LINTIAN

# `orig-tarball-missing-upstream-signature`

The packaging includes an upstream signing key but the corresponding `.asc` signature for one or more source tarballs are not included in your .changes file.

Please ensure a `<package>_<version>.orig.tar.<ext>.asc` file exists in the same directory as your `<package>_<version>.orig.tar.<ext>` tarball prior to `dpkg-source --build` being called.

If you are repackaging your source tarballs for Debian Free Software Guidelines compliance reasons, ensure that your package version includes `dfsg` or similar.

Sometimes, an upstream signature must be added for an `orig.tar.gz` that is already present in the archive. Please include the upstream sources again with `dpkg-genchanges -sa` while the signature is also present. Your upload will be accepted as long as the new `orig.tar.gz` file is identical to the old one.

Severity: | `warning`
Experimental: | `false`

## See also

- Bug#954743

- Bug#872864

- list of all the affected packages
- the source of this tag