Bug 920671

Summary:	app-backup/duplicity: should use verify-sig
Product:	Gentoo Linux	Reporter:	Eli Schwartz <eschwartz93>
Component:	Current packages	Assignee:	Richard Freeman <rich0>
Status:	CONFIRMED ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Eli Schwartz 2023-12-24 21:53:33 UTC

The distfile described at https://gitlab.com/duplicity/duplicity/-/releases contains a PGP signature.

The distfile currently used -- from pypi.eclass -- does not. they appear to be slightly different tarballs. The only diffferences per diffoscope are in setup.py (pypi lacks setuptools_scm?) and duplicity-2.1.4/bin/duplicity.1 which contains a date 5 days later on PyPI.