You are not logged in.

#1 2016-10-09 10:33:20

tempin
Member
Registered: 2013-10-06
Posts: 10

PGP signature does not work at all

Hi all,

I need to download so called lib32-ncurses5-compat-libs 5.0-4: https://aur.archlinux.org/packages/lib3 … mpat-libs/

$ yaourt lib32-ncurses5-compat-libs

It ends with error: one or more pgp signatures could not be verified

Guys wrote in the comments:

Do: $ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB. It does not help.
or do: $ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB. It does not help.
or do: $ gpg --recv-keys 702353E0F7E48EDB. It does not help.

I also set "SigLevel = TrustAll" or "SigLevel = Never". It does not help.

And also set: $sudo pacman-key --recv-key 702353E0F7E48EDB. It does not help.

This package is required for installation of another package for FPGA synthesis. As I understand this guy that developed this package didn't set up the key, so everything stop working. All I want is to remove all package protection and install packages I need. I have a lot of PCs around me, so its ok if I will download virtus from AUR.

Thank you

Offline

#2 2016-10-09 10:42:52

basica
Member
From: Australia
Registered: 2012-10-31
Posts: 217

Re: PGP signature does not work at all

When you say those commands don't work, what do you mean? Which errors are you getting exactly? Post the output. Use the code tags. When you're running those commands, are you removing the $ symbol from the front of them? Please don't change the siglevels either as they're not related to your issue.

Offline

#3 2016-10-09 10:45:12

tempin
Member
Registered: 2013-10-06
Posts: 10

Re: PGP signature does not work at all

I have also red https://wiki.archlinux.org/index.php/Pa … ge_signing and http://allanmcrae.com/2015/01/two-pgp-k … rch-linux/

It says that there is some cryptography algorithms that crypts packages. I want to disable it. So I dont want to see error "one or more pgp signatures could not be verified" and just install lib32-ncurses5-compat-libs 5.0-4

Sure I remove $. Just a second.

Last edited by tempin (2016-10-09 10:45:58)

Offline

#4 2016-10-09 10:54:39

tempin
Member
Registered: 2013-10-06
Posts: 10

Re: PGP signature does not work at all

Thanks a lot for help. Sorry for my leak of knowledge regarding this issue. The output is:

sudo gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB

gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" does not change
gpg: Total processed: 1
gpg:                   Unchanged: 1

sudo gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB

gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" does not change
gpg: Total processed: 1
gpg:                   Unchanged: 1

sudo gpg --recv-keys 702353E0F7E48EDB

gpg: Key server is not available

sudo pacman-key --recv-key 702353E0F7E48EDB

gpg: 702353E0F7E48EDB key: "Thomas Dickey <dickey@invisible-island.net>" not changed
gpg: Total processed: 1
gpg: unchanged: 1
==> Update Table of trust ...
gpg: checking the next term credibility of the table 10.19.2016



yaourt lib32-ncurses5

1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,20)
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==> 1


==> Downloading PKGBUILD lib32-ncurses5-compat-libs from AUR...
x .SRCINFO
x PKGBUILD
Corax commented on 2016-08-19 23:33
If anyone is still having trouble getting used to PGP signing, make sure to add the key mentioned in the PKGBUILD:
$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB

zephrax commented on 2016-08-22 19:38
If anyone is having problems when downloading the ncurses 6.0 sources (because the mirror is down). Try changing the PKGBUILD source line from:

source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})

to:

source=(http://invisible-mirror.net/archives/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})

It's an official mirror and it worked for me.

Corax commented on 2016-08-22 20:49
Thanks for the tip zephrax, I haven't encountered any problem downloading from the FTP source, but if other people encounter the same issue that can prove useful.

I'm keeping the FTP source in the PKGBUILD, at least for now, simply because this is the one used in the ncurses [1] and lib32-ncurses [2] packages.

[1] https://git.archlinux.org/svntogit/pack … es/ncurses
[2] https://git.archlinux.org/svntogit/comm … 32-ncurses

krompus commented on 2016-09-29 06:16
I just tried adding the keys as mentioned below, but I got "no keyserver available". Likely something to do with my ~/.gnupg/gpg/conf but oh well.

If you get the same thing, try this:

$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB

Corax commented on 2016-09-29 18:32
@krompus Ah yes good point, I have "keyserver pool.sks-keyservers.net" in my ~/.gnupg/gpg.conf so I didn't need to pass --keyserver explicitly. I'll modify the pinned comment, thanks smile

lib32-ncurses5-compat-libs 6.0-4 (2016-07-07 23:34)
( Unsupported package: Potentially dangerous ! )
==> Edit PKGBUILD ? Yes/no [Y/n] ("A" to cancel)
==> --------------------------------------------------------
==> n

==> dependencies lib32-ncurses5-compat-libs:
- lib32-glibc (already installed)
- lib32-ncurses (already installed)
gcc-multilib (already installed) [makedepend]


==> Continue to build lib32-ncurses5-compat-libs ? Yes/no [Y/n]
==> -----------------------------------------------------------
==> y

==> Building and installing package
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 12:54:35 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 296k 0 0:00:10 0:00:10 --:--:-- 436k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 69 0 0:00:03 0:00:03 --:--:-- 69
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ...
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to collect lib32-ncurses5-compat-libs.

Offline

#5 2016-10-09 10:59:07

basica
Member
From: Australia
Registered: 2012-10-31
Posts: 217

Re: PGP signature does not work at all

The pgp keys you're looking to "receive" are done on a per user basis. By using sudo, you're placing them with root, instead of your user. This is a problem as you run makepkg as a local, not a root user. In other words, you want to run gpg without sudo and try again. You're receiving the keys fine, it's just they're with the wrong user at the moment.

Please place that content into code tags as well please, it makes it easier to read.

Offline

#6 2016-10-09 11:19:53

tempin
Member
Registered: 2013-10-06
Posts: 10

Re: PGP signature does not work at all

Tried gpg's command with both key servers and run yaourt again. Same issue. Any other ideas? It is so strange because keys seem to be received.

[tempin ~]$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB

gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1

[tempin ~]$ yaourt lib32-ncurses5

1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,20)
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==> 1


==> Downloading PKGBUILD lib32-ncurses5-compat-libs from AUR...
x .SRCINFO
x PKGBUILD
Corax commented on 2016-08-19 23:33 
If anyone is still having trouble getting used to PGP signing, make sure to add the key mentioned in the PKGBUILD:
$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB

zephrax commented on 2016-08-22 19:38 
If anyone is having problems when downloading the ncurses 6.0 sources (because the mirror is down). Try changing the PKGBUILD source line from:

source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})

to:

source=(http://invisible-mirror.net/archives/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})

It's an official mirror and it worked for me. 

Corax commented on 2016-08-22 20:49 
Thanks for the tip zephrax, I haven't encountered any problem downloading from the FTP source, but if other people encounter the same issue that can prove useful. 

I'm keeping the FTP source in the PKGBUILD, at least for now, simply because this is the one used in the ncurses [1] and lib32-ncurses [2] packages. 

[1] https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/ncurses 
[2] https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/lib32-ncurses 

krompus commented on 2016-09-29 06:16 
I just tried adding the keys as mentioned below, but I got "no keyserver available". Likely something to do with my ~/.gnupg/gpg/conf but oh well. 

If you get the same thing, try this: 

$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB 

Corax commented on 2016-09-29 18:32 
@krompus Ah yes good point, I have "keyserver pool.sks-keyservers.net" in my ~/.gnupg/gpg.conf so I didn't need to pass --keyserver explicitly. I'll modify the pinned comment, thanks :) 

lib32-ncurses5-compat-libs 6.0-4 (2016-07-07 23:34) 
( Unsupported package: Potentially dangerous ! ) 
==> Edit PKGBUILD ? Yes/no [Y/n] ("A" to cancel) 
==> -------------------------------------------------------- 
==> n 

==> dependencies lib32-ncurses5-compat-libs: 
- lib32-glibc (already installed) 
- lib32-ncurses (already installed)
gcc-multilib (already installed) [makedepend]


==> Continue to build lib32-ncurses5-compat-libs ? Yes/no [Y/n]
==> -----------------------------------------------------------
==> y

==> Building and installing package
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 13:13:26 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 347k 0 0:00:08 0:00:08 --:--:-- 471k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 94 0 0:00:02 0:00:02 --:--:-- 94
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ... 
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to collect lib32-ncurses5-compat-libs.

Another key server:

[tempin ~]$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB

gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1

[tempin ~]$ yaourt lib32-ncurses5

1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,20)
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==> 1


==> Downloading PKGBUILD lib32-ncurses5-compat-libs from AUR...
x .SRCINFO
x PKGBUILD
Corax commented on 2016-08-19 23:33 
If anyone is still having trouble getting used to PGP signing, make sure to add the key mentioned in the PKGBUILD:
$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB

zephrax commented on 2016-08-22 19:38 
If anyone is having problems when downloading the ncurses 6.0 sources (because the mirror is down). Try changing the PKGBUILD source line from:

source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})

to:

source=(http://invisible-mirror.net/archives/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})

It's an official mirror and it worked for me.

Corax commented on 2016-08-22 20:49 
Thanks for the tip zephrax, I haven't encountered any problem downloading from the FTP source, but if other people encounter the same issue that can prove useful.

I'm keeping the FTP source in the PKGBUILD, at least for now, simply because this is the one used in the ncurses [1] and lib32-ncurses [2] packages.

[1] https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/ncurses
[2] https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/lib32-ncurses

krompus commented on 2016-09-29 06:16 
I just tried adding the keys as mentioned below, but I got "no keyserver available". Likely something to do with my ~/.gnupg/gpg/conf but oh well.

If you get the same thing, try this:

$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB

Corax commented on 2016-09-29 18:32 
@krompus Ah yes good point, I have "keyserver pool.sks-keyservers.net" in my ~/.gnupg/gpg.conf so I didn't need to pass --keyserver explicitly. I'll modify the pinned comment, thanks :)

lib32-ncurses5-compat-libs 6.0-4 (2016-07-07 23:34)
( Unsupported package: Potentially dangerous ! )
==> Edit PKGBUILD ? Yes/no [Y/n] ("A" to cancel)
==> --------------------------------------------------------
==> n

==> dependencies lib32-ncurses5-compat-libs:
- lib32-glibc (already installed)
- lib32-ncurses (already installed)
gcc-multilib (already installed) [makedepend]


==> Continue to build lib32-ncurses5-compat-libs ? Yes/no [Y/n]
==> -----------------------------------------------------------
==> y

==> Building and installing package
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 13:17:08 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 323k 0 0:00:09 0:00:09 --:--:-- 348k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 69 0 0:00:03 0:00:03 --:--:-- 69
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ... 
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to collect lib32-ncurses5-compat-libs.

Offline

#7 2016-10-09 11:38:24

basica
Member
From: Australia
Registered: 2012-10-31
Posts: 217

Re: PGP signature does not work at all

I just noticed you're using yaourt, this is known to have issues. Have you tried compiling the package manually from the AUR? I downloaded the PKGBUILD myself and I was begin the build process (cancelled afterwards as I don't need it).

Offline

#8 2016-10-09 12:12:57

tempin
Member
Registered: 2013-10-06
Posts: 10

Re: PGP signature does not work at all

Does not work, it still requires keys. I have used "makepkg --skippgpcheck" and it starts building.

[tempin ~/ncurses_tmp]$ ls

PKGBUILD

[tempin ~/ncurses_tmp]$ cat PKGBUILD

# Maintainer: Kevin Brodsky <corax26 at gmail dot com>

_pkgbasename=ncurses
pkgname=lib32-${_pkgbasename}5-compat-libs
pkgver=6.0
pkgrel=4
pkgdesc="System V Release 4.0 curses emulation library (32-bit), ABI 5"
arch=('x86_64')
url='http://invisible-island.net/ncurses/ncurses.html'
license=('MIT')
depends=('lib32-glibc' "lib32-${_pkgbasename}")
makedepends=("gcc-multilib")
provides=('lib32-libtinfo5')
conflicts=('lib32-libtinfo5')
source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
md5sums=('ee13d052e1ead260d7c28071f46eefb1'
         'SKIP')
validpgpkeys=('C52048C0C0748FEE227D47A2702353E0F7E48EDB') # Thomas Dickey

build() {
  cd ${_pkgbasename}-${pkgver}

  export CC="gcc -m32"
  export CXX="g++ -m32"

  ./configure --prefix=/usr --mandir=/usr/share/man \
     --with-shared --with-normal --without-debug --without-ada \
     --with-install-prefix=${pkgdir} --enable-widec --libdir=/usr/lib32 \
     --enable-ext-colors --enable-ext-mouse \
     --with-abi-version=5 --without-pkg-config --without-gpm
   make
}

package() {
  cd ${_pkgbasename}-${pkgver}
  make install.libs

  install -dm755 ${pkgdir}/usr/lib32

  # fool packages looking to link to non-wide-character ncurses libraries
  for lib in ncurses form panel menu; do
    ln -s lib${lib}w.so.5 "$pkgdir"/usr/lib32/lib${lib}.so.5
  done
  # Also provide a libtinfo symlink
  ln -s libncurses.so.5 "$pkgdir/usr/lib32/libtinfo.so.5"

  # Remove .so symlinks and static libraries (conflicting with lib32-ncurses)
  rm -f "${pkgdir}"/usr/{lib32/*.so,lib32/*.a}

  rm -rf "${pkgdir}"/usr/{include,share,bin}
  mkdir -p "$pkgdir/usr/share/licenses"
  ln -s $_pkgbasename "$pkgdir/usr/share/licenses/$pkgname"
}

# vim: set et ts=2 sw=2: 

[tempin ~/ncurses_tmp]$ makepkg

==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 13:57:56 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 309k 0 0:00:09 0:00:09 --:--:-- 434k
-> Download ncurses-6.0.tar.gz.asc...
 % Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 146 0 0:00:01 0:00:01 --:--:-- 146
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ... 
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified! 

[tempin ~/ncurses_tmp]$ makepkg --skippgpcheck

 building! 
...
...
==> Clean up...
-> Removing libtool files...
-> Removing unneeded files...
-> Removing static libraries...
-> Remove debug information from binaries and libraries...
-> Compressing documentation (man and info)...
==> Checking for packaging issue...
==> Creating package "lib32-ncurses5-compat-libs"...
-> Create file '.PKGINFO'...
-> Create file '.BUILDINFO'...
-> Create file '.MTREE'...
-> Compressing package...
==> Exit the fakeroot environment.
==> Finished build of lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 14:03:35 MSK 2016)

But when I check that package system verify that the package is already installed, it says that is not:

[tempin ~/ncurses_tmp]$ yaourt lib32-ncurses5
1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,19)  <IT SHOULD BE INSTALLED BUT IT DOES NOT>
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==>

Then I told yaourt to install the package:

[tempin ~/ncurses_tmp]$ ls

lib32-ncurses5-compat-libs-6.0-4-x86_64.pkg.tar.xz ncurses-6.0.tar.gz ncurses-6.0.tar.gz.asc pkg PKGBUILD src

[tempin ~/ncurses_tmp]$ yaourt -U lib32-ncurses5-compat-libs-6.0-4-x86_64.pkg.tar.xz

[sudo] password for tempin: 
download packages...
resolving dependencies...
conflict checks...

Packages (1) lib32-ncurses5-compat-libs-6.0-4

Will be installed: 0,52 MiB

:: Proceed with installation? [Y/n] y
(1/1) checking keys [#######################################] 100%
(1/1) checks the integrity of the package [#######################################] 100%
(1/1) loading package files [#######################################] 100%
(1/1) checking file conflicts [#######################################] 100%
(1/1) checks the available space [#######################################] 100%
:: Processing package changes...
(1/1) installing lib32-ncurses5-compat-libs [#######################################] 100%

I suppose issue is resolved with the help of basica. Thank you a lot!

Offline

#9 2016-10-09 13:44:36

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,463

Re: PGP signature does not work at all

CRASHING??? What happens if you try to verify the signature directly with gpg?

Offline

#10 2016-10-09 14:49:38

eschwartz
Fellow
Registered: 2014-08-08
Posts: 4,097

Re: PGP signature does not work at all

The error message "CRASHING" isn't even in the makepkg source...


Managing AUR repos The Right Way -- aurpublish (now a standalone tool)

Offline

#11 2016-10-09 18:06:40

tempin
Member
Registered: 2013-10-06
Posts: 10

Re: PGP signature does not work at all

Sorry guys, all my logs are not in English so I use translator to prepare them for you. Indeed the word "crashing" was not translated correctly.

Anyway, that's not what actually should be thought about. gpg not working, because yaourt still requires signature. I am able to prepare the package manually, but it is very strange, why yaourt ignore all gpg commands and drops on signature verification (as I've described).

What happens if you try to verify the signature directly with gpg?
Can you please provide more details: how to do it directly?

Offline

#12 2016-10-09 18:09:23

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,463

Re: PGP signature does not work at all

To make your output in English, prefix any commands with LC_ALL=C.

For verifying a signature, see https://wiki.archlinux.org/index.php/Gn … _signature

Offline

Board footer

Powered by FluxBB