You are not logged in.

#1 2015-03-05 01:04:58

gillecaluim
Member
Registered: 2014-11-02
Posts: 42

PGP signatures could not be verified

I'm still somewhat new on using makepkg.  I previously customized the bind pkg for samba by copying the /var/abs/extra/bind directory into my /var/abs/local and adding a couple of build options. Worked like a charm and no issues.
Today bind 9.10.2 was released and I wanted to update my package but I get:
ERROR: One or more PGP signatures could not be verified! when updating using the latest abs bind package.

==> Making package: bind 9.10.2-1 (Wed Mar  4 16:47:20 PST 2015)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading bind-9.10.2.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 8282k  100 8282k    0     0  5669k      0  0:00:01  0:00:01 --:--:-- 5672k
  -> Downloading bind-9.10.2.tar.gz.asc...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   490  100   490    0     0   6640      0 --:--:-- --:--:-- --:--:--  6712
  -> Found tmpfiles.conf
  -> Found sysusers.conf
  -> Found named.conf
  -> Found named.service
  -> Found localhost.zone
  -> Found localhost.ip6.zone
  -> Found 127.0.0.zone
  -> Found empty.zone
==> Validating source files with sha1sums...
    bind-9.10.2.tar.gz ... Passed
    bind-9.10.2.tar.gz.asc ... Skipped
    tmpfiles.conf ... Passed
    sysusers.conf ... Passed
    named.conf ... Passed
    named.service ... Passed
    localhost.zone ... Passed
    localhost.ip6.zone ... Passed
    127.0.0.zone ... Passed
    empty.zone ... Passed
==> Verifying source file signatures with gpg...
    bind-9.10.2.tar.gz ... FAILED
==> ERROR: One or more PGP signatures could not be verified!

this is the abs bind package....why is it failing?

Offline

#2 2015-03-05 01:59:53

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: PGP signatures could not be verified

Worked for me.
See the PKGBUILD for validpgpkeys .

http://allanmcrae.com/2015/01/two-pgp-k … rch-linux/

Offline

#3 2015-03-05 02:11:02

gillecaluim
Member
Registered: 2014-11-02
Posts: 42

Re: PGP signatures could not be verified

I didn't have to do anything the first time....I guess that was before the update to makepkg 4.2.

Offline

#4 2015-03-17 01:53:21

mariojuniorjp
Member
Registered: 2014-07-06
Posts: 16

Re: PGP signatures could not be verified

Same error here.

==> Validando arquivos fonte com sha256sums...
    firefox-36.0.1.source.tar.bz2 ... Passou
    firefox-36.0.1.source.tar.bz2.asc ... Ignorada
    mozconfig ... Passou
    firefox.desktop ... Passou
    firefox-install-dir.patch ... Passou
    vendor.js ... Passou
    rhbz-966424.patch ... Passou
    firefox-fixed-loading-icon.png ... Passou
==> Verificando assinatura de arquivo fonte com gpg...
    firefox-36.0.1.source.tar.bz2 ... FALHOU (chave pública desconhecida 057CC3EB15A0A4BC)
==> ERRO: Uma ou mais assinaturas PGP não puderam ser verificadas!

I have checked (http://allanmcrae.com/2015/01/two-pgp-k … rch-linux/) but to no avail.

I do not understand why complicate things when they are working perfectly how it worked before...

Offline

#5 2015-03-17 05:36:05

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,461

Re: PGP signatures could not be verified

mariojuniorjp wrote:

I do not understand why complicate things when they are working perfectly how it worked before...

Because they weren't working perfectly. For the most part, they weren't working at all.

The linked blog post explains everything pretty plainly. If you have specific questions about it, ask.

Offline

#6 2015-03-17 21:00:48

karol
Archivist
Registered: 2009-05-06
Posts: 25,440

Re: PGP signatures could not be verified

Next time please run

LC_ALL=C <command>

to get the output in English.

Offline

Board footer

Powered by FluxBB