let generate_releases be able to use multiple keys for a signature

without having two signature blocks, which apt / co arent really checking.
now they get them presented in one block, so they might actually do so.

only really interesting whenever we do a key rollover of the ftpmaster key,
as we dont have the stable key available. pity, or it would work there to
to make this kind of "merged" signature.

diff --git a/dak/generate_releases.py b/dak/generate_releases.py
index 6a1bf84e2dee455f163c6be24ab6738c72d4fa52..c1cad6bd9ca787bde583b8246bc0523ab0fa09ba 100755 (executable)
--- a/dak/generate_releases.py
+++ b/dak/generate_releases.py
@@ -95,20 +95,13 @@ def sign_release_dir(suite, dirname):
         if os.path.exists(inlinedest):
             os.unlink(inlinedest)
 
-        # We can only use one key for inline signing so use the first one in
-        # the array for consistency
-        firstkey = True
-
         for keyid in suite.signingkeys or []:
-            defkeyid = "--default-key %s" % keyid
-
-            os.system("gpg %s %s %s --detach-sign <%s >>%s" %
-                    (keyring, defkeyid, arguments, relname, dest))
+            defkeyid = "--local-user %s" % keyid
 
-            if firstkey:
-                os.system("gpg %s %s %s --clearsign <%s >>%s" %
-                        (keyring, defkeyid, arguments, relname, inlinedest))
-                firstkey = False
+        os.system("gpg %s %s %s --detach-sign <%s >>%s" %
+                  (keyring, defkeyid, arguments, relname, dest))
+        os.system("gpg %s %s %s --clearsign <%s >>%s" %
+                  (keyring, defkeyid, arguments, relname, inlinedest))
 
 class ReleaseWriter(object):
     def __init__(self, suite):