Arch Linux

rockin turtle

Member

From: Montana, USA

Registered: 2009-10-22

Posts: 227

[SOLVED] Key import failure

I enabled pacman signing per https://wiki.archlinux.org/index.php/Pacman-key sometime in March or so, and it has been working fine. The first few weeks after I had enabled this, it (pacman) would have to import the key for each package that wasn't in my keyring.  Sometimes there would be a problem looking up the key, so I would try again later and it would find the key and import it properly.

Now, the keys for most (but not all) of the packages installed on my system have been imported.

A few weeks ago, there was an update to flashplugin.  It so happened that the key for flashplugin was not currently in my keyring and pacman could not import it.  I thought I would try again later, but this seems to be a hard failure - pacman cannot obtain the key for this package no matter how many times I have tried.  I had to put a hold on it in pacman.conf in order to update my system.

Since then, I've had similar failures for rxvt-unicode and then today, vim.  It seems that my system is no longer able to import any keys for packages that were installed on my system before I enabled package signing.

I don't know what I have done to get my system in this state.

Anybody have any ideas about how I can fix this?

Additional info:

I haven't tried the following script from https://wiki.archlinux.org/index.php/Pacman-key

curl https://www.archlinux.org/{developers,trustedusers}/ |
awk -F\" '(/pgp.mit.edu/) {sub(/.*search=0x/,"");print $1}' |
xargs pacman-key --recv-keys

Would this script import all those keys as implicitly trusted?

In pacman.conf, I have tried both

SigLevel = Optional TrustedOnly
SigLevel = Required DatabaseOptional TrustedOnly

and both fail.

I have also tried both

keyserver hkp://keys.gnupg.net
keyserver hkp://pgp.mit.edu:11371

in my /etc/pacman.d/gnupg/gpg.conf and neither seems to work.

This is what my pacman -Su looked like this morning:

(6/6) checking package integrity                                [############################] 100%
error: vim-runtime: key "7FB1A3800C84C0A5" is unknown
error: key "7FB1A3800C84C0A5" could not be looked up remotely
error: vim: key "7FB1A3800C84C0A5" is unknown
error: key "7FB1A3800C84C0A5" could not be looked up remotely
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

Last edited by rockin turtle (2012-04-11 18:34:58)

mcmillan

Member

Registered: 2006-04-06

Posts: 737

Re: [SOLVED] Key import failure

It's a known issue with the change to gnupg2. For now you need to import keys manually until a new version of pacman comes out. Searching the forum should give some more details

rockin turtle

Member

From: Montana, USA

Registered: 2009-10-22

Posts: 227

Re: [SOLVED] Key import failure

Oops, I guess I didn't search enough.  I hadn't seen anyone mention this problem.

Thanks.

Gcool

Member

Registered: 2011-08-16

Posts: 1,456

Re: [SOLVED] Key import failure

Don't forget to mark your thread as [SOLVED].

---

Burninate!