Public key for signing releases missing

[Unit193]

Howdy,

First off, thanks for maintaining certbot-plugin-gandi. I noticed a while back you seem to have changed the signing key for the releases on pypi, but there wasn't any notice of change and the public key doesn't appear to be online anywhere.

The last release was signed by 86866EAF84F46D74E263C078D80EC4E1F40970E5, and this is currently what's holding up Debian for updating.

~Unit 193

[obynio]

Hello, pretty late to the party

I noticed a while back you seem to have changed the signing key for the releases on pypi, but there wasn't any notice of change and the public key doesn't appear to be online anywhere.

I'm working to fix that. PyPI has unfortunately deprecated signing package. I recently sent a mail to the team maintaining the debian packages but never received an answer. Do you know how I can reach them ?

[Unit193]

Yeah at this point it's likely moot. Well, I'm the person that initially packaged it and am still listed as a maintainer, but I recently moved everything I had to Porkbun too.. I was considering filing to get it removed from Debian, but honestly it should just be taken over as it's still quite useful to someone using Gandi.

[obynio]

Would it be possible to take over the package maintenance ? I keep receiving messages about this package because it's not working anymore because the API changed on Gandi's side.

[Unit193]

Sorry for the delay, but yeah I wouldn't see why not? It hasn't been a priority as a RC bug is keeping it out of stable anyway, but this doesn't help Ubuntu users. The current RC bug relates to a broken upgrade path. I have considered filing a bug to remove the plugin altogether, even though I still think it's useful for Gandi users. I'm not sure which path would be most useful to you?