian-archive-keyring (2017.7ubuntu1) bionic; urgency=medium

  * Do not trust debian archive keys by default, and instead ship those
    keys in usr/share/keyrings. On Ubuntu, this package is mostly used for
    validating chroots when debootstrapping Debian using
    /usr/share/keyrings/debian-archive-keyring.gpg.  LP: #1685305

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Tue, 16 Jan 2018 16:52:37 +0000

debian-archive-keyring (2017.7) unstable; urgency=medium

  * Team upload.

  [ Adam D. Barratt ]
  * Fix Vcs-* headers.  Thanks to Daniel Baumann for noticing.
    (Closes: #874723)

  [ Niels Thykier ]
  * Remove unnecessary "XC-" prefix for "Package-Type" in the udeb
    package.
  * Remove now obsolete versioned Breaks on apt.
  * Set R³ to no as debian-archive-keyring does not require (fake)root
    to build.
  * Bump debhelper compat level to 10 but pass --no-parallel to
    dh_auto_build as the Makefile is not parallel-safe.
  * Bump Standards-Version to 4.1.2 - no additional change required.

 -- Niels Thykier <niels@thykier.net>  Sat, 16 Dec 2017 20:11:11 +0000

debian-archive-keyring (2017.6) unstable; urgency=medium

  * Remove dependencies between the .deb package and gnupg / gpgv.  apt has
    had relevant relationships of its own for some time now, so there's no
    need for us to do so.  (Closes: #801381)
  * Add Vcs-{Browser,Git} headers.
  * Remove trust packets from generated keyrings.  They're not required for
    the purpose of archive keyrings and may change between GnuPG versions,
    rendering the resulting keyrings unreproducible.
    (Closes: #872525, #870780)

 -- Adam D. Barratt <adam@adam-barratt.org.uk>  Sun, 03 Sep 2017 17:52:14 +0100

debian-archive-keyring (2017.5) unstable; urgency=medium

  * Team upload.
  * Add Debian Stable Release Key (9/stretch) (ID: EF0F382A1A7B6500)
    (Closes: #860831)
  * Add Debian Archive Automatic Signing Key (9/stretch) (ID: E0B11894F66AEC98)
    and Debian Security Archive Automatic Signing Key (9/stretch)
    (ID: EDA0D2388AE22BA9) (Closes: #860830)
  * Move the squeeze keys to the removed keyring (Closes: #863303)
  * Update the maintainer README to document removing keys

 -- Adam D. Barratt <adam@adam-barratt.org.uk>  Thu, 25 May 2017 19:17:13 +0100

debian-archive-keyring (2014.3) unstable; urgency=medium

  * Team upload.
  * Also import signatures for Jessie archive keys.

 -- Adam D. Barratt <adam@adam-barratt.org.uk>  Sun, 30 Nov 2014 14:45:43 +0000

debian-archive-keyring (2014.2) unstable; urgency=medium

  * Team upload. (Closes: #771008)
  * Add Debian Archive Automatic Signing Key (8/jessie) (ID: 7638D0442B90D010)
  * Add Debian Security Archive Automatic Signing Key (8/jessie)
    (ID: 9D6D8F6BC857C906)
  * Remove temporary keyring files (*.gpg~) in clean target.
  * Add a maintainer README (not currently included in the binary package).

 -- Adam D. Barratt <adam@adam-barratt.org.uk>  Sun, 30 Nov 2014 12:29:30 +0000

debian-archive-keyring (2014.1) unstable; urgency=medium

  * Team upload. (Closes: #757533)

  [ Philipp Kern ]
  * Replaced my 1024D key with my 8192R key. Resigned all relevant files
    with my new key so that they can be validated again.
  * Add Jessie Stable Release key (ID: CBF8D6FD518E17E1).

 -- Philipp Kern <pkern@debian.org>  Sat, 30 Aug 2014 19:55:17 +0200

debian-archive-keyring (2012.4) unstable; urgency=low

  * Team upload.
  * Mark as multiarch foreign.

 -- Philipp Kern <pkern@debian.org>  Sat, 02 Jun 2012 17:57:18 +0200

debian-archive-keyring (2012.3) unstable; urgency=low

  * Team upload.
  * Remove the two new keys from trusted.gpg in the postinst and change
    the version check so that we can safely backport them to squeeze
    in a non-split way.

 -- Philipp Kern <pkern@debian.org>  Mon, 14 May 2012 20:40:19 +0200

debian-archive-keyring (2012.2) unstable; urgency=low

  * Team upload.
  * Add Debian Archive Automatic Signing Key (7.0/wheezy) (ID: 46925553).
    (Closes: #671105)
  * Add Wheezy Stable Release Key (ID: 65FFB764). (Closes: #665380)
  * Drop the apt dependency to fix the resulting circular dependency.
    (Closes: #672598)

 -- Philipp Kern <pkern@debian.org>  Sun, 13 May 2012 17:07:09 +0200

debian-archive-keyring (2012.1) unstable; urgency=low

  * Team upload.

  [ Philipp Kern ]
  * Do not require a gnupg homedir. (Closes: #665057)
  * Set `Priority: important' in the source stanza of debian/control.
    (Closes: #611805)
  * Move Lenny keys to removed.

  [ David Kalnischkies ]
  * Ship each active key in a separate keyring in /etc/apt/trusted.gpg.d/
    as conffiles for simpler usage of apt-secure(8).
  * Remove all active keys from /etc/apt/trusted.gpg as they are shipped
    now as fragment files.
  * Depend on gpgv and only recommend gnupg. (Closes: #387688)

 -- Philipp Kern <pkern@debian.org>  Wed, 02 May 2012 12:45:26 +0200

debian-archive-keyring (2011.10.23) experimental; urgency=low

  * Team upload.
  * Work only on /etc/apt/trusted.gpg when removing keys.
  * Forcely create the trusted.gpg.d symlink.

 -- Philipp Kern <pkern@debian.org>  Sun, 23 Oct 2011 13:57:23 +0200

debian-archive-keyring (2011.10.21) experimental; urgency=low

  * Team upload.
  * Put debian-archive-keyring.gpg into trusted.gpg.d.
  * Remove old keys from trusted.gpg upon upgrade.
  * Convert to dh7.

 -- Philipp Kern <pkern@debian.org>  Fri, 21 Oct 2011 12:36:10 +0200

debian-archive-keyring (2010.08.28) unstable; urgency=low

  * Team upload.
  * Add Debian Archive Automatic Signing Key (6.0/squeeze) (ID: 473041FA).
  * Convert keyring generation to jetring.

 -- Philipp Kern <pkern@debian.org>  Sat, 28 Aug 2010 23:17:21 +0200

debian-archive-keyring (2010.08.15) unstable; urgency=low

  * Team upload.
  * Add Squeeze Stable Release Key (ID: B98321F9).  (Closes: #540890)
  * Add a DEBIAN/md5sums file to the non-udeb package.  (Closes: #534934)
  * Move to debian-archive-removed-keys.gpg:
    - Debian Archive Automatic Signing Key (4.0/etch)
    - Etch Stable Release Key
    - Debian-Volatile Archive Automatic Signing Key (4.0/etch)

 -- Philipp Kern <pkern@debian.org>  Sun, 15 Aug 2010 22:59:38 +0200

debian-archive-keyring (2009.01.31) unstable; urgency=low

  * Add Debian Archive Automatic Signing Key (5.0/lenny)
    (ID: 55BE302B).
  * Add Debian-Volatile Archive Automatic Signing Key (5.0/lenny)
    (ID: 6D849617).

 -- Luk Claes <luk@debian.org>  Sat, 31 Jan 2009 22:25:18 +0000

debian-archive-keyring (2008.04.16+nmu1) unstable; urgency=low

  * Non-maintainer upload.
  * Move gnupg again to Depends. (closes: #476689)

 -- Bastian Blank <waldi@debian.org>  Fri, 25 Apr 2008 17:52:00 +0000

debian-archive-keyring (2008.04.16) unstable; urgency=low

  * New maintainer: Debian Release Team.
  * Add Lenny Stable Release key (ID: F42584E6).
  * Move to debian-archive-removed-keys.gpg:
    - Debian Archive Automatic Signing Key (2006) (ID: 2D230C5F).
  * Move gnupg to Recommends (Closes: #387688).

 -- Luk Claes <luk@debian.org>  Wed, 16 Apr 2008 20:42:26 +0000

debian-archive-keyring (2007.07.31) unstable; urgency=low

  * added 'volatile' signing key (ID: BBE55AB3)

 -- Michael Vogt <mvo@debian.org>  Tue, 31 Jul 2007 18:35:13 +0200

debian-archive-keyring (2007.02.19-0.1) unstable; urgency=low

  * NMU for d-i.
  * Add a postinst to the udeb that creates an archive.gpg symlink
    if one doesn't yet exist. Closes: #423428
  * Clean up use of dpkg-gencontrol, removing obsolete workaround.
  * Remove removed-keys keyring from udeb to save space. Closes: #423422
  * Set udeb priority to optional to match overrides.

 -- Joey Hess <joeyh@debian.org>  Wed, 30 May 2007 14:38:39 -0400

debian-archive-keyring (2007.02.19) unstable; urgency=low

  * added Etch stable release key (ID: ADB11277) (closes: #410788)
  * moved to debian-archive-removed-keys.gpg:
    - Debian Archive Automatic Signing Key (2004) [1DB114E0]
    - Debian Archive Automatic Signing Key (2005) [4F368D5D]
    - Debian AMD64 Archive Key  [B5F5BBED] (closes: #386956)
  * improved the README (closes: #400942)

 -- Michael Vogt <mvo@debian.org>  Mon, 19 Feb 2007 10:02:06 +0100

debian-archive-keyring (2006.11.22) unstable; urgency=low

  * Non-maintainer upload.
  * Add Etch release key
  * Bump priority to important (Closes: Bug#397698)
  * Update FSF address in copyright.

 -- Anthony Towns <aj@azure.humbug.org.au>  Wed, 22 Nov 2006 01:30:50 +1000

debian-archive-keyring (2006.01.18) unstable; urgency=low

  * changed priority to standard (closes: #348426)
  * added empty debian-archive-removed-keys.gpg

 -- Michael Vogt <mvo@debian.org>  Wed, 18 Jan 2006 23:10:58 +0100

debian-archive-keyring (2006.01.10) unstable; urgency=low

  * initial release

 -- Michael Vogt <mvo@debian.org>  Tue, 10 Jan 2006 09:17:43 +0100
