On my environment the packages are created by running 'debuild -b' and uploaded to the debian repository with dput. The debuild step is telling me that the package has been signed so should be cool. I have my keys generated with gpg, it's asking for the passphrase, no problem here I guess.
The debian repository has mini-dinstall running as daemon.
Now when I'm installing the new package from the repository server and I got the 'signature could not be verified' warning. Where is the missing/wrong step(s) and what are the best practices to sign the deb packages?