Arch Linux

andrea993

Member

Registered: 2015-02-19

Posts: 12

Pacman-key key server refresh failed

I've this issue

#pacman-key --refresh 
gpg: refreshing 120 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: General error
==> ERROR: A specified local key could not be updated from a keyserver.
This is some code.

I see this

#gpg --homedir "/etc/pacman.d/gnupg/" --no-permission-warning --refresh-keys -vvv --debug-level guru
...(first part without errors)
 ....
gpg: DBG: chan_5 <- ERR 1 Errore generale <Sorgente non specificata>  
gpg: keyserver refresh failed: General error
gpg: DBG: chan_5 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=1 locks=0 parse=0 get=120
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=120 not=1 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks

I don't know why first linee still in italian also if I'm using LANG=C btw it means

 General error <unspecified source> 

I've already see this post https://bbs.archlinux.org/viewtopic.php?id=203944 and linked posts (delete and rebuild files),his problem was with fstab, I'm installed yesterday arch on this machine with dmraid and I think that it can be the cause of the problem.
My fstab is

# UUID=dc44ea81-d07d-49ec-9bd6-a2976719e3f5 LABEL=root
/dev/mapper/pdc_jcgjbjghe6      /               ext4            rw,relatime,stripe=32   0 1

# UUID=F4AC-00CA
/dev/mapper/pdc_jcgjbjghe2      /boot           vfat            rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=iso8859-1,shortname=mixed,utf8,errors=remount-ro  0 2

# UUID=f9e4ca67-5545-4244-957a-a72dd446e42a
/dev/mapper/pdc_jcgjbjghe5      none            swap            defaults        0 0

/dev/mapper/pdc_jcgjbjghe4      /media/windows  ntfs            defaults        0 0

Can someone help me please?

Regards
Andrea

Last edited by andrea993 (2020-10-28 14:21:13)

progandy

Member

Registered: 2012-05-17

Posts: 5,203

Re: Pacman-key key server refresh failed

The hkps keyserver pool is pretty much dead. Either use a different pool without TLS encryption (e.g. hkp://pool.sks-keyservers.net), a TLS encrypted keyserver that is not part of the pool or just update the archlinux keyring package instead of refreshing from the keyservers.

The keyserver for pacman can be set in /etc/pacman.d/gnupg/gpg.conf

---

| alias CUTF='LANG=en_XX.UTF-8@POSIX ' |

andrea993

Member

Registered: 2015-02-19

Posts: 12

Re: Pacman-key key server refresh failed

Thank you appending

keyserver hkp://pool.sks-keyservers.net

to /etc/pacman.d/gnupg/gpg.conf solves the issue. But why default nameserver was this dead server?

EDIT
I made some test and I notice that I have this error

#gpg --recv-keys F1A6668FBB7D572E
gpg: keyserver receive failed: General error

$ echo "keyserver hkp://pool.sks-keyservers.net" >> ~/.gnupg/gpg.conf
$ su -c 'echo "keyserver hkp://pool.sks-keyservers.net" >> /root/.gnupg/gpg.conf'

Solves. But I still don't understand why it doesn't work by default

Last edited by andrea993 (2020-10-28 15:19:25)