From 62dbf57026e7e995546620cd7e98f9701357af1d Mon Sep 17 00:00:00 2001
From: Stan Ulbrych <stan@python.org>
Date: Sat, 12 Sep 2026 13:12:15 +0100
Subject: [PATCH] Switch keyserver to pick up refreshed key for GPG
 verification

---
 update.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/update.py b/update.py
index d11773a..3f6aca7 100644
--- a/update.py
+++ b/update.py
@@ -64,7 +64,7 @@ def download_tzdb_tarballs(
     # Verify tarballs
     gpg_home = tempfile.TemporaryDirectory()
     gpg = gnupg.GPG(gnupghome=gpg_home.name)
-    gpg.recv_keys("hkps://keyserver.ubuntu.com", "ed97e90e62aa7e34")
+    gpg.recv_keys("hkps://keys.openpgp.org", "ed97e90e62aa7e34")
 
     for tar, asc in [(tzdata_file, tzdata_file_asc), (tzcode_file, tzcode_file_asc)]:
         tar_path = target_dir / tar
@@ -78,7 +78,9 @@ def download_tzdb_tarballs(
         with open(sig_path, "rb") as f:
             check = gpg.verify_file(f, str(tar_path))
         if not check.valid:
-            raise RuntimeError(f"signature verification failed for {tar_path}")
+            raise RuntimeError(
+                f"signature verification failed for {tar_path}: {check.status}"
+            )
 
     return download_locations