You are not logged in.

Pages: 1

#1 2017-05-25 18:21:37

barlow
Member
Registered: 2017-05-25
Posts: 3

Endless Gpg Problem!

Hi, Arch Users.. I just registered to the forum. I have a big problem and i will explain... Imagine this; GPG isn't your running your Linux. More precisely, it does'nt function properly. I can't add the key in anyway.

İnstalling the python2-youtube-dl.. yaourt -S python2-youtube-dl

==> source ile sha256sums dosyası doğrulanıyor...
    youtube-dl-2017.01.22.tar.gz ... Doğrulandı
    youtube-dl-2017.01.22.tar.gz.sig ... Atlandı
==> Kaynak dosya imzaları gpg ile doğrulanıyor...
    youtube-dl-2017.01.22.tar.gz ... BAŞARISIZ (bilinmeyen kamu anahtarı 2C393E0F18A9236D)
==> HATA: Bir veya daha fazla PGP imzası doğrulanamıyor!
==> HATA:makepkg python2-youtube-dl'i inşa edemedi.
==> python2-youtube-dl yeniden inşa edilsin mi ? [e/H]

My Arch Linux language is turkish. If the error is not clear, problem is key!

Adding the key;

> gpg --recv-keys 2C393E0F18A9236D
gpg: keyserver receive failed: No such file or directory

On installing Spotify.. yaourt -S spotify

==> source ile sha256sums dosyası doğrulanıyor...
    curl-7.54.0.tar.gz ... Doğrulandı
    curl-7.54.0.tar.gz.asc ... Atlandı
==> Kaynak dosya imzaları gpg ile doğrulanıyor...
    curl-7.54.0.tar.gz ... BAŞARISIZ (bilinmeyen kamu anahtarı 5CC908FDB71E12C2)
==> HATA: Bir veya daha fazla PGP imzası doğrulanamıyor!
==> HATA:makepkg libcurl-openssl-1.0'i inşa edemedi.
==> libcurl-openssl-1.0 yeniden inşa edilsin mi ? [e/H]
==> ---------------------------------------------------

Adding the key:

> gpg --recv-keys 5CC908FDB71E12C2
gpg: keyserver receive failed: No such file or directory

curl -s https://blackarch.org/strap.sh | sudo sh

[+] installing blackarch keyring...
[-] ERROR: invalid keyring signature. please stop by irc.freenode.net/blackarch

The part of this error:
cat strap.sh

# verify the keyring signature
# note: this is pointless if you do not verify the key fingerprint
verify_keyring()
{
    gpg \
        --keyserver http://pgp.mit.edu \
        --recv-keys 4345771566D76038C7FEB43863EC0ADBEA87E4E3 > /dev/null 2>&1

    if ! gpg \
        --keyserver-options no-auto-key-retrieve \
        --with-fingerprint blackarch-keyring.pkg.tar.xz.sig > /dev/null 2>&1
    then
        err 'invalid keyring signature. please stop by irc.freenode.net/blackarch'
    fi
}

My english isn't vey good. I hope, I can tell you my problem.

Offline

#2 2017-05-25 18:44:27

ewaller
Administrator
From: Pasadena, CA
Registered: 2009-07-13
Posts: 19,772

Re: Endless Gpg Problem!

The key import works here using that exact command.
Don't use yaourt, it causes indigestion.
Also, please post program output in English using this technique: https://wiki.archlinux.org/index.php/Co … s_and_code

GPG isn't your running your Linux

Sorry, I cannot parse that.  Please explain.

Edit:  Also, we consider Blackarch to be a separate distribution.  After 

https://blackarch.org/strap.sh

We have no idea what has been done to your system.

Consider this, why would anyone who is interested in security, as demonstrated by an interest in Blackarch, think it is a good idea to run some random script from the internet as your root user?

Last edited by ewaller (2017-05-25 18:48:55)

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way

Offline

#3 2017-05-25 19:06:45

jasonwryan
Anarchist
From: .nz
Registered: 2009-05-09
Posts: 30,424
Website

Re: Endless Gpg Problem!

barlow wrote:
curl -s [url]https://blackarch.org/strap.sh[/url] | sudo sh

roll

Arch + dwm   •   Mercurial repos  •   Surfraw

Registered Linux User #482438

Offline

#4 2017-05-25 21:04:03

barlow
Member
Registered: 2017-05-25
Posts: 3

Re: Endless Gpg Problem!

Thank you for the answers.

In general, you've criticized me over BlackArch. I would state that; I've just set up the blackarch repository for trial purposes. I have not been able to do anything against key errors in arch linux for about 2 months. I am constantly getting the error gpg: keyserver receive failed: No such file or directory... In this case, I will briefly explain the problem.

yaourt -S python2-youtube-dl

==> Downloading python2-youtube-dl PKGBUILD from AUR...
bsdtar: Failed to set default locale
x .SRCINFO
x PKGBUILD
python2-youtube-dl 2017.01.22-1  (2017-01-22 20:29)
( Unsupported package: Potentially dangerous ! )
==> Edit PKGBUILD ? [Y/n] ("A" to abort)
==> ------------------------------------
==> n

==> python2-youtube-dl dependencies:
 - python2 (already installed)
 - python2-setuptools (already installed) [makedepend]


==> Continue building python2-youtube-dl ? [Y/n]
==> --------------------------------------------
==> y

==> Building and installing package
==> Making package: python2-youtube-dl 2017.01.22-1 (Thu May 25 23:50:01 +03 2017)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading youtube-dl-2017.01.22.tar.gz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     3    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100   617    0   617    0     0     62      0 --:--:--  0:00:09 --:--:--   133
100 2470k  100 2470k    0     0  51229      0  0:00:49  0:00:49 --:--:--  145k
  -> Downloading youtube-dl-2017.01.22.tar.gz.sig...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     3    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
100   621    0   621    0     0    240      0 --:--:--  0:00:02 --:--:--   328
100   566  100   566    0     0    115      0  0:00:04  0:00:04 --:--:--   260
==> Validating source files with sha256sums...
    youtube-dl-2017.01.22.tar.gz ... Passed
    youtube-dl-2017.01.22.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    youtube-dl-2017.01.22.tar.gz ... FAILED (unknown public key 2C393E0F18A9236D)
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to build python2-youtube-dl.
==> Restart building python2-youtube-dl ? [y/N]
==> -------------------------------------------
==> n

I use the following command to resolve the error
gpg --recv-keys 2C393E0F18A9236D

gpg: keyserver receive failed: Server indicated a failure

There is a similar error here
sudo pacman-key --refresh-keys

gpg: refreshing 91 keys from hkp://pool.sks-keyservers.net
gpg: keyserver refresh failed: No keyserver available
==> ERROR: A specified local key could not be updated from a keyserver.

The strap.sh file I downloaded from BlackArch site was for trial purposes. This goddamn gpg I'm trying to tell you is not working. No keys are added. Where might the problem originate from?

Last edited by barlow (2017-05-25 21:04:52)

Offline

#5 2017-05-25 21:12:02

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,544

Re: Endless Gpg Problem!

barlow wrote:

Where might the problem originate from?

Old gpg or dirmngr. Port for hkp blocked. Back config. What have you tried to troubleshoot this?

Offline

#6 2017-05-25 21:34:35

barlow
Member
Registered: 2017-05-25
Posts: 3

Re: Endless Gpg Problem!

Scimmia wrote:
barlow wrote:

Where might the problem originate from?

Old gpg or dirmngr. Port for hkp blocked. Back config. What have you tried to troubleshoot this?

I tried to downgrade the gpg and dirmngr versions before.. But it did not solve the problem. How long has the Hkp port been disabled. Could it be that the problem is only due to my connection?

I have not encountered this problem using Arch Linux in the environment.

Offline

#7 2017-05-26 06:32:27

seth
Member
Registered: 2012-09-03
Posts: 51,030

Re: Endless Gpg Problem!

https://bbs.archlinux.org/viewtopic.php … 1#p1703981

And dude, you're downloading "something" from the internet and pipe it into a root shell - that's russian roulette with 5½ bullets.

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

Online

#8 2017-05-26 15:06:16

ewaller
Administrator
From: Pasadena, CA
Registered: 2009-07-13
Posts: 19,772

Re: Endless Gpg Problem!

Are you running this as root?  If so don't.  That you are using sudo seems to indicate that you are not,
Try creating a new user with an empty profile and try again.  Of course, that user needs to be in wheel.

Please don't use yaourt.  A significant portion of the breakage found on these forums is a direct result of that steaming pile of code.

As I said the first time you posted it, it works here:

ewaller@turing ~ 1002 %gpg --recv-keys 2C393E0F18A9236D
gpg: key 2C393E0F18A9236D: public key "Sergey M. <dstftw@gmail.com>" imported
gpg: WARNING: server 'gpg-agent' is older than us (2.1.20 < 2.1.21)
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   4  signed:   1  trust: 0-, 0q, 0n, 0m, 0f, 4u
gpg: depth: 1  valid:   1  signed:   0  trust: 1-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2022-06-24
gpg: Total number processed: 1
gpg:               imported: 1
ewaller@turing ~ 1003 %

What is the output of  gpg --verbose --recv-keys 2C393E0F18A9236D

Do you live someplace that might block keyserver access?
Can you use the Internet in general? (Browsing, email, ssh all okay?)

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
Sometimes it is the people no one can imagine anything of who do the things no one can imagine. -- Alan Turing
---
How to Ask Questions the Smart Way

Offline

Pages: 1

Board footer

Powered by FluxBB