[SOLVED] Keys Warning on last update

makh · 2017-10-21 23:27:36

Hi

Please inform, how to fix this warning:

downloading required keys...
:: Import PGP key *********************, "Alad Wenter <alad@mailbox.org>", created: 2017-09-07? [Y/n] 
(30/30) checking package integrity                           [################################] 100%
(30/30) loading package files                                [################################] 100%
(30/30) checking for file conflicts                          [################################] 100%
(30/30) checking available disk space                        [################################] 100%
:: Processing package changes...
( 1/30) upgrading archlinux-keyring                          [################################] 100%
==> Appending keys from archlinux.gpg...
key *****************:
6 signatures not checked due to missing keys
key *****************:
1 signature not checked due to a missing key
key *****************:
4 signatures not checked due to missing keys
sig!         ***************** 2017-05-23  Florian Pritz (Arch Linux Master Key) <florian@master-
sub  *****************
sig!         ***************** 2017-05-22  [self-signature]
key *****************:
1 signature reordered
key *****************:
5 signatures not checked due to missing keys

Thankyou

Last edited by makh (2017-10-22 01:04:32)

Scimmia · 2017-10-21 23:35:30

I see no issues there at all.

eschwartz · 2017-10-22 00:30:45

Warnings are self-evidently not errors.

In this case, gpg is loudly warning you that the keys in your pacman-key keyring have additional signatures from keys that are not in your keyring, and it cannot check the validity of "Joe Random"s signature because you don't have that key in your keyring.

Why gpg thinks you should be warned about this, I do not know. You are hardly likely to have every single key in the world in your personal keyring, so why does it matter if you cannot check those unknown signatures that you don't even care about?

All that matters is that the keys which you do have, and are trying to check, have given valid as opposed to invalid signatures.

tl;dr

Warnings are warnings for a reason. Errors are also errors for a reason, but fortunately you don't have any errors.

mpan · 2017-10-22 00:31:44

makh:
First of all: big plus for being cautious and asking the question while in doubt about a security issue. Fortunately there is no problem.

“signatures not checked due to missing keys” is neither an error nor even a warning. GnuPG merely informs you about a situation it has encountered while checking keys, but the situation itself is not a problem.

What happens is that some of the keys are signed also by persons you don’t have in your pacman keyring. Therefore these signatures can’t be verified. But it is not a problem, as other signatures are present, they have been checked and are ok.

makh · 2017-10-22 01:04:00

Thankyou all.

Arch Linux

#1 2017-10-21 23:27:36

[SOLVED] Keys Warning on last update

#2 2017-10-21 23:35:30

Re: [SOLVED] Keys Warning on last update

#3 2017-10-22 00:30:45

Re: [SOLVED] Keys Warning on last update

#4 2017-10-22 00:31:44

Re: [SOLVED] Keys Warning on last update

#5 2017-10-22 01:04:00

Re: [SOLVED] Keys Warning on last update

Board footer