Subject: bug#54559: libtool-2.4.7 released [stable]

From: Nick Bowler <[email-masked]>
Date: Fri, 25 Mar 2022 22:01:00 -0400

On 2022-03-25, Alex Ameen <[email-masked]> wrote:
> Howdy, Libtoolers!
>
> After a long hiatus, the Libtool Team is pleased to announce the release of
> libtool 2.4.7.

Congratulations on the release!

> [*] Use a .sig file to verify that the corresponding file (without the
> .sig suffix) is intact.  First, be sure to download both the .sig file
> and the corresponding tarball.  Then, run a command like this:
>
>    gpg --verify libtool-2.4.7.tar.gz.sig
>
> If that command fails because you don't have the required public key,
> then run this command to import it:
>
>    gpg --keyserver keys.gnupg.net --recv-keys 6EAC957F8EEB55C0
>
> and rerun the 'gpg --verify' command.

I believe these instructions need to be updated.  It does not seem to be
possible to retrieve the public key by this method.  My understanding is
that the keys.gunupg.net service has been totally dead for the better
part of a year now.

  % gpg --keyserver keys.gnupg.net --recv-keys 6EAC957F8EEB55C0
  gpg: keyserver receive failed: No data

Cheers,
  Nick