|Subject:||Add Key 8E635A5E to distribution|
In earlier versions the Module::Signature CPAN package was signed with the key in AUDREY2006.pub. This file was part of the distribution and allowed self contained regression tests. Makefile.PL adds *.pub files to the gpg keyring automatically. Now the t/0-signature.t test is skipped if 8E635A5E is not part of the key ring of the user running make test. gpg: Signature made Fri May 13 11:53:28 2011 CEST using DSA key ID 8E635A5E gpg: Can't check signature: public key not found t/0-signature.t .. ok So to always allow deeper tests I would suggest to add the public key 8E635A5E in a file FLORA2003.pub to the Module-Signature tar.gz. Note that this request is not about more security but for easier indenpendent testing.