Arch Linux

karcher

Member

Registered: 2018-01-09

Posts: 140

[SOLVED] Updating out-of-date package manually

Hi all,

I want to manually update xpad:
https://www.archlinux.org/packages/comm … 6_64/xpad/
which is flagged out-of-date.

I have created a a clean chroot with clean-chroot-manager, downloaded the 2 files:
xpad-5.4.0.tar.bz2
xpad.appdata.xml

from here:
https://git.archlinux.org/svntogit/comm … kages/xpad
modified the new new version (5.4.0) in pkgver and the SHA256 checksum in sha256sums and did:

$ sudo ccm64 s

but I get these errors:

==> Verifying source file signatures with gpg...
    xpad-5.4.0.tar.bz2 ... FAILED (unknown public key 92BF2FCCA6F2322B)
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Could not download sources.

I couldn't find whom belongs this public key on a key server. E.g. here
https://pgp.mit.edu
or here:
http://keys.gnupg.net

How can I circumvent this error and update xpad?

Last edited by karcher (2019-01-28 12:05:09)

jamespharvey20

Member

Registered: 2015-06-09

Posts: 129

Re: [SOLVED] Updating out-of-date package manually

How can I circumvent this error and update xpad?

If you're willing to trust the key, then:

$ gpg --recv-keys 3930646349B9DD3886D9087392BF2FCCA6F2322B

karcher

Member

Registered: 2018-01-09

Posts: 140

Re: [SOLVED] Updating out-of-date package manually

@jamespharvey20:
Thanks, but how can I check whose key is this?

Are there any other ways?
E.g. would it be possible to put my own key there?
I've tried to remove the whole thing (validpgpkeys) but I got the same errors.

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,536

Re: [SOLVED] Updating out-of-date package manually

$ gpg --search-keys user-id

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

jamespharvey20

Member

Registered: 2015-06-09

Posts: 129

Re: [SOLVED] Updating out-of-date package manually

Are there any other ways?
E.g. would it be possible to put my own key there?
I've tried to remove the whole thing (validpgpkeys) but I got the same errors.

The best way to go is to verify and trust the key.  But, regarding the "other ways" question, you're still running into this because of the .asc source file.  To bypass it like you were trying to do, you'd need to remove "{,.asc}" on the source line, and remove the corresponding (second='SKIP') entry from sha256sums.

loqs

Member

Registered: 2014-03-06

Posts: 19,104

Re: [SOLVED] Updating out-of-date package manually

https://answers.launchpad.net/xpad/+question/295164

karcher

Member

Registered: 2018-01-09

Posts: 140

Re: [SOLVED] Updating out-of-date package manually

OK. Interesting stuff. Thanks all!