diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 5c4db6bb163cb44c87bb3106a13d4977d5695f2b..e505004a768f9c20346d4380096c85150913f951 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -2,7 +2,7 @@ before_script:
   - apt-get -q update
   - env DEBIAN_FRONTEND=noninteractive apt-get -q -y install --no-install-recommends aspcud apt-cudf
   - env DEBIAN_FRONTEND=noninteractive apt-get -q -y --solver aspcud -o APT::Solver::Strict-Pinning=0 -o Debug::pkgProblemResolver=yes install --no-install-recommends
-    python-sqlalchemy python-pylons python-debian python-babel iso-codes gnupg python-apt python-lxml python-coverage
+    python-sqlalchemy python-pylons python-debian python-babel iso-codes gnupg python-apt python-lxml python-coverage lintian ca-certificates
 
 .test_template: &test
   script:
diff --git a/bin/__init__.py b/bin/__init__.py
new file mode 100644
index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391
diff --git a/bin/debexpo_importer.py b/bin/debexpo_importer.py
index 588143caca1931a3b7f96b93a8b9398c669474b0..937d5ea82aa22a03c272a72c4675e1c97a9849e5 100755
--- a/bin/debexpo_importer.py
+++ b/bin/debexpo_importer.py
@@ -179,8 +179,6 @@ class Importer(object):
         email = Email('importer_fail_admin')
         self.send_email(email, [pylons.config['debexpo.email']], message=reason)
 
-        sys.exit(1)
-
     def _reject(self, reason):
         """
         Reject the package by sending a reason for failure to the log and then remove all
@@ -201,7 +199,6 @@ class Importer(object):
             package = self.changes.get('Source', '')
 
             self.send_email(email, [self.user.email], package=package, message=reason)
-        sys.exit(1)
 
     def _setup_logging(self):
         """
@@ -217,6 +214,7 @@ class Importer(object):
         # Check for the presence of [loggers] in self.ini_file
         if not parser.has_section('loggers'):
             self._fail('Config file does not have [loggers] section', use_log=False)
+            return 1
 
         logging.config.fileConfig(self.ini_file)
 
@@ -224,7 +222,7 @@ class Importer(object):
         logger_name = 'debexpo.importer.%s' % os.getpid()
         log = logging.getLogger(logger_name)
 
-    def _setup(self):
+    def _setup(self, no_env):
         """
         Set up logging, import pylons/paste/debexpo modules, parse config file, create config
         class and chdir to the incoming directory.
@@ -232,15 +230,17 @@ class Importer(object):
         # Look for ini file
         if not os.path.isfile(self.ini_file):
             self._fail('Cannot find ini file')
+            return 1
 
         self._setup_logging()
 
         # Import debexpo root directory
         sys.path.append(os.path.dirname(self.ini_file))
 
-        # Initialize Pylons app
-        conf = appconfig('config:' + self.ini_file)
-        pylons.config = load_environment(conf.global_conf, conf.local_conf)
+        if not no_env:
+            # Initialize Pylons app
+            conf = appconfig('config:' + self.ini_file)
+            pylons.config = load_environment(conf.global_conf, conf.local_conf)
 
         # Change into the incoming directory
         incoming_dir = pylons.config['debexpo.upload.incoming']
@@ -250,6 +250,7 @@ class Importer(object):
         # Look for the changes file
         if not os.path.isfile(self.changes_file):
             self._fail('Cannot find changes file')
+            return 1
 
     def _create_db_entries(self, qa):
         """
@@ -318,6 +319,7 @@ class Importer(object):
                 sum = md5sum(os.path.join(pylons.config['debexpo.repository'], filename))
             except AttributeError as e:
                 self._fail("Could not calculate MD5 sum: %s" % (e))
+                return 1
 
             size = os.stat(os.path.join(pylons.config['debexpo.repository'], filename))[ST_SIZE]
 
@@ -399,7 +401,7 @@ class Importer(object):
 
         return False
 
-    def main(self):
+    def main(self, no_env=False):
         """
         Actually start the import of the package.
 
@@ -407,9 +409,8 @@ class Importer(object):
         create the database entries for the imported package.
         """
         # Set up importer
-        self._setup()
+        self._setup(no_env)
 
-        log.debug('Importer started with arguments: %s' % sys.argv[1:])
         filecheck = CheckFiles()
         signature = GnuPG()
 
@@ -422,6 +423,7 @@ class Importer(object):
             # XXX: The user won't ever see this message. The changes file was
             # invalid, we don't know whom send it to
             self._reject("Your changes file appears invalid. Refusing your upload\n%s" % (str(e)))
+            return 1
 
         # Determine user from changed-by field
         # This might be temporary, the GPG check should replace the user later
@@ -437,20 +439,25 @@ class Importer(object):
                          " item; if you are using dpkg-buildpackage directly"
                          " use the default flags or -S for a source only"
                          " upload)")
+            return 1
 
         if not self.skip_gpg:
             # Next, find out whether the changes file was signed with a valid signature, if not reject immediately
             if not signature.is_signed(self.changes_file):
                 self._reject('Your upload does not appear to be signed')
+                return 1
             (gpg_out, gpg_uids, gpg_status) = signature.verify_sig_full(self.changes_file)
             if gpg_status != 0:
                 self._reject('Your upload does not contain a valid signature. Output was:\n%s' % (gpg_out))
+                return 1
             if not self._determine_uploader_by_gpg(gpg_uids):
                 self._reject('Rejecting your upload. Your GPG key does not'
                         ' match the email used to register')
+                return 1
 
         if self.user.id == -1:
             self._reject('Couldn\'t find user %s. Exiting.' % self.user.email)
+            return 1
 
         self.user_id = self.user.id
         log.debug("User found in database. Has id: %s", self.user.id)
@@ -510,6 +517,7 @@ class Importer(object):
         if distribution not in allowed_distributions:
             self._reject("You are not uploading to one of those Debian distributions: %s" %
                 (reduce(lambda x,xs: x + " " + xs, allowed_distributions)))
+            return 1
 
         # Look whether the orig tarball is present, and if not, try and get it from
         # the repository.
@@ -551,7 +559,7 @@ class Importer(object):
         if post_upload.stop():
             log.critical('post-upload plugins failed')
             self._remove_changes()
-            sys.exit(1)
+            return 1
 
         # Check whether a post-upload plugin has got the orig tarball from somewhere.
         if not orig_file_found and not filecheck.is_native_package(self.changes):
@@ -576,6 +584,7 @@ class Importer(object):
                         "re-upload your package to mentors.debian.net, "
                         "including the orig tarball (pass -sa to "
                         "dpkg-buildpackage). Thanks,")
+                    return 1
                 else:
                     if orig == None:
                         orig = "any original tarball (orig.tar.gz)"
@@ -586,24 +595,29 @@ class Importer(object):
                         " Debian revision part, make sure you include the full"
                         " source (pass -sa to dpkg-buildpackage)" %
                         ( orig ))
+                    return 1
             else:
                 toinstall.append(orig)
 
         # Check whether the debexpo.repository variable is set
         if 'debexpo.repository' not in pylons.config:
             self._fail('debexpo.repository not set')
+            return 1
 
         # Check whether debexpo.repository is a directory
         if not os.path.isdir(pylons.config['debexpo.repository']):
             self._fail('debexpo.repository is not a directory')
+            return 1
 
         # Check whether debexpo.repository is writeable
         if not os.access(pylons.config['debexpo.repository'], os.W_OK):
             self._fail('debexpo.repository is not writeable')
+            return 1
 
         qa = Plugins('qa', self.changes, self.changes_file, user_id=self.user_id)
         if qa.stop():
             self._reject('QA plugins failed the package')
+            return 1
 
         # Loop through parent directories in the target installation directory to make sure they
         # all exist. If not, create them.
@@ -640,6 +654,7 @@ class Importer(object):
         r.update()
 
         log.debug('Done')
+        return 0
 
 
 def main():
@@ -661,10 +676,10 @@ def main():
         parser.print_help()
         sys.exit(0)
 
+    log.debug('Importer started with arguments: %s' % sys.argv[1:])
     i = Importer(options.changes, options.ini, options.skip_email, options.skip_gpg)
 
-    i.main()
-    return 0
+    sys.exit(i.main())
 
 if __name__=='__main__':
     main()
diff --git a/debexpo/tests/__init__.py b/debexpo/tests/__init__.py
index 2d7e26ed1e802ba6e37e7ae0b34fd0827a6639b4..4676a6d54d14bafcb4a519e103f295863aa065c0 100644
--- a/debexpo/tests/__init__.py
+++ b/debexpo/tests/__init__.py
@@ -47,6 +47,7 @@ __license__ = 'MIT'
 import os
 import sys
 import md5
+import tempfile
 from datetime import datetime
 from unittest import TestCase
 
@@ -64,6 +65,7 @@ from debexpo.model.package_versions import PackageVersion
 from debexpo.model.source_packages import SourcePackage
 from debexpo.model.user_upload_key import UserUploadKey
 from debexpo.model.user_countries import UserCountry
+from debexpo.lib.gnupg import GnuPG
 
 __all__ = ['environ', 'url', 'TestController']
 
@@ -80,6 +82,26 @@ class TestController(TestCase):
                  'password': 'password',
                  'commit': 'submit'}
 
+    _GPG_KEY = """-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=xgUN
+-----END PGP PUBLIC KEY BLOCK-----"""
+
+    _GPG_ID= '256E/E871F3DF'
+
     def __init__(self, *args, **kwargs):
         wsgiapp = pylons.test.pylonsapp
         config = wsgiapp.config
@@ -109,7 +131,25 @@ class TestController(TestCase):
         meta.session.query(UserCountry).delete()
         meta.session.commit()
 
-    def _setup_example_user(self):
+    def _add_gpg_key(self, key, key_id=None, user=None):
+        gpg_ctl = GnuPG()
+
+        # Add key to keyring
+        temp = tempfile.NamedTemporaryFile(delete=True)
+        temp.write(key)
+        temp.flush()
+        gpg_ctl.add_signature(temp.name)
+        temp.close()
+
+        # Update user in database
+        if user:
+            user.gpg = key
+            user.gpg_id = key_id
+            meta.session.merge(user)
+            meta.session.commit()
+
+
+    def _setup_example_user(self, gpg=False):
         """Add an example user.
 
         The example user with name ``Test user``, email address
@@ -134,6 +174,8 @@ class TestController(TestCase):
             meta.session.add(user_upload_key)
             meta.session.commit()
 
+        if gpg:
+            self._add_gpg_key(self._GPG_KEY, self._GPG_ID, user)
 
     def _remove_example_user(self):
         """Remove the example user.
diff --git a/debexpo/tests/functional/test_upload.py b/debexpo/tests/functional/test_upload.py
index 5d6d61fb1ad9ba3479fb9e5d7f14704373dddb38..55a64558d389b60a515253de3a476c98ebe408b5 100644
--- a/debexpo/tests/functional/test_upload.py
+++ b/debexpo/tests/functional/test_upload.py
@@ -54,9 +54,13 @@ class TestUploadController(TestController):
     def setUp(self):
         self._setup_models()
         self._setup_example_user()
+        self.incoming = pylons.test.pylonsapp.config['debexpo.upload.incoming']
+        if not os.path.isdir(os.path.join(pylons.test.pylonsapp.config['debexpo.upload.incoming'], 'pub')):
+            os.makedirs(os.path.join(pylons.test.pylonsapp.config['debexpo.upload.incoming'], 'pub'))
 
     def tearDown(self):
         self._remove_example_user()
+        pylons.test.pylonsapp.config['debexpo.upload.incoming'] = self.incoming
 
     def testGetRequest(self):
         """
@@ -143,13 +147,14 @@ class TestUploadController(TestController):
         """
         Tests whether an uploads without debexpo.upload.incoming fails.
         """
-        pylons.test.pylonsapp.config.pop('debexpo.upload.incoming')
+        incoming = pylons.test.pylonsapp.config.pop('debexpo.upload.incoming')
 
         response = self.app.put(url(
             controller='upload', action='index',
             filename='testfile.dsc'),
             params='contents', expect_errors=True)
 
+
         self.assertEqual(response.status_int, 500)
 
     def testUploadNonexistantQueue(self):
diff --git a/debexpo/tests/importer/__init__.py b/debexpo/tests/importer/__init__.py
new file mode 100644
index 0000000000000000000000000000000000000000..0fbba5e7c7c0b324316c65b0335b108b76a9ce74
--- /dev/null
+++ b/debexpo/tests/importer/__init__.py
@@ -0,0 +1,205 @@
+# -*- coding: utf-8 -*-
+#
+#   test_upload.py — UploadController test cases
+#
+#   This file is part of debexpo
+#   https://salsa.debian.org/mentors.debian.net-team/debexpo
+#
+#   Copyright © 2018 Baptiste BEAUPLAT <lyknode@cilg.org>
+#
+#   Permission is hereby granted, free of charge, to any person
+#   obtaining a copy of this software and associated documentation
+#   files (the "Software"), to deal in the Software without
+#   restriction, including without limitation the rights to use,
+#   copy, modify, merge, publish, distribute, sublicense, and/or sell
+#   copies of the Software, and to permit persons to whom the
+#   Software is furnished to do so, subject to the following
+#   conditions:
+#
+#   The above copyright notice and this permission notice shall be
+#   included in all copies or substantial portions of the Software.
+#
+#   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+#   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+#   OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+#   NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+#   HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+#   WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+#   FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+#   OTHER DEALINGS IN THE SOFTWARE.
+
+__author__ = 'Baptiste BEAUPLAT'
+__copyright__ = 'Copyright © 2018 Baptiste BEAUPLAT'
+__license__ = 'MIT'
+
+import pylons
+
+from email import message_from_file
+from glob import glob
+from os import remove, makedirs, walk
+from os.path import isdir, isfile, join, dirname
+from shutil import rmtree, copytree
+
+from bin.debexpo_importer import Importer
+from debexpo.model import meta
+from debexpo.model.package_versions import PackageVersion
+from debexpo.model.packages import Package
+from debexpo.tests import TestController, url
+
+class TestImporterController(TestController):
+    """
+    Toolbox for importer tests
+
+    This class setup an environment for package to be imported in and ensure
+    cleanup afterward.
+    """
+
+    def __init__(self, *args, **kwargs):
+        TestController.__init__(self, *args, **kwargs)
+        self.data_dir = join(dirname(__file__), 'data')
+
+    def setUp(self):
+        self._setup_models()
+        self._setup_example_user(gpg=True)
+        self._cleanup_mailbox()
+        self._create_repo()
+        self.upload_dir = pylons.config['debexpo.upload.incoming']
+
+    def tearDown(self):
+        self._remove_example_user()
+        self._cleanup_mailbox()
+        self._cleanup_repo()
+        self._cleanup_package()
+
+    def _cleanup_mailbox(self):
+        """Delete mailbox file"""
+        if 'debexpo.testsmtp' in pylons.config:
+            if isfile(pylons.config['debexpo.testsmtp']):
+                remove(pylons.config['debexpo.testsmtp'])
+
+    def _create_repo(self):
+        """Delete all files present in repo directory"""
+        if 'debexpo.repository' in pylons.config:
+            if not isdir(pylons.config['debexpo.repository']):
+                makedirs(pylons.config['debexpo.repository'])
+
+    def _cleanup_repo(self):
+        """Delete all files present in repo directory"""
+        if 'debexpo.repository' in pylons.config:
+            if isdir(pylons.config['debexpo.repository']):
+                rmtree(pylons.config['debexpo.repository'])
+
+    def _upload_package(self, package_dir):
+        """Copy a directory content to incoming queue"""
+        self.assertTrue('debexpo.upload.incoming' in pylons.config)
+
+        # copytree dst dir must not exist
+        if isdir(self.upload_dir):
+            rmtree(self.upload_dir)
+        copytree(join(self.data_dir, package_dir), self.upload_dir)
+
+    def _get_email(self):
+        """Parse an email and format the body."""
+        email = None
+
+        # Load mailbox
+        with open(pylons.config['debexpo.testsmtp'], 'r') as mbox:
+            email = message_from_file(mbox)
+        return email
+
+    def _cleanup_package(self):
+        packages = meta.session.query(Package).all()
+
+        for package in packages:
+            versions = \
+            meta.session.query(PackageVersion).all()
+
+            for version in versions:
+                print('deleting {}'.format(version))
+                meta.session.delete(version)
+
+            print('deleting {}'.format(package))
+            meta.session.delete(package)
+
+        meta.session.commit()
+
+    def _package_in_repo(self, package_name, version):
+        """Check if package is present in repo"""
+        matches = self._find_all(package_name + '_' + version + '.dsc',
+                pylons.config['debexpo.repository'])
+        return len(matches)
+
+    def _find_all(self, name, path):
+        """Find a file in a path"""
+        result = []
+        for root, dirs, files in walk(path):
+            if name in files:
+                result.append(join(root, name))
+        return result
+
+    def import_package(self, package_dir):
+        """Run debexpo importer on package_dir/*.changes"""
+        # Copy uplod files to incomming queue
+        self.assertTrue(isdir(join(self.data_dir, package_dir)))
+        self._upload_package(package_dir)
+
+        # Get change file
+        matches = glob(join(self.upload_dir, '*.changes'))
+        self.assertTrue(len(matches) == 1)
+        changes = matches[0]
+
+        # Run the importer on change file
+        importer = Importer(changes, pylons.config['global_conf']['__file__'],
+                False, False)
+        self._status_importer = importer.main(no_env=True)
+
+    def assert_importer_failed(self):
+        """Assert that the importer has failed"""
+        self.assertFalse(self._status_importer == 0)
+
+    def assert_importer_succeeded(self):
+        """Assert that the importer has succeeded"""
+        self.assertTrue(self._status_importer == 0)
+
+    def assert_no_email(self):
+        """Assert that the importer has not generated any email"""
+        # This check only works when a file mailbox is configured
+        self.assertTrue('debexpo.testsmtp' in pylons.config)
+
+        # The mailbox file has not been created
+        self.assertFalse(isfile(pylons.config['debexpo.testsmtp']))
+
+    def assert_email_with(self, search_text):
+        """
+        Assert that the imported would have sent a email to the uploader
+        containing search_text
+        """
+        # This check only works when a file mailbox is configured
+        self.assertTrue('debexpo.testsmtp' in pylons.config)
+
+        # The mailbox file has been created
+        self.assertTrue(isfile(pylons.config['debexpo.testsmtp']))
+
+        # Get the email and assert that the body contains search_text
+        email = self._get_email()
+        self.assertTrue(search_text in email.get_payload(decode=True))
+
+    def assert_package_count(self, package_name, version, count):
+        """Assert that a package appears count times in debexpo"""
+        package = meta.session.query(Package).filter(Package.name ==
+                package_name).first()
+        if package:
+            count_in_db = \
+            meta.session.query(PackageVersion).filter(PackageVersion.package_id
+                    == package.id and PackageVersion.version == version).count()
+        else:
+            count_in_db = 0
+        self.assertTrue(count_in_db == count)
+
+    def assert_package_in_repo(self, package_name, version):
+        """Assert that a package is present in debexpo repo"""
+        self.assertTrue(self._package_in_repo(package_name, version) > 0)
+
+    def assert_package_not_in_repo(self, package_name, version):
+        """Assert that a package is present in debexpo repo"""
+        self.assertTrue(self._package_in_repo(package_name, version) == 0)
diff --git a/debexpo/tests/importer/data/corrupted-changes/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/corrupted-changes/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..ec61d3da5bd9dd4ea632f3d6e4ab7e3c1214a19f
--- /dev/null
+++ b/debexpo/tests/importer/data/corrupted-changes/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-corrupted
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1.dsc b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..b06588fe36dc89dc95d943d16d5ce8b7b4208c80
--- /dev/null
+++ b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc-too-big
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..9c83681111bb07a3815da98cab6f70b912e5e94d
--- /dev/null
+++ b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo-too-big
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..29f211c43a415f27c45418c9d181ae6f20e7f50f
--- /dev/null
+++ b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-too-big
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/debian-orig-too-big/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/emtpy-changes/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/emtpy-changes/hello_1.0-1_amd64.changes
new file mode 100644
index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391
diff --git a/debexpo/tests/importer/data/hello/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/hello/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/hello/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/hello/hello_1.0-1.dsc b/debexpo/tests/importer/data/hello/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..0bf8a390673cfab41175ae4856b661f267b0f628
--- /dev/null
+++ b/debexpo/tests/importer/data/hello/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc-signed
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..148a1e540959587cb557693fcba7899a5b47445b
--- /dev/null
+++ b/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo-signed
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..296af24c3c78fd7c2dcc773d16c7ab2a6e7174c6
--- /dev/null
+++ b/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-signed
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/hello/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/hello/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/hello/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/hello/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/invalid-dist/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/invalid-dist/hello_1.0-1.dsc b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1.dsc
new file mode 100644
index 0000000000000000000000000000000000000000..ddb3b76fcf40369f62662a2c9c28a42dbee1565c
--- /dev/null
+++ b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1.dsc
@@ -0,0 +1,31 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWzeAAKCRDENHgc6HHz
+32kQAP9qGvxgoXJKKqpMv2pUNe6YGmWGi8JRyNtlOfIluqN+HwEA9bSWg/GvH189
+bGysuZrETyP9fUdlkjIdwkfUOS3+aQo=
+=pvUk
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.buildinfo
new file mode 100644
index 0000000000000000000000000000000000000000..e64a1b08ff689efddeaaf14d26d49a25d8731fba
--- /dev/null
+++ b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1,170 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ 1183e806d63667511caef3291959bc8a 1062 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ 14e5a184c9c79102e652eeb541c9288b77d97af5 1062 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ f7ef8c9203b213fb244f81f85e4f37fdccb82f66b9dc78213cc123c51fac9825 1062 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWzeAAKCRDENHgc6HHz
+35+YAQDqX1lFxtAQqyOr04dE8bnMIMnFFVdD0nQTdwAQA51UuAEAhT9+1KusymCw
+4u31IBz0AZG0zTh4yWQaU9oBbNhkGAQ=
+=LkYY
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.changes
new file mode 100644
index 0000000000000000000000000000000000000000..48ff1a25e9ea972a97a9335e07894b5ad66f7128
--- /dev/null
+++ b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.changes
@@ -0,0 +1,45 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: windows
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 14e5a184c9c79102e652eeb541c9288b77d97af5 1062 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 8779889fed1976a256463b5aafa1b6bbae7b8ca2 4626 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ f7ef8c9203b213fb244f81f85e4f37fdccb82f66b9dc78213cc123c51fac9825 1062 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ c9501021bec0a3ba7474622c1da01b451f606a9b429dda0af9d7a49239bec41b 4626 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ 1183e806d63667511caef3291959bc8a 1062 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 87dd2e148dac93e5f7b584578539b45c 4626 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWzeAAKCRDENHgc6HHz
+36p1AQDmmSxuBNCTGya/BGZAVj6wmSpeLsXhL4JSsADKAUHwXQEAj6f+YERZw0hq
+6Ahbn2xR/8qLV9D1idhRFskIcQDd+gI=
+=P/7+
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/invalid-dist/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/invalid-dist/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/invalid-dist/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/invalid-dist/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1.dsc b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..8c7733102753373ed2aeca6c009395e5db20dec1
--- /dev/null
+++ b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..59c6a5e99e12cb9b2c2bbf5efbd807ca6e5f152f
--- /dev/null
+++ b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..382e9f52e2047f32f27d6d466503bf48698427ac
--- /dev/null
+++ b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/missing-file-in-changes/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-dsc/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/no-dsc/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/no-dsc/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-dsc/hello_1.0-1.dsc b/debexpo/tests/importer/data/no-dsc/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..8c7733102753373ed2aeca6c009395e5db20dec1
--- /dev/null
+++ b/debexpo/tests/importer/data/no-dsc/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..59c6a5e99e12cb9b2c2bbf5efbd807ca6e5f152f
--- /dev/null
+++ b/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..68adc1e191e14572b2adb3ce25b7a7964bd622ec
--- /dev/null
+++ b/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-no-dsc
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/no-dsc/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-dsc/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/no-dsc/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/no-dsc/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-orig/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/no-orig/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/no-orig/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-orig/hello_1.0-1.dsc b/debexpo/tests/importer/data/no-orig/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..a2303e196e796f58cc9d78bbaecfc7f478b7a32a
--- /dev/null
+++ b/debexpo/tests/importer/data/no-orig/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc-no-orig
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..ca79f1bf44b815b438c2a22be68a2f0fa09a9317
--- /dev/null
+++ b/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo-no-orig
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..be7b909c7d1e0b842f3b7ce906c41532de8550a9
--- /dev/null
+++ b/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-no-orig
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/no-orig/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/no-orig/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/no-orig/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/no-orig/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/not-signed/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/not-signed/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/not-signed/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/not-signed/hello_1.0-1.dsc b/debexpo/tests/importer/data/not-signed/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..8c7733102753373ed2aeca6c009395e5db20dec1
--- /dev/null
+++ b/debexpo/tests/importer/data/not-signed/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..59c6a5e99e12cb9b2c2bbf5efbd807ca6e5f152f
--- /dev/null
+++ b/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..c5c0cb4a96985ee6891aee9129346cfab305857b
--- /dev/null
+++ b/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-not-signed
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/not-signed/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/not-signed/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/not-signed/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/not-signed/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/sources/hello-1.0/debian/changelog b/debexpo/tests/importer/data/sources/hello-1.0/debian/changelog
new file mode 100644
index 0000000000000000000000000000000000000000..591fa3735ddc6206cfc8806cb2e9074ed3884323
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello-1.0/debian/changelog
@@ -0,0 +1,5 @@
+hello (1.0-1) unstable; urgency=medium
+
+  * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+
+ -- Baptiste BEAUPLAT <lyknode@cilg.org>  Sun, 02 Dec 2018 22:38:11 +0100
diff --git a/debexpo/tests/importer/data/sources/hello-1.0/debian/compat b/debexpo/tests/importer/data/sources/hello-1.0/debian/compat
new file mode 100644
index 0000000000000000000000000000000000000000..b4de3947675361a7770d29b8982c407b0ec6b2a0
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello-1.0/debian/compat
@@ -0,0 +1 @@
+11
diff --git a/debexpo/tests/importer/data/sources/hello-1.0/debian/control b/debexpo/tests/importer/data/sources/hello-1.0/debian/control
new file mode 100644
index 0000000000000000000000000000000000000000..1388da092e7fecc7646da2d7f75e06bb856861b1
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello-1.0/debian/control
@@ -0,0 +1,15 @@
+Source: hello
+Section: unknown
+Priority: optional
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Build-Depends: debhelper (>= 11)
+Standards-Version: 4.1.3
+Homepage: <insert the upstream URL, if relevant>
+#Vcs-Browser: https://salsa.debian.org/debian/hello
+#Vcs-Git: https://salsa.debian.org/debian/hello.git
+
+Package: hello
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: <insert up to 60 chars description>
+ <insert long description, indented with spaces>
diff --git a/debexpo/tests/importer/data/sources/hello-1.0/debian/copyright b/debexpo/tests/importer/data/sources/hello-1.0/debian/copyright
new file mode 100644
index 0000000000000000000000000000000000000000..30ebf9e45ae0fa3dea9f09adccb40b1ff88debad
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello-1.0/debian/copyright
@@ -0,0 +1,36 @@
+Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/
+Upstream-Name: hello
+Source: <url://example.com>
+
+Files: *
+Copyright: <years> <put author's name and email here>
+           <years> <likewise for another author>
+License: MIT
+
+Files: debian/*
+Copyright: 2018 Baptiste BEAUPLAT <lyknode@cilg.org>
+License: MIT
+
+License: MIT
+ Permission is hereby granted, free of charge, to any person obtaining a
+ copy of this software and associated documentation files (the "Software"),
+ to deal in the Software without restriction, including without limitation
+ the rights to use, copy, modify, merge, publish, distribute, sublicense,
+ and/or sell copies of the Software, and to permit persons to whom the
+ Software is furnished to do so, subject to the following conditions:
+ .
+ The above copyright notice and this permission notice shall be included
+ in all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
+ OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+ IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+ CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, 
+ TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE 
+ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+# Please also look if there are files or directories which have a
+# different copyright/license attached and list them here.
+# Please avoid picking licenses with terms that are more restrictive than the
+# packaged work, as it may make Debian's contributions unacceptable upstream.
diff --git a/debexpo/tests/importer/data/sources/hello-1.0/debian/rules b/debexpo/tests/importer/data/sources/hello-1.0/debian/rules
new file mode 100755
index 0000000000000000000000000000000000000000..e1c367c12388dca85fb368ef66b356702f03a77a
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello-1.0/debian/rules
@@ -0,0 +1,25 @@
+#!/usr/bin/make -f
+# See debhelper(7) (uncomment to enable)
+# output every command that modifies files on the build system.
+#export DH_VERBOSE = 1
+
+
+# see FEATURE AREAS in dpkg-buildflags(1)
+#export DEB_BUILD_MAINT_OPTIONS = hardening=+all
+
+# see ENVIRONMENT in dpkg-buildflags(1)
+# package maintainers to append CFLAGS
+#export DEB_CFLAGS_MAINT_APPEND  = -Wall -pedantic
+# package maintainers to append LDFLAGS
+#export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
+
+
+%:
+	dh $@
+
+
+# dh_make generated override targets
+# This is example for Cmake (See https://bugs.debian.org/641051 )
+#override_dh_auto_configure:
+#	dh_auto_configure -- #	-DCMAKE_LIBRARY_PATH=$(DEB_HOST_MULTIARCH)
+
diff --git a/debexpo/tests/importer/data/sources/hello-1.0/debian/source/format b/debexpo/tests/importer/data/sources/hello-1.0/debian/source/format
new file mode 100644
index 0000000000000000000000000000000000000000..163aaf8d82b6c54f23c45f32895dbdfdcc27b047
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello-1.0/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/sources/hello_1.0-1.debian.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..47a0e7d0e7c12ebd0e421d87054f41c4132f097a
Binary files /dev/null and b/debexpo/tests/importer/data/sources/hello_1.0-1.debian.tar.xz differ
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc
new file mode 100644
index 0000000000000000000000000000000000000000..32ab42a1866d2b4959f967b0a31fed9d7fd7efe3
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc
@@ -0,0 +1,20 @@
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-invlid-dist b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-invlid-dist
new file mode 100644
index 0000000000000000000000000000000000000000..32ab42a1866d2b4959f967b0a31fed9d7fd7efe3
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-invlid-dist
@@ -0,0 +1,20 @@
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-no-orig b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-no-orig
new file mode 100644
index 0000000000000000000000000000000000000000..f34188cfb4a0a49bb208295e305bceb302f7b7eb
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-no-orig
@@ -0,0 +1,28 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWpsAAKCRDENHgc6HHz
+34GrAPsFsPJbCtQfcCbn1e/yXBNzWA4DcZ5qTUv5BIuwOzLndgD/eqnn0Ljd25LB
+G5/0FSm3ttvdIhFa3HsJKQMti5oeIgc=
+=9Lc+
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-signed b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-signed
new file mode 100644
index 0000000000000000000000000000000000000000..77c8e1192a744b48119516d026faf9e5bd025bb8
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-signed
@@ -0,0 +1,31 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWoQQAKCRDENHgc6HHz
+3ysYAQDMUeHp1mKLtoHSS155O4QBRGF7FC/2YBNM8FJwECHuAwD9EyyYFMkBl+rO
+zHq9/OoewResJpTCAzw+KR6J6KS8ugg=
+=Msfi
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-too-big b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-too-big
new file mode 100644
index 0000000000000000000000000000000000000000..6ec8a872bc54659f51ab6865c67050bc68730567
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-too-big
@@ -0,0 +1,31 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 999999999 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 999999999 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 999999999 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAaxiQAKCRDENHgc6HHz
+3+T+AP4tvETYGAZ3LkpsQEIpFKXHI+PZwLF6TcsZk+gDNvXvtwD9EM2d2YnXrVlg
+qwtYxWJnQAMXXysJVdsg1mGn4t0TDg4=
+=dnHI
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-unknown-key b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-unknown-key
new file mode 100644
index 0000000000000000000000000000000000000000..58118a8132622e9e5efb342183f2e8076ab1414b
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-unknown-key
@@ -0,0 +1,31 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
+
+-----BEGIN PGP SIGNATURE-----
+
+iIcEARYIAC8WIQQt4kiVMTxdp/CJ4U4XSUsQeV3XMwUCXAWcaxEcbHlrbm9kZUBj
+aWxnLm9yZwAKCRAXSUsQeV3XMw59AP9JyVpQaCBGq1Pjx27JNnQIQcCU7GJgfY1B
+Ib1dSBjG2AEA17xjdntsVqEdmdpdy2sWFfhSNie/k5Sn3n8Zcc+hwwk=
+=fdtL
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-wrong-uid b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-wrong-uid
new file mode 100644
index 0000000000000000000000000000000000000000..71f521b6bee604bbf24277f89455840334c1ca96
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1.dsc-wrong-uid
@@ -0,0 +1,31 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 3.0 (quilt)
+Source: hello
+Binary: hello
+Architecture: any
+Version: 1.0-1
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Homepage: <insert the upstream URL, if relevant>
+Standards-Version: 4.1.3
+Build-Depends: debhelper (>= 11)
+Package-List:
+ hello deb unknown optional arch=any
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 hello_1.0-1.debian.tar.xz
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQSGVz4uSUdVmCPsPxTH4ZqYGuqOuwUCXAa5KgAKCRDH4ZqYGuqO
+u9ujAQC3v2jMVVfv5WNBijn4H5PYQ0JQ1NtrgDLDwkPJMixwWgD+JFsJYVgwOqsS
+bV7iFcSu7NePUOrwPYyDDMjkmLwRtws=
+=CQUY
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo
new file mode 100644
index 0000000000000000000000000000000000000000..4d2229d9a39c0688701a7a09f0bee279877c1862
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1,159 @@
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ a77f08151b482ddd66141744fe1e2312 784 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ 12b9785a45d1400abc684af9964fed348b2fcf9d 784 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 07d9ec16bf2d90983f3ad9b11ce2f9f8adf05a7a62b52b31987dad142c09704e 784 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-invalid-dist b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-invalid-dist
new file mode 100644
index 0000000000000000000000000000000000000000..4d2229d9a39c0688701a7a09f0bee279877c1862
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-invalid-dist
@@ -0,0 +1,159 @@
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ a77f08151b482ddd66141744fe1e2312 784 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ 12b9785a45d1400abc684af9964fed348b2fcf9d 784 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 07d9ec16bf2d90983f3ad9b11ce2f9f8adf05a7a62b52b31987dad142c09704e 784 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-no-orig b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-no-orig
new file mode 100644
index 0000000000000000000000000000000000000000..0cb999736927e380253b16cab5ba532855594164
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-no-orig
@@ -0,0 +1,170 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ fd38015ad4958ff23ecc138d87b9fff8 842 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ 825dd4ad73600f5b90f9e3fa6a9b8b7b5d3f6c03 842 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 55d9d9f0c1a6622ab7d907022821c489f9e349eef127f2f52977753278974d37 842 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWpsAAKCRDENHgc6HHz
+31+lAQCu2CuooOgNAKtGbXhu9x2FHE9K/qIrwxDErOnnPHgGQAEA+wAmuqceMuNX
+2lPAwOfKv32VNckgzDvcfJlfEB1RhA4=
+=PWAQ
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-signed b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-signed
new file mode 100644
index 0000000000000000000000000000000000000000..c43d6d43ea285b67216f711787d1a77d2aa7f89c
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-signed
@@ -0,0 +1,170 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ e2d4e2ad265f5f51b6fc510f93fb4057 1062 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ c59b78b30b9c8a143bab393433634670df2da633 1062 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 02b78e4ca364c71c990ad77b1648feba0360845643a7ca115695fb1337756356 1062 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWoQQAKCRDENHgc6HHz
+3+2YAQDRYiQ9UAnoi0qtZ9CNk+sSiljWI8cZF2my4aI5mv3kWwEA1oTGq3D75DSE
+ndtrUHg+/k5hazO5Dn3mUbnir0iu0Qw=
+=dwkq
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-too-big b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-too-big
new file mode 100644
index 0000000000000000000000000000000000000000..f649755147741b2cb84c2593c6f58be42fbc7b91
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-too-big
@@ -0,0 +1,170 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ 4197eafc9979cbe93d00e0c4cbdbbe09 1080 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ 01e96e11cf0077f0e47e44e6bd80dfac223fe0c3 1080 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 30951ebde0060ae12613804b1f4639a3e4c1c0570f981acd24d15a1b02be8a4e 1080 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAaxiQAKCRDENHgc6HHz
+37tOAP0d2yJr4cD5sPqnFPeuw0wqefoEtezAhis1xsS81kKR1wEAgpqm80Z/vhpf
+RO5OCaJqmEijdVM8fke9owD/6q9GFAY=
+=5HuC
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-unknown-key b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-unknown-key
new file mode 100644
index 0000000000000000000000000000000000000000..18f21fef8aba8c35a578180681d8a5052e9c7e86
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-unknown-key
@@ -0,0 +1,170 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ 4bda047b0b5feacb9b2a083c49e9e283 1086 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ a66c0bc7ef7b2141309da011dc93f95fa8aa5c5e 1086 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 945ca469a0b1418a50de37a9e80250fc040e39d3c5e6a7c5d266e5fe41094615 1086 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
+
+-----BEGIN PGP SIGNATURE-----
+
+iIcEARYIAC8WIQQt4kiVMTxdp/CJ4U4XSUsQeV3XMwUCXAWcaxEcbHlrbm9kZUBj
+aWxnLm9yZwAKCRAXSUsQeV3XM9IDAP9g5SEYRgY55Ky8wzfUsbKWrE84x5fG/EnQ
+feK14TiMSQD+LhOlvcPGe+c03m8noysoKTGa7FJncZ6D+ARfoIa1CAs=
+=Eqer
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-wrong-uid b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-wrong-uid
new file mode 100644
index 0000000000000000000000000000000000000000..e1bec9fc70c22686d588c259bd8201a13e086fd0
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.buildinfo-wrong-uid
@@ -0,0 +1,170 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.0
+Source: hello
+Binary: hello
+Architecture: amd64 source
+Version: 1.0-1
+Checksums-Md5:
+ c6ec78c569ba897fd5cfeb7b108e1abe 1062 hello_1.0-1.dsc
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 hello_1.0-1_amd64.deb
+Checksums-Sha1:
+ ad81ad70eb8d0e72626ac853793ec310da96d64d 1062 hello_1.0-1.dsc
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 5dd1b897bb1338874f64c6429e133757582754486caaf14aeb7cb345131bda74 1062 hello_1.0-1.dsc
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Build-Origin: Debian
+Build-Architecture: amd64
+Build-Date: Sun, 02 Dec 2018 21:39:25 +0000
+Build-Path: /build/hello-mcxzr0/hello-1.0
+Installed-Build-Depends:
+ autoconf (= 2.69-11),
+ automake (= 1:1.16.1-4),
+ autopoint (= 0.19.8.1-9),
+ autotools-dev (= 20180224.1),
+ base-files (= 10.1),
+ base-passwd (= 3.5.45),
+ bash (= 4.4.18-3.1),
+ binutils (= 2.31.1-10),
+ binutils-common (= 2.31.1-10),
+ binutils-x86-64-linux-gnu (= 2.31.1-10),
+ bsdmainutils (= 11.1.2+b1),
+ bsdutils (= 1:2.32.1-0.2),
+ build-essential (= 12.5),
+ bzip2 (= 1.0.6-9),
+ coreutils (= 8.30-1),
+ cpp (= 4:8.2.0-2),
+ cpp-8 (= 8.2.0-10),
+ dash (= 0.5.10.2-1),
+ debconf (= 1.5.69),
+ debhelper (= 11.5.3),
+ debianutils (= 4.8.6),
+ dh-autoreconf (= 19),
+ dh-strip-nondeterminism (= 0.45.0-1),
+ diffutils (= 1:3.6-1),
+ dpkg (= 1.19.2),
+ dpkg-dev (= 1.19.2),
+ dwz (= 0.12-2),
+ fdisk (= 2.32.1-0.2),
+ file (= 1:5.34-2),
+ findutils (= 4.6.0+git+20181018-1),
+ g++ (= 4:8.2.0-2),
+ g++-8 (= 8.2.0-10),
+ gcc (= 4:8.2.0-2),
+ gcc-8 (= 8.2.0-10),
+ gcc-8-base (= 8.2.0-10),
+ gettext (= 0.19.8.1-9),
+ gettext-base (= 0.19.8.1-9),
+ grep (= 3.1-2),
+ groff-base (= 1.22.3-10),
+ gzip (= 1.9-2.1),
+ hostname (= 3.21),
+ init-system-helpers (= 1.56),
+ intltool-debian (= 0.35.0+20060710.4),
+ libacl1 (= 2.2.52-3+b1),
+ libarchive-zip-perl (= 1.64-1),
+ libasan5 (= 8.2.0-10),
+ libatomic1 (= 8.2.0-10),
+ libattr1 (= 1:2.4.47-2+b2),
+ libaudit-common (= 1:2.8.4-2),
+ libaudit1 (= 1:2.8.4-2),
+ libbinutils (= 2.31.1-10),
+ libblkid1 (= 2.32.1-0.2),
+ libbsd0 (= 0.9.1-1),
+ libbz2-1.0 (= 1.0.6-9),
+ libc-bin (= 2.28-1),
+ libc-dev-bin (= 2.28-1),
+ libc6 (= 2.28-1),
+ libc6-dev (= 2.28-1),
+ libcap-ng0 (= 0.7.9-1+b1),
+ libcc1-0 (= 8.2.0-10),
+ libcroco3 (= 0.6.12-2),
+ libdb5.3 (= 5.3.28+dfsg1-0.2),
+ libdebconfclient0 (= 0.245),
+ libdpkg-perl (= 1.19.2),
+ libelf1 (= 0.175-1),
+ libfdisk1 (= 2.32.1-0.2),
+ libffi6 (= 3.2.1-9),
+ libfile-stripnondeterminism-perl (= 0.45.0-1),
+ libgcc-8-dev (= 8.2.0-10),
+ libgcc1 (= 1:8.2.0-10),
+ libgcrypt20 (= 1.8.4-4),
+ libgdbm-compat4 (= 1.18.1-2),
+ libgdbm6 (= 1.18.1-2),
+ libglib2.0-0 (= 2.58.1-2),
+ libgmp10 (= 2:6.1.2+dfsg-4),
+ libgomp1 (= 8.2.0-10),
+ libgpg-error0 (= 1.32-3),
+ libicu63 (= 63.1-5),
+ libisl19 (= 0.20-2),
+ libitm1 (= 8.2.0-10),
+ liblsan0 (= 8.2.0-10),
+ liblz4-1 (= 1.8.2-1),
+ liblzma5 (= 5.2.2-1.3),
+ libmagic-mgc (= 1:5.34-2),
+ libmagic1 (= 1:5.34-2),
+ libmount1 (= 2.32.1-0.2),
+ libmpc3 (= 1.1.0-1),
+ libmpfr6 (= 4.0.1-1),
+ libmpx2 (= 8.2.0-10),
+ libncurses6 (= 6.1+20181013-1),
+ libncursesw6 (= 6.1+20181013-1),
+ libpam-modules (= 1.1.8-3.8),
+ libpam-modules-bin (= 1.1.8-3.8),
+ libpam-runtime (= 1.1.8-3.8),
+ libpam0g (= 1.1.8-3.8),
+ libpcre3 (= 2:8.39-11),
+ libperl5.28 (= 5.28.1-1),
+ libpipeline1 (= 1.5.0-2),
+ libquadmath0 (= 8.2.0-10),
+ libseccomp2 (= 2.3.3-3),
+ libselinux1 (= 2.8-1+b1),
+ libsigsegv2 (= 2.12-2),
+ libsmartcols1 (= 2.32.1-0.2),
+ libstdc++-8-dev (= 8.2.0-10),
+ libstdc++6 (= 8.2.0-10),
+ libsystemd0 (= 239-14),
+ libtinfo6 (= 6.1+20181013-1),
+ libtool (= 2.4.6-6),
+ libtsan0 (= 8.2.0-10),
+ libubsan1 (= 8.2.0-10),
+ libudev1 (= 239-14),
+ libunistring2 (= 0.9.10-1),
+ libuuid1 (= 2.32.1-0.2),
+ libxml2 (= 2.9.4+dfsg1-7+b2),
+ linux-libc-dev (= 4.18.20-2),
+ login (= 1:4.5-1.1),
+ m4 (= 1.4.18-2),
+ make (= 4.2.1-1.2),
+ man-db (= 2.8.4-3),
+ mawk (= 1.3.3-17+b3),
+ ncurses-base (= 6.1+20181013-1),
+ ncurses-bin (= 6.1+20181013-1),
+ patch (= 2.7.6-3),
+ perl (= 5.28.1-1),
+ perl-base (= 5.28.1-1),
+ perl-modules-5.28 (= 5.28.1-1),
+ po-debconf (= 1.0.21),
+ sed (= 4.5-2),
+ sensible-utils (= 0.0.12),
+ sysvinit-utils (= 2.92~beta-2),
+ tar (= 1.30+dfsg-3),
+ util-linux (= 2.32.1-0.2),
+ xz-utils (= 5.2.2-1.3),
+ zlib1g (= 1:1.2.11.dfsg-1)
+Environment:
+ DEB_BUILD_OPTIONS="parallel=5"
+ LANG="en_US.UTF-8"
+ LC_ALL="POSIX"
+ LD_LIBRARY_PATH="/usr/lib/libeatmydata"
+ SOURCE_DATE_EPOCH="1543786691"
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQSGVz4uSUdVmCPsPxTH4ZqYGuqOuwUCXAa5KgAKCRDH4ZqYGuqO
+uzOPAQDDqFMb+H7jEtNEQ21AaGBi1b0rsGKVu7/kKDZ+8Xt9RwD/eOWige76+bX3
+537LSx+fx41ftTt5zWdBxbAE7k1xFw0=
+=/moU
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes
new file mode 100644
index 0000000000000000000000000000000000000000..c684b2c67430e59612dbf2f2360201a75d21c919
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes
@@ -0,0 +1,34 @@
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 12b9785a45d1400abc684af9964fed348b2fcf9d 784 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 643e7c3bd8a51ec64d186adca2a21ee148105044 4345 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 07d9ec16bf2d90983f3ad9b11ce2f9f8adf05a7a62b52b31987dad142c09704e 784 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 80a9b97283b71496d4a7beae1506537ac427e1ebb31ec4a4ab4699d1b42b8f98 4345 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ a77f08151b482ddd66141744fe1e2312 784 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 7c45a75ae2228ca27675a98457552edc 4345 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-corrupted b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-corrupted
new file mode 100644
index 0000000000000000000000000000000000000000..bd91e709fc280c7b35bed44b0a87da1a77518d08
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-corrupted
@@ -0,0 +1,34 @@
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+CORRUPTEDDistribution: unstable
+Urgency: medium
+CORRUPTEDMaintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+CORRUPTEDChanged-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 12b9785a45d1400abc684af9964fed348b2fcf9d 784 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 643e7c3bd8a51ec64d186adca2a21ee148105044 4345 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 07d9ec16bf2d90983f3ad9b11ce2f9f8adf05a7a62b52b31987dad142c09704e 784 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 80a9b97283b71496d4a7beae1506537ac427e1ebb31ec4a4ab4699d1b42b8f98 4345 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ a77f08151b482ddd66141744fe1e2312 784 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 7c45a75ae2228ca27675a98457552edc 4345 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-invalid-dist b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-invalid-dist
new file mode 100644
index 0000000000000000000000000000000000000000..c684b2c67430e59612dbf2f2360201a75d21c919
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-invalid-dist
@@ -0,0 +1,34 @@
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 12b9785a45d1400abc684af9964fed348b2fcf9d 784 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 643e7c3bd8a51ec64d186adca2a21ee148105044 4345 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 07d9ec16bf2d90983f3ad9b11ce2f9f8adf05a7a62b52b31987dad142c09704e 784 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 80a9b97283b71496d4a7beae1506537ac427e1ebb31ec4a4ab4699d1b42b8f98 4345 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ a77f08151b482ddd66141744fe1e2312 784 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 7c45a75ae2228ca27675a98457552edc 4345 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-no-dsc b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-no-dsc
new file mode 100644
index 0000000000000000000000000000000000000000..b24ff4eabfae079da21d6b6679a65a19fecb0f28
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-no-dsc
@@ -0,0 +1,31 @@
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 643e7c3bd8a51ec64d186adca2a21ee148105044 4345 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 80a9b97283b71496d4a7beae1506537ac427e1ebb31ec4a4ab4699d1b42b8f98 4345 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 7c45a75ae2228ca27675a98457552edc 4345 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-no-orig b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-no-orig
new file mode 100644
index 0000000000000000000000000000000000000000..38d923ca8ca1f780e891b5f04ef786653f257cbf
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-no-orig
@@ -0,0 +1,42 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 825dd4ad73600f5b90f9e3fa6a9b8b7b5d3f6c03 842 hello_1.0-1.dsc
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 7bbf2274225b7442359ee7f2457d72e58e43bb48 4623 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 55d9d9f0c1a6622ab7d907022821c489f9e349eef127f2f52977753278974d37 842 hello_1.0-1.dsc
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ e02d7d0ae7ff5c026a007ffa533a742fb62b28d18f3739c26d17406eb155c50a 4623 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ fd38015ad4958ff23ecc138d87b9fff8 842 unknown optional hello_1.0-1.dsc
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 60677f972a55c862b3cb3342b0db26c6 4623 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWpsQAKCRDENHgc6HHz
+3ycZAP9PhS3UrRv1wzrQnElUg6P1ysql6hRug69zg9pw8JVrlAEA7kdG/PWz/cli
+xgCiWITp/g0Z0wFqJG5/c4cdcDKjxAs=
+=vibL
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-not-signed b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-not-signed
new file mode 100644
index 0000000000000000000000000000000000000000..c684b2c67430e59612dbf2f2360201a75d21c919
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-not-signed
@@ -0,0 +1,34 @@
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 12b9785a45d1400abc684af9964fed348b2fcf9d 784 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 643e7c3bd8a51ec64d186adca2a21ee148105044 4345 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 07d9ec16bf2d90983f3ad9b11ce2f9f8adf05a7a62b52b31987dad142c09704e 784 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 80a9b97283b71496d4a7beae1506537ac427e1ebb31ec4a4ab4699d1b42b8f98 4345 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ a77f08151b482ddd66141744fe1e2312 784 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 7c45a75ae2228ca27675a98457552edc 4345 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-signed b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-signed
new file mode 100644
index 0000000000000000000000000000000000000000..44138690d606fb466b6817588aeedad0305d7ed4
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-signed
@@ -0,0 +1,45 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ c59b78b30b9c8a143bab393433634670df2da633 1062 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 3ec1a101d4cff4e81d05afcf7a7eefe23e6eb1bd 4626 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 02b78e4ca364c71c990ad77b1648feba0360845643a7ca115695fb1337756356 1062 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 24a6cecc76acf84e71f715fa555dc34a8c83ff3f616edaea192ab8c7eca5bb48 4626 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ e2d4e2ad265f5f51b6fc510f93fb4057 1062 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 1f3c5eee601718afb1407994c4fcbe4b 4626 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAWoQQAKCRDENHgc6HHz
+3z4SAQDiaUs+ViKvG5FNfVdR2OJzZwTavvcMh6GY+AwrElVYFwEA6vbLavgTVumt
+EqxVdV1CaUzVnWQILsY93OUVXnwmrgY=
+=9rcy
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-too-big b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-too-big
new file mode 100644
index 0000000000000000000000000000000000000000..c38f55c888c85c1d9f627302a0d59227a3ad2092
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-too-big
@@ -0,0 +1,42 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ 01e96e11cf0077f0e47e44e6bd80dfac223fe0c3 1080 hello_1.0-1.dsc
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ d14e5ea8ff023785eb4b8ce0fb1c0d0bd7af92ec 4626 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 30951ebde0060ae12613804b1f4639a3e4c1c0570f981acd24d15a1b02be8a4e 1080 hello_1.0-1.dsc
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 3cad8cb0bf309032fc7cca76f500b148f3fb1f0fd2a7ab329081138dd115de08 4626 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ 4197eafc9979cbe93d00e0c4cbdbbe09 1080 unknown optional hello_1.0-1.dsc
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 5da161356f255eba1ce32641deeae691 4626 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQRVkwbu4cjBst0cc7HENHgc6HHz3wUCXAaxiQAKCRDENHgc6HHz
+32dyAPsHaUXZ+bi5KzhnHzNmAqvtjPWGi0fy4a9RwgwG1M3Q4wEA6FERmWOEeYGk
+2sqrGYus2iNn9kXANAbtYBD6cQN1ywI=
+=MUhv
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-unknown-key b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-unknown-key
new file mode 100644
index 0000000000000000000000000000000000000000..aea512176f62fbe6e9dfe1d3bf305904ce351662
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-unknown-key
@@ -0,0 +1,45 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ a66c0bc7ef7b2141309da011dc93f95fa8aa5c5e 1086 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 5f5cd60fee487dda63627c6313c55a9c38349baf 4650 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 945ca469a0b1418a50de37a9e80250fc040e39d3c5e6a7c5d266e5fe41094615 1086 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 8dc42df212c4eee5108188e69c38c070c77acff45c2b574e037d4d595984f097 4650 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ 4bda047b0b5feacb9b2a083c49e9e283 1086 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ e95955eeb29eb8d36a2616c6fa9b2a84 4650 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
+
+-----BEGIN PGP SIGNATURE-----
+
+iIcEARYIAC8WIQQt4kiVMTxdp/CJ4U4XSUsQeV3XMwUCXAWcbBEcbHlrbm9kZUBj
+aWxnLm9yZwAKCRAXSUsQeV3XM9qFAP4qgQHweo+E6f81KOHYS68lPIVxAafc4wGo
+h4ShdtmouQD/Q2/lnG2vwsV5bJlQeTKWgnAo6p/euWMcggYuZ1DcmQ0=
+=7oje
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-wrong-checksum b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-wrong-checksum
new file mode 100644
index 0000000000000000000000000000000000000000..ac66b5ec7c764e0ad54f05fdbc95c31dddcef7a5
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-wrong-checksum
@@ -0,0 +1,34 @@
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 784 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 643e7c3bd8a51ec64d186adca2a21ee148105044 4345 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 784 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 80a9b97283b71496d4a7beae1506537ac427e1ebb31ec4a4ab4699d1b42b8f98 4345 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 784 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ 7c45a75ae2228ca27675a98457552edc 4345 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-wrong-uid b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-wrong-uid
new file mode 100644
index 0000000000000000000000000000000000000000..f7e8e9a3798f8f6338dd8ef665fd1f392f1dfeb0
--- /dev/null
+++ b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.changes-wrong-uid
@@ -0,0 +1,45 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Format: 1.8
+Date: Sun, 02 Dec 2018 22:38:11 +0100
+Source: hello
+Binary: hello
+Architecture: source amd64
+Version: 1.0-1
+Distribution: unstable
+Urgency: medium
+Maintainer: Baptiste BEAUPLAT <lyknode@cilg.org>
+Changed-By: Baptiste BEAUPLAT <lyknode@cilg.org>
+Description:
+ hello      - <insert up to 60 chars description>
+Changes:
+ hello (1.0-1) unstable; urgency=medium
+ .
+   * Initial release (Closes: #nnnn)  <nnnn is the bug number of your ITP>
+Checksums-Sha1:
+ ad81ad70eb8d0e72626ac853793ec310da96d64d 1062 hello_1.0-1.dsc
+ be505a70074ab85fed3f68026242651fcde85bf2 168 hello_1.0.orig.tar.xz
+ 1b0605ef708d31b2396ce3f80bd5e52c8a03af59 7808 hello_1.0-1.debian.tar.xz
+ 62c92ae2a20388d9d79a24200787aa0ee5ed84b0 4626 hello_1.0-1_amd64.buildinfo
+ 4704c98642a0cb7dfd6b9a4cb4c0d61916a1e729 2316 hello_1.0-1_amd64.deb
+Checksums-Sha256:
+ 5dd1b897bb1338874f64c6429e133757582754486caaf14aeb7cb345131bda74 1062 hello_1.0-1.dsc
+ 622d2165e0ae0aee8b3dac5fbf07f471db2205c4cb60d1c3ce3762a12fbe62bf 168 hello_1.0.orig.tar.xz
+ 9454f8244e73ab8932833d0e2b4a3e2526407ffd22b687082d1c27876f771555 7808 hello_1.0-1.debian.tar.xz
+ 63a9a6a2a70d9367e8633b8fbb18e3153e5f1a90885fd9d5fc557b24e9a5afc4 4626 hello_1.0-1_amd64.buildinfo
+ c98b2da09c2abe6b446c36aa3210adacde8d3566f8e76ea62c15b9aa7bbfd1f5 2316 hello_1.0-1_amd64.deb
+Files:
+ c6ec78c569ba897fd5cfeb7b108e1abe 1062 unknown optional hello_1.0-1.dsc
+ 3789bf498b8c4cf0387383466ec4c227 168 unknown optional hello_1.0.orig.tar.xz
+ 8b4cae66eaf956a2b39b7d3d5482580a 7808 unknown optional hello_1.0-1.debian.tar.xz
+ c2c0c94923eeca97a69fc4ee4654e3b5 4626 unknown optional hello_1.0-1_amd64.buildinfo
+ 4c3f75043d99b8a9d3d5019b46a3625c 2316 unknown optional hello_1.0-1_amd64.deb
+
+-----BEGIN PGP SIGNATURE-----
+
+iHUEARYIAB0WIQSGVz4uSUdVmCPsPxTH4ZqYGuqOuwUCXAa5KgAKCRDH4ZqYGuqO
+ux9CAPwJCqTZw/nV9zU+zaDzBe+w1ZSvF/LzjJ331mSDro1l1AD8DaFmGY9FlaM4
+y4x7kj2y+RJUeYySAKl2+P76Lgdv0wA=
+=SOra
+-----END PGP SIGNATURE-----
diff --git a/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.deb
new file mode 100644
index 0000000000000000000000000000000000000000..394cd6887a0997e4beb483f3e0847a195a1a5a00
Binary files /dev/null and b/debexpo/tests/importer/data/sources/hello_1.0-1_amd64.deb differ
diff --git a/debexpo/tests/importer/data/sources/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/sources/hello_1.0.orig.tar.xz
new file mode 100644
index 0000000000000000000000000000000000000000..83aa373e41ddef2096ee315d687f041576ba55c6
Binary files /dev/null and b/debexpo/tests/importer/data/sources/hello_1.0.orig.tar.xz differ
diff --git a/debexpo/tests/importer/data/unknown-key/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/unknown-key/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/unknown-key/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/unknown-key/hello_1.0-1.dsc b/debexpo/tests/importer/data/unknown-key/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..91476cb67971c3c64e9975f5f5813bd9084876db
--- /dev/null
+++ b/debexpo/tests/importer/data/unknown-key/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc-unknown-key
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..deb807687f5fec69b180e4e552fbf9977f850460
--- /dev/null
+++ b/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo-unknown-key
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..96acaf957d5f6489276162f445a62ee06e7d58b3
--- /dev/null
+++ b/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-unknown-key
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/unknown-key/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/unknown-key/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/unknown-key/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/unknown-key/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1.dsc b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..8c7733102753373ed2aeca6c009395e5db20dec1
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..59c6a5e99e12cb9b2c2bbf5efbd807ca6e5f152f
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..ca0b0299f8558c57f306e28ec038aeb6675bca39
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-wrong-checksum
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-checksum-in-changes/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1.debian.tar.xz b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1.debian.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..5ffba6187d1ada21436d2316f35f3135536c3c63
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1.debian.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0-1.debian.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1.dsc b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1.dsc
new file mode 120000
index 0000000000000000000000000000000000000000..b1279ed02a0b34e9ec6232710f450a5be3481d2a
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1.dsc
@@ -0,0 +1 @@
+../sources/hello_1.0-1.dsc-wrong-uid
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.buildinfo b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.buildinfo
new file mode 120000
index 0000000000000000000000000000000000000000..6f797c5aba157ab9ad5687a82924837cda9ac491
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.buildinfo
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.buildinfo-wrong-uid
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.changes b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.changes
new file mode 120000
index 0000000000000000000000000000000000000000..a06d7414cf01ba6d494c81ca77982ff9fbf8366b
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.changes
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.changes-wrong-uid
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.deb b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.deb
new file mode 120000
index 0000000000000000000000000000000000000000..afe90bc09a8ccb7bdfc88af361418645659942b4
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0-1_amd64.deb
@@ -0,0 +1 @@
+../sources/hello_1.0-1_amd64.deb
\ No newline at end of file
diff --git a/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0.orig.tar.xz b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0.orig.tar.xz
new file mode 120000
index 0000000000000000000000000000000000000000..e870f45711348eb7d93221b993e4d2716c7ffb75
--- /dev/null
+++ b/debexpo/tests/importer/data/wrong-gpg-uid/hello_1.0.orig.tar.xz
@@ -0,0 +1 @@
+../sources/hello_1.0.orig.tar.xz
\ No newline at end of file
diff --git a/debexpo/tests/importer/test_importer.py b/debexpo/tests/importer/test_importer.py
new file mode 100644
index 0000000000000000000000000000000000000000..f1d5baa9de8b908edc4a9e8db4cfcd3ca2703948
--- /dev/null
+++ b/debexpo/tests/importer/test_importer.py
@@ -0,0 +1,171 @@
+# -*- coding: utf-8 -*-
+#
+#   test_upload.py — UploadController test cases
+#
+#   This file is part of debexpo
+#   https://salsa.debian.org/mentors.debian.net-team/debexpo
+#
+#   Copyright © 2018 Baptiste BEAUPLAT <lyknode@cilg.org>
+#
+#   Permission is hereby granted, free of charge, to any person
+#   obtaining a copy of this software and associated documentation
+#   files (the "Software"), to deal in the Software without
+#   restriction, including without limitation the rights to use,
+#   copy, modify, merge, publish, distribute, sublicense, and/or sell
+#   copies of the Software, and to permit persons to whom the
+#   Software is furnished to do so, subject to the following
+#   conditions:
+#
+#   The above copyright notice and this permission notice shall be
+#   included in all copies or substantial portions of the Software.
+#
+#   THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+#   EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES
+#   OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+#   NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+#   HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+#   WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+#   FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
+#   OTHER DEALINGS IN THE SOFTWARE.
+
+"""
+UploadController test cases.
+"""
+
+__author__ = 'Baptiste BEAUPLAT'
+__copyright__ = 'Copyright © 2018 Baptiste BEAUPLAT'
+__license__ = 'MIT'
+
+from pylons.test import pylonsapp
+from debexpo.tests.importer import TestImporterController
+
+class TestImporter(TestImporterController):
+    """
+    This class tests debexpo's importer.
+
+    Its goal is to process a user upload, validate it and reject it with a email
+    sent to the user or accepting it and making it available in debexpo repo
+    """
+
+    _ORPHAN_GPG_KEY = """
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=BMLr
+-----END PGP PUBLIC KEY BLOCK-----
+"""
+
+    def __init__(self, *args, **kwargs):
+        TestImporterController.__init__(self, *args, **kwargs)
+
+    def test_import_package_empty_changes(self):
+        self.import_package('emtpy-changes')
+        self.assert_importer_failed()
+        self.assert_no_email()
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_corrupted_changes(self):
+        self.import_package('corrupted-changes')
+        self.assert_importer_failed()
+        self.assert_no_email()
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_missing_file_in_changes(self):
+        self.import_package('missing-file-in-changes')
+        self.assert_importer_failed()
+        self.assert_no_email()
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_wrong_checksum_in_changes(self):
+        self.import_package('wrong-checksum-in-changes')
+        self.assert_importer_failed()
+        self.assert_no_email()
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_no_dsc(self):
+        self.import_package('no-dsc')
+        self.assert_importer_failed()
+        self.assert_email_with('Rejecting incomplete upload.\nYou did not'
+                ' upload the dsc file\n')
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_not_signed(self):
+        self.import_package('not-signed')
+        self.assert_importer_failed()
+        self.assert_email_with('Your upload does not appear to be signed')
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_unknown_key(self):
+        self.import_package('unknown-key')
+        self.assert_importer_failed()
+        self.assert_email_with('Your upload does not contain a valid'
+                ' signature.')
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_wrong_gpg_uid(self):
+        self._add_gpg_key(self._ORPHAN_GPG_KEY)
+        self.import_package('wrong-gpg-uid')
+        self.assert_importer_failed()
+        self.assert_email_with('Your GPG key does not match the email used to'
+                ' register')
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_invalid_dist(self):
+        self.import_package('invalid-dist')
+        self.assert_importer_failed()
+        self.assert_email_with('You are not uploading to one of those Debian'
+                ' distribution')
+        self.assert_package_count('hello', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_no_orig(self):
+        self.import_package('no-orig')
+        self.assert_importer_failed()
+        self.assert_email_with('Rejecting incomplete upload. You did not'
+                ' upload any original tarball (orig.tar.gz)')
+        self.assert_package_count('non-existent', '1.0-1', 0)
+        self.assert_package_not_in_repo('hello', '1.0-1')
+
+    def test_import_package_debian_orig_too_big(self):
+        self.import_package('debian-orig-too-big')
+        self.assert_importer_failed()
+        self.assert_email_with('We did find it on Debian main archive, however'
+                ' it is too big to be downloaded by our system')
+        self.assert_package_count('0ad-data', '0.0.23-1', 0)
+        self.assert_package_not_in_repo('0ad-data', '0.0.23-1')
+
+    def test_import_package_hello(self):
+        self.import_package('hello')
+        self.assert_importer_succeeded()
+        self.assert_email_with("Your upload of the package 'hello' to "
+                + pylonsapp.config['debexpo.sitename'] + " was\nsuccessful.")
+        self.assert_package_count('hello', '1.0-1', 1)
+        self.assert_package_in_repo('hello', '1.0-1')
+
+        self._cleanup_mailbox()
+        self.import_package('hello')
+        self.assert_importer_succeeded()
+        self.assert_email_with("Your upload of the package 'hello' to "
+                + pylonsapp.config['debexpo.sitename'] + " was\nsuccessful.")
+        self.assert_package_count('hello', '1.0-1', 2)
+        self.assert_package_in_repo('hello', '1.0-1')
diff --git a/debexpo/tests/test_changes.py b/debexpo/tests/test_changes.py
index b74f6ff7759a31b4a03b95f645b39cca39f62fec..3ab8365bd11b69dd98d7dbfeda3fdc82719b35a4 100644
--- a/debexpo/tests/test_changes.py
+++ b/debexpo/tests/test_changes.py
@@ -35,6 +35,7 @@ __author__ = 'Jonny Lamb'
 __copyright__ = 'Copyright © 2008 Jonny Lamb'
 __license__ = 'MIT'
 
+import os
 from unittest import TestCase
 
 from debexpo.lib.changes import Changes
@@ -53,11 +54,11 @@ class TestChangesController(TestCase):
         """
         Tests whether the two ways of creating a Changes object output the same result.
         """
-        f = open('debexpo/tests/changes/synce-hal_0.1-1_source.changes')
+        f = open(os.path.dirname(__file__) + '/changes/synce-hal_0.1-1_source.changes')
         contents = f.read()
         f.close()
 
-        a = Changes(filename='debexpo/tests/changes/synce-hal_0.1-1_source.changes')
+        a = Changes(filename=os.path.dirname(__file__) + '/changes/synce-hal_0.1-1_source.changes')
         b = Changes(string=contents)
 
         self.assertEqual(a['Source'], b['Source'])
diff --git a/debexpo/tests/test_utils.py b/debexpo/tests/test_utils.py
index 8e37067a2784afa783bdfb7d9b32a2025b061daf..0b62f03579e9adb3ad127e25b498586dce2025bf 100644
--- a/debexpo/tests/test_utils.py
+++ b/debexpo/tests/test_utils.py
@@ -35,6 +35,7 @@ __author__ = 'Jonny Lamb'
 __copyright__ = 'Copyright © 2008 Jonny Lamb'
 __license__ = 'MIT'
 
+import os
 from unittest import TestCase
 
 from debexpo.lib.utils import *
@@ -80,4 +81,4 @@ class TestUtilsController(TestCase):
         """
         Tests debexpo.lib.utils.md5sum.
         """
-        self.assertEqual(md5sum('debexpo/tests/changes/synce-hal_0.1-1_source.changes'), 'fbb0b9c81f8a4fa9b8e3b789cf3b5220')
+        self.assertEqual(md5sum(os.path.dirname(__file__) + '/changes/synce-hal_0.1-1_source.changes'), 'fbb0b9c81f8a4fa9b8e3b789cf3b5220')
diff --git a/test.ini b/test.ini
index 611698ec17a4ff0ed34e5fdbddbdc0a481cc698c..4efcd73316060246c8de6e93930484bc3fc61b46 100644
--- a/test.ini
+++ b/test.ini
@@ -32,7 +32,7 @@ debexpo.upload.incoming = /tmp/debexpo/incoming/
 debexpo.repository = /tmp/debexpo/files/
 
 # Path to importer script
-debexpo.importer = %(here)s/bin/debexpo-importer
+debexpo.importer = %(here)s/bin/debexpo_importer.py
 
 # Whether to let debexpo handle the /debian/ directory
 debexpo.handle_debian = true
@@ -107,6 +107,9 @@ debexpo.nntp_server = news.gmane.org
 # Enable experimental and/or broken code
 debexpo.enable_experimental_code = true
 
+# In testing mode, do not use a real smtp
+debexpo.testsmtp = /tmp/debexpo-testing.mbox
+
 # Logging configuration
 [loggers]
 keys = root, debexpo