You are not logged in.
Hi all,
I need to download so called lib32-ncurses5-compat-libs 5.0-4: https://aur.archlinux.org/packages/lib3 … mpat-libs/
$ yaourt lib32-ncurses5-compat-libs
It ends with error: one or more pgp signatures could not be verified
Guys wrote in the comments:
Do: $ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB. It does not help.
or do: $ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB. It does not help.
or do: $ gpg --recv-keys 702353E0F7E48EDB. It does not help.
I also set "SigLevel = TrustAll" or "SigLevel = Never". It does not help.
And also set: $sudo pacman-key --recv-key 702353E0F7E48EDB. It does not help.
This package is required for installation of another package for FPGA synthesis. As I understand this guy that developed this package didn't set up the key, so everything stop working. All I want is to remove all package protection and install packages I need. I have a lot of PCs around me, so its ok if I will download virtus from AUR.
Thank you
Offline
When you say those commands don't work, what do you mean? Which errors are you getting exactly? Post the output. Use the code tags. When you're running those commands, are you removing the $ symbol from the front of them? Please don't change the siglevels either as they're not related to your issue.
Offline
I have also red https://wiki.archlinux.org/index.php/Pa … ge_signing and http://allanmcrae.com/2015/01/two-pgp-k … rch-linux/
It says that there is some cryptography algorithms that crypts packages. I want to disable it. So I dont want to see error "one or more pgp signatures could not be verified" and just install lib32-ncurses5-compat-libs 5.0-4
Sure I remove $. Just a second.
Last edited by tempin (2016-10-09 10:45:58)
Offline
Thanks a lot for help. Sorry for my leak of knowledge regarding this issue. The output is:
sudo gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB
gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" does not change
gpg: Total processed: 1
gpg: Unchanged: 1
sudo gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB
gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" does not change
gpg: Total processed: 1
gpg: Unchanged: 1
sudo gpg --recv-keys 702353E0F7E48EDB
gpg: Key server is not available
sudo pacman-key --recv-key 702353E0F7E48EDB
gpg: 702353E0F7E48EDB key: "Thomas Dickey <dickey@invisible-island.net>" not changed
gpg: Total processed: 1
gpg: unchanged: 1
==> Update Table of trust ...
gpg: checking the next term credibility of the table 10.19.2016
yaourt lib32-ncurses5
1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,20)
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==> 1
==> Downloading PKGBUILD lib32-ncurses5-compat-libs from AUR...
x .SRCINFO
x PKGBUILD
Corax commented on 2016-08-19 23:33
If anyone is still having trouble getting used to PGP signing, make sure to add the key mentioned in the PKGBUILD:
$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB
zephrax commented on 2016-08-22 19:38
If anyone is having problems when downloading the ncurses 6.0 sources (because the mirror is down). Try changing the PKGBUILD source line from:
source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
to:
source=(http://invisible-mirror.net/archives/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
It's an official mirror and it worked for me.
Corax commented on 2016-08-22 20:49
Thanks for the tip zephrax, I haven't encountered any problem downloading from the FTP source, but if other people encounter the same issue that can prove useful.
I'm keeping the FTP source in the PKGBUILD, at least for now, simply because this is the one used in the ncurses [1] and lib32-ncurses [2] packages.
[1] https://git.archlinux.org/svntogit/pack … es/ncurses
[2] https://git.archlinux.org/svntogit/comm … 32-ncurses
krompus commented on 2016-09-29 06:16
I just tried adding the keys as mentioned below, but I got "no keyserver available". Likely something to do with my ~/.gnupg/gpg/conf but oh well.
If you get the same thing, try this:
$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB
Corax commented on 2016-09-29 18:32
@krompus Ah yes good point, I have "keyserver pool.sks-keyservers.net" in my ~/.gnupg/gpg.conf so I didn't need to pass --keyserver explicitly. I'll modify the pinned comment, thanks
lib32-ncurses5-compat-libs 6.0-4 (2016-07-07 23:34)
( Unsupported package: Potentially dangerous ! )
==> Edit PKGBUILD ? Yes/no [Y/n] ("A" to cancel)
==> --------------------------------------------------------
==> n
==> dependencies lib32-ncurses5-compat-libs:
- lib32-glibc (already installed)
- lib32-ncurses (already installed)
gcc-multilib (already installed) [makedepend]
==> Continue to build lib32-ncurses5-compat-libs ? Yes/no [Y/n]
==> -----------------------------------------------------------
==> y
==> Building and installing package
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 12:54:35 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 296k 0 0:00:10 0:00:10 --:--:-- 436k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 69 0 0:00:03 0:00:03 --:--:-- 69
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ...
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to collect lib32-ncurses5-compat-libs.
Offline
The pgp keys you're looking to "receive" are done on a per user basis. By using sudo, you're placing them with root, instead of your user. This is a problem as you run makepkg as a local, not a root user. In other words, you want to run gpg without sudo and try again. You're receiving the keys fine, it's just they're with the wrong user at the moment.
Please place that content into code tags as well please, it makes it easier to read.
Offline
Tried gpg's command with both key servers and run yaourt again. Same issue. Any other ideas? It is so strange because keys seem to be received.
[tempin ~]$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB
gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
[tempin ~]$ yaourt lib32-ncurses5
1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,20)
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==> 1
==> Downloading PKGBUILD lib32-ncurses5-compat-libs from AUR...
x .SRCINFO
x PKGBUILD
Corax commented on 2016-08-19 23:33
If anyone is still having trouble getting used to PGP signing, make sure to add the key mentioned in the PKGBUILD:
$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB
zephrax commented on 2016-08-22 19:38
If anyone is having problems when downloading the ncurses 6.0 sources (because the mirror is down). Try changing the PKGBUILD source line from:
source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
to:
source=(http://invisible-mirror.net/archives/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
It's an official mirror and it worked for me.
Corax commented on 2016-08-22 20:49
Thanks for the tip zephrax, I haven't encountered any problem downloading from the FTP source, but if other people encounter the same issue that can prove useful.
I'm keeping the FTP source in the PKGBUILD, at least for now, simply because this is the one used in the ncurses [1] and lib32-ncurses [2] packages.
[1] https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/ncurses
[2] https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/lib32-ncurses
krompus commented on 2016-09-29 06:16
I just tried adding the keys as mentioned below, but I got "no keyserver available". Likely something to do with my ~/.gnupg/gpg/conf but oh well.
If you get the same thing, try this:
$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB
Corax commented on 2016-09-29 18:32
@krompus Ah yes good point, I have "keyserver pool.sks-keyservers.net" in my ~/.gnupg/gpg.conf so I didn't need to pass --keyserver explicitly. I'll modify the pinned comment, thanks :)
lib32-ncurses5-compat-libs 6.0-4 (2016-07-07 23:34)
( Unsupported package: Potentially dangerous ! )
==> Edit PKGBUILD ? Yes/no [Y/n] ("A" to cancel)
==> --------------------------------------------------------
==> n
==> dependencies lib32-ncurses5-compat-libs:
- lib32-glibc (already installed)
- lib32-ncurses (already installed)
gcc-multilib (already installed) [makedepend]
==> Continue to build lib32-ncurses5-compat-libs ? Yes/no [Y/n]
==> -----------------------------------------------------------
==> y
==> Building and installing package
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 13:13:26 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 347k 0 0:00:08 0:00:08 --:--:-- 471k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 94 0 0:00:02 0:00:02 --:--:-- 94
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ...
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to collect lib32-ncurses5-compat-libs.
Another key server:
[tempin ~]$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB
gpg: key 702353E0F7E48EDB: "Thomas Dickey <dickey@invisible-island.net>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
[tempin ~]$ yaourt lib32-ncurses5
1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,20)
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==> 1
==> Downloading PKGBUILD lib32-ncurses5-compat-libs from AUR...
x .SRCINFO
x PKGBUILD
Corax commented on 2016-08-19 23:33
If anyone is still having trouble getting used to PGP signing, make sure to add the key mentioned in the PKGBUILD:
$ gpg --keyserver pool.sks-keyservers.net --recv-keys 702353E0F7E48EDB
zephrax commented on 2016-08-22 19:38
If anyone is having problems when downloading the ncurses 6.0 sources (because the mirror is down). Try changing the PKGBUILD source line from:
source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
to:
source=(http://invisible-mirror.net/archives/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
It's an official mirror and it worked for me.
Corax commented on 2016-08-22 20:49
Thanks for the tip zephrax, I haven't encountered any problem downloading from the FTP source, but if other people encounter the same issue that can prove useful.
I'm keeping the FTP source in the PKGBUILD, at least for now, simply because this is the one used in the ncurses [1] and lib32-ncurses [2] packages.
[1] https://git.archlinux.org/svntogit/packages.git/tree/trunk/PKGBUILD?h=packages/ncurses
[2] https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/lib32-ncurses
krompus commented on 2016-09-29 06:16
I just tried adding the keys as mentioned below, but I got "no keyserver available". Likely something to do with my ~/.gnupg/gpg/conf but oh well.
If you get the same thing, try this:
$ gpg --keyserver keys.gnupg.net --recv-keys 702353E0F7E48EDB
Corax commented on 2016-09-29 18:32
@krompus Ah yes good point, I have "keyserver pool.sks-keyservers.net" in my ~/.gnupg/gpg.conf so I didn't need to pass --keyserver explicitly. I'll modify the pinned comment, thanks :)
lib32-ncurses5-compat-libs 6.0-4 (2016-07-07 23:34)
( Unsupported package: Potentially dangerous ! )
==> Edit PKGBUILD ? Yes/no [Y/n] ("A" to cancel)
==> --------------------------------------------------------
==> n
==> dependencies lib32-ncurses5-compat-libs:
- lib32-glibc (already installed)
- lib32-ncurses (already installed)
gcc-multilib (already installed) [makedepend]
==> Continue to build lib32-ncurses5-compat-libs ? Yes/no [Y/n]
==> -----------------------------------------------------------
==> y
==> Building and installing package
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 13:17:08 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 323k 0 0:00:09 0:00:09 --:--:-- 348k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 69 0 0:00:03 0:00:03 --:--:-- 69
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ...
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to collect lib32-ncurses5-compat-libs.
Offline
I just noticed you're using yaourt, this is known to have issues. Have you tried compiling the package manually from the AUR? I downloaded the PKGBUILD myself and I was begin the build process (cancelled afterwards as I don't need it).
Offline
Does not work, it still requires keys. I have used "makepkg --skippgpcheck" and it starts building.
[tempin ~/ncurses_tmp]$ ls
PKGBUILD
[tempin ~/ncurses_tmp]$ cat PKGBUILD
# Maintainer: Kevin Brodsky <corax26 at gmail dot com>
_pkgbasename=ncurses
pkgname=lib32-${_pkgbasename}5-compat-libs
pkgver=6.0
pkgrel=4
pkgdesc="System V Release 4.0 curses emulation library (32-bit), ABI 5"
arch=('x86_64')
url='http://invisible-island.net/ncurses/ncurses.html'
license=('MIT')
depends=('lib32-glibc' "lib32-${_pkgbasename}")
makedepends=("gcc-multilib")
provides=('lib32-libtinfo5')
conflicts=('lib32-libtinfo5')
source=(ftp://invisible-island.net/${_pkgbasename}/${_pkgbasename}-${pkgver}.tar.gz{,.asc})
md5sums=('ee13d052e1ead260d7c28071f46eefb1'
'SKIP')
validpgpkeys=('C52048C0C0748FEE227D47A2702353E0F7E48EDB') # Thomas Dickey
build() {
cd ${_pkgbasename}-${pkgver}
export CC="gcc -m32"
export CXX="g++ -m32"
./configure --prefix=/usr --mandir=/usr/share/man \
--with-shared --with-normal --without-debug --without-ada \
--with-install-prefix=${pkgdir} --enable-widec --libdir=/usr/lib32 \
--enable-ext-colors --enable-ext-mouse \
--with-abi-version=5 --without-pkg-config --without-gpm
make
}
package() {
cd ${_pkgbasename}-${pkgver}
make install.libs
install -dm755 ${pkgdir}/usr/lib32
# fool packages looking to link to non-wide-character ncurses libraries
for lib in ncurses form panel menu; do
ln -s lib${lib}w.so.5 "$pkgdir"/usr/lib32/lib${lib}.so.5
done
# Also provide a libtinfo symlink
ln -s libncurses.so.5 "$pkgdir/usr/lib32/libtinfo.so.5"
# Remove .so symlinks and static libraries (conflicting with lib32-ncurses)
rm -f "${pkgdir}"/usr/{lib32/*.so,lib32/*.a}
rm -rf "${pkgdir}"/usr/{include,share,bin}
mkdir -p "$pkgdir/usr/share/licenses"
ln -s $_pkgbasename "$pkgdir/usr/share/licenses/$pkgname"
}
# vim: set et ts=2 sw=2:
[tempin ~/ncurses_tmp]$ makepkg
==> Building the package lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 13:57:56 MSK 2016)
==> Check dependencies to run...
==> Check dependencies to build...
==> Get source files...
-> Download ncurses-6.0.tar.gz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
3058k 3058k 100 100 0 0 309k 0 0:00:09 0:00:09 --:--:-- 434k
-> Download ncurses-6.0.tar.gz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 146 0 0:00:01 0:00:01 --:--:-- 146
==> Check source files using md5sums...
ncurses-6.0.tar.gz ... Ready
ncurses-6.0.tar.gz.asc is Missing ...
==> Check signatures of source files using the 'gpg'...
ncurses-6.0.tar.gz ... CRASHING
==> ERROR: One or more PGP signatures could not be verified!
[tempin ~/ncurses_tmp]$ makepkg --skippgpcheck
building!
...
...
==> Clean up...
-> Removing libtool files...
-> Removing unneeded files...
-> Removing static libraries...
-> Remove debug information from binaries and libraries...
-> Compressing documentation (man and info)...
==> Checking for packaging issue...
==> Creating package "lib32-ncurses5-compat-libs"...
-> Create file '.PKGINFO'...
-> Create file '.BUILDINFO'...
-> Create file '.MTREE'...
-> Compressing package...
==> Exit the fakeroot environment.
==> Finished build of lib32-ncurses5-compat-libs 6.0-4 (Sun Oct 9 14:03:35 MSK 2016)
But when I check that package system verify that the package is already installed, it says that is not:
[tempin ~/ncurses_tmp]$ yaourt lib32-ncurses5
1 aur/lib32-ncurses5-compat-libs 6.0-4 (37) (2,19) <IT SHOULD BE INSTALLED BUT IT DOES NOT>
System V Release 4.0 curses emulation library (32-bit), ABI 5
==> Enter the numbers of packages to install (for example: 1 2 3 or 1-3)
==> --------------------------------------------------------------
==>
Then I told yaourt to install the package:
[tempin ~/ncurses_tmp]$ ls
lib32-ncurses5-compat-libs-6.0-4-x86_64.pkg.tar.xz ncurses-6.0.tar.gz ncurses-6.0.tar.gz.asc pkg PKGBUILD src
[tempin ~/ncurses_tmp]$ yaourt -U lib32-ncurses5-compat-libs-6.0-4-x86_64.pkg.tar.xz
[sudo] password for tempin:
download packages...
resolving dependencies...
conflict checks...
Packages (1) lib32-ncurses5-compat-libs-6.0-4
Will be installed: 0,52 MiB
:: Proceed with installation? [Y/n] y
(1/1) checking keys [#######################################] 100%
(1/1) checks the integrity of the package [#######################################] 100%
(1/1) loading package files [#######################################] 100%
(1/1) checking file conflicts [#######################################] 100%
(1/1) checks the available space [#######################################] 100%
:: Processing package changes...
(1/1) installing lib32-ncurses5-compat-libs [#######################################] 100%
I suppose issue is resolved with the help of basica. Thank you a lot!
Offline
CRASHING??? What happens if you try to verify the signature directly with gpg?
Offline
The error message "CRASHING" isn't even in the makepkg source...
Managing AUR repos The Right Way -- aurpublish (now a standalone tool)
Offline
Sorry guys, all my logs are not in English so I use translator to prepare them for you. Indeed the word "crashing" was not translated correctly.
Anyway, that's not what actually should be thought about. gpg not working, because yaourt still requires signature. I am able to prepare the package manually, but it is very strange, why yaourt ignore all gpg commands and drops on signature verification (as I've described).
What happens if you try to verify the signature directly with gpg?
Can you please provide more details: how to do it directly?
Offline
To make your output in English, prefix any commands with LC_ALL=C.
For verifying a signature, see https://wiki.archlinux.org/index.php/Gn … _signature
Offline