[Solved] signature from "Blabla <blabla@blabla>" problem

jorgemota · 2015-10-01 17:02:47

Hi I am receiving some problems with signatures... first I was unable to upgrade llvm-libs package (1 week ago) 2 days after I start to see another messages, today the list of untrusted signatures is this:

error: vim-runtime: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/vim-runtime-7.4.884-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: llvm-libs: signature from "Evangelos Foutras <evangelos@foutrelis.com>" is invalid
:: File /var/cache/pacman/pkg/llvm-libs-3.7.0-4-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: mesa: signature from "Laurent Carlier <lordheavym@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/mesa-11.0.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: lib32-mesa: signature from "Laurent Carlier <lordheavym@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/lib32-mesa-11.0.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: linux-headers: signature from "Tobias Powalowski <tobias.powalowski@googlemail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-headers-4.2.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package)
Errors occurred, no packages were upgraded.

When upgrading system with --debug

debug: validity: full; reason: Success
debug: key: B5971F2C5C10A9A08C60030F786C63F330D7CB92, Felix Yan <felixonmars@gmail.com>, owner_trust unknown, disabled 0
debug: signature is valid
debug: signature is fully trusted
error: vim-runtime: signature from "Anatol Pomozov <anatol.pomozov@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/vim-runtime-7.4.884-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: llvm-libs: signature from "Evangelos Foutras <evangelos@foutrelis.com>" is invalid
:: File /var/cache/pacman/pkg/llvm-libs-3.7.0-4-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: mesa: signature from "Laurent Carlier <lordheavym@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/mesa-11.0.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: lib32-mesa: signature from "Laurent Carlier <lordheavym@gmail.com>" is invalid
:: File /var/cache/pacman/pkg/lib32-mesa-11.0.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: linux-headers: signature from "Tobias Powalowski <tobias.powalowski@googlemail.com>" is invalid
:: File /var/cache/pacman/pkg/linux-headers-4.2.2-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
debug: returning error 33 from check_validity : invalid or corrupted package
error: failed to commit transaction (invalid or corrupted package)

Tried the following:

rm -R /etc/pacman.d/gnupg
rm -R /root/.gnupg
dirmngr </dev/null

pacman-key --init
pacman-key --populate archlinux
pacman-key --refresh-keys

Output:

[root@weedpc pkg]# rm -R /etc/pacman.d/gnupg
[root@weedpc pkg]# rm -R /root/.gnupg
[root@weedpc pkg]# dirmngr </dev/null
dirmngr[23115.0]: error opening '/root/.gnupg/dirmngr_ldapservers.conf': No such file or directory
dirmngr[23115.0]: permanently loaded certificates: 0
dirmngr[23115.0]:     runtime cached certificates: 0
dirmngr[23115.0]: failed to open cache dir file '/root/.gnupg/dirmngr-cache.d/DIR.txt': No such file or directory
dirmngr[23115.0]: creating directory '/root/.gnupg'
dirmngr[23115.0]: creating directory '/root/.gnupg/dirmngr-cache.d'
dirmngr[23115.0]: new cache dir file '/root/.gnupg/dirmngr-cache.d/DIR.txt' created
# Home: ~/.gnupg
# Config: [none]
OK Dirmngr 2.1.8 at your service
[root@weedpc pkg]# 
[root@weedpc pkg]# pacman-key --init
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: starting migration from earlier GnuPG versions
gpg: porting secret keys from '/etc/pacman.d/gnupg/secring.gpg' to gpg-agent
gpg: migration succeeded
gpg: Generating pacman keyring master key...
gpg: key 46322952 marked as ultimately trusted
gpg: directory '/etc/pacman.d/gnupg/openpgp-revocs.d' created
gpg: Done
==> Updating trust database...
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
[root@weedpc pkg]# pacman-key --populate archlinux
==> Appending keys from archlinux.gpg...
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
==> Locally signing trusted keys in keyring...
  -> Locally signing key 0E8B644079F599DFC1DDC3973348882F6AC6A4C2...
  -> Locally signing key 684148BB25B49E986A4944C55184252D824B18E8...
  -> Locally signing key 44D4A033AC140143927397D47EFD567D4C7EA887...
  -> Locally signing key 27FFC4769E19F096D41D9265A04F9397CDFD6BB0...
  -> Locally signing key AB19265E5D7D20687D303246BA1DFB64FFF979E7...
==> Importing owner trust values...
gpg: inserting ownertrust of 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
==> Disabling revoked keys in keyring...
  -> Disabling key F5A361A3A13554B85E57DDDAAF7EF7873CFD4BB6...
  -> Disabling key 7FA647CD89891DEDC060287BB9113D1ED21E1A55...
  -> Disabling key D4DE5ABDE2A7287644EAC7E36D1A9E70E19DAA50...
  -> Disabling key BC1FBE4D2826A0B51E47ED62E2539214C6C11350...
  -> Disabling key 9515D8A8EAB88E49BB65EDBCE6B456CAF15447D5...
  -> Disabling key 4A8B17E20B88ACA61860009B5CED81B7C2E5C0D2...
  -> Disabling key 63F395DE2D6398BBE458F281F2DBB4931985A992...
  -> Disabling key 0B20CA1931F5DA3A70D0F8D2EA6836E1AB441196...
  -> Disabling key 8F76BEEA0289F9E1D3E229C05F946DED983D4366...
  -> Disabling key 66BD74A036D522F51DD70A3C7F2A16726521E06D...
  -> Disabling key 81D7F8241DB38BC759C80FCE3A726C6170E80477...
  -> Disabling key E7210A59715F6940CF9A4E36A001876699AD6E84...
==> Updating trust database...
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   5  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   5  signed:  64  trust: 0-, 0q, 0n, 5m, 0f, 0u
gpg: depth: 2  valid:  64  signed:   6  trust: 64-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2016-01-22
[root@weedpc pkg]# pacman-key --refresh-keys
gpg: refreshing 82 keys from hkp://pool.sks-keyservers.net
gpg: key 487328A9: "Bartlomiej Piotrowski <b@bpiotrowski.pl>" 12 new signatures
gpg: key 4CE1C13E: "Florian Pritz <bluewind@xinu.at>" 44 new signatures
gpg: key 00F0D0F0: "Gaetan Bisson <gaetan@fenua.org>" 116 new signatures
gpg: key 0901C163: "Balló György <ballogyor@gmail.com>" 1 new signature
gpg: key 941C2A25: "Antonio Rojas <arojas@archlinux.org>" 1 new signature
gpg: key 5CF9C8D4: "Alexander Rødseth <rodseth@gmail.com>" 1 new signature
gpg: key 31361F01: "Evgeniy Alekseev <arcanis@archlinux.org>" 5 new signatures
gpg: key 8D8172C8: "Levente Polyak (anthraxx) <levente@leventepolyak.net>" 39 new signatures
gpg: key EC133BAD: "Angel Velásquez <angvp@archlinux.org>" 1 new signature
gpg: key 0F2A092B: "Andreas Radke <andyrtr@archlinux.org>" 2 new signatures
gpg: key D30DB0AD: "Andrea Scarpino <me@andreascarpino.it>" 358 new signatures
gpg: key 753E0F1F: "Anatol Pomozov <anatol.pomozov@gmail.com>" 2 new signatures
gpg: key 98BC6FF5: "Maxime Gauduin <alucryd@archlinux.org>" 1 new signature
gpg: key EAE999BD: "Allan McRae <me@allanmcrae.com>" 6 new signatures
gpg: key 31496106: "Andrzej Giniewicz (giniu) <gginiu@gmail.com>" 1 new signature
gpg: key 824B18E8: "Thomas Bächler (Arch Linux Master Key) <thomas@master-key.archlinux.org>" 4 new signatures
gpg: key 6AC6A4C2: "Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>" 4 new signatures
gpg: key 4C7EA887: "Ionut Biru (Arch Linux Master Key) <ionut@master-key.archlinux.org>" 3 new signatures
gpg: key CDFD6BB0: "Dan McGee (Arch Linux Master Key) <dan@master-key.archlinux.org>" 5 new signatures
gpg: key FFF979E7: "Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>" 9 new signatures
gpg: key DA48F373: "Jerome Leclanche <jerome@leclan.ch>" 3 new signatures
gpg: key 3B94FA10: "Jan de Groot <jan@linux-specialist.nl>" 1 new signature
gpg: key 7C50773E: "Jelle van der Waa <jelle@vdwaa.nl>" 3 new signatures
gpg: key 796CA067: "Ike Devolder <ike.devolder@gmail.com>" 2 new signatures
gpg: key 615137BC: "Ionut Biru <ibiru@archlinux.org>" 6 new signatures
gpg: key 4FA415FA: "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" 15 new signatures
gpg: key 215B37AD: "Guillaume ALAUX <guillaume@archlinux.org>" 197 new signatures
gpg: key F04569AE: "Giovanni Scafora <giovanni@archlinux.org>" 13 new signatures
gpg: key 30D7CB92: "Felix Yan <felixonmars@gmail.com>" 112 new signatures
gpg: key A9999C34: "Evangelos Foutras <evangelos@foutrelis.com>" 11 new signatures
gpg: key 0864983E: "Martin Wimpress (http://www.flexion.org) <martin@flexion.org>" 10 new signatures
gpg: key 2FA915EC: "Alexandre Filgueira <alexfilgueira@cinnarch.com>" 1 new signature
gpg: key 498E9CEE: "Christian Hesse (Arch Linux Package Signing) <arch@eworm.de>" 64 new signatures
gpg: key 9205AC90: "Eric Belanger <eric@archlinux.org>" 1 new signature
gpg: key 4F010D48: "Daniel Wallace <danielwallace@gtmanfred.com>" 7 new signatures
gpg: key F56C0C53: "Dave Reisner <d@falconindy.com>" 4 new signatures
gpg: key 5BD5C938: "Gerardo Exequiel Pozzi <vmlinuz386@gmail.com>" 7 new signatures
gpg: key BA06C6A9: "Dicebot <public@dicebot.lv>" 1 new signature
gpg: key B4440678: "Daniel Isenmann <daniel@archlinux.org>" 1 new signature
gpg: key F53A76ED: "Dan McGee <dpmcgee@gmail.com>" 14 new signatures
gpg: key B47A0DAB: "Connor Behan <connor.behan@gmail.com>" 1 new signature
gpg: key 9AF5F22A: "Daniel Micay <daniel.micay@copperhead.co>" 1 new user ID
gpg: key 9AF5F22A: "Daniel Micay <daniel.micay@copperhead.co>" 2 new signatures
gpg: key 0C84C0A5: "Thomas Dziedzic <gostrc@gmail.com>" 1 new signature
gpg: key E62EB915: "Sven-Hendrik Haase <sh@lutzhaase.com>" 1 new signature
gpg: key F1D357C1: "Lukas Jirkovsky <l.jirkovsky@gmail.com>" 1 new signature
gpg: key EA433FC7: "Sergej Pupykin <arch@sergej.pp.ru>" 4 new signatures
gpg: key F27FB7DA: "speps <speps@aur.archlinux.org>" 5 new signatures
gpg: key 2072D77A: "Sébastien Luttringer <seblu@seblu.net>" 17 new signatures
gpg: key 91B842AE: "Jakob Gruber <jakob.gruber@gmail.com>" 1 new signature
gpg: key C0711BF1: "Rashif Rahman (Ray) <schiv@archlinux.org>" 1 new signature
gpg: key 8406FFF3: "Ronald van Haren <ronald@archlinux.org>" 1 new signature
gpg: key 2D1493D2: "Rémy Oudompheng <remy@archlinux.org>" 12 new signatures
gpg: key 9741E8AC: "Pierre Schmitz <pierre@archlinux.de>" 13 new signatures
gpg: key B250F0D3: "Fabio Castelli <muflone@vbsimple.net>" 83 new signatures
gpg: key DA2EE423: "Massimiliano Torromeo (Personal non-work identity) <massimiliano.torromeo@gmail.com>" 1 new signature
gpg: key 9326B440: "Lukas Fleischer <info@cryptocrack.de>" 3 new signatures
gpg: key D1CEDDAC: "Laurent Carlier <lordheavym@gmail.com>" 1 new signature
gpg: key 3A9D0BB5: "Johannes Löthberg <johannes@kyriasis.com>" 17 new signatures
gpg: key BAB142C1: "Kyle Keen <keenerd@gmail.com>" 1 new signature
gpg: key 589874AB: "Jürgen Hötzel <juergen@hoetzel.info>" 2 new signatures
gpg: key F40D2072: "Jonathan Steel <mail@jsteel.org>" 5 new signatures
gpg: key 013C2580: "Jaroslav Lichtblau <svetlemodry@archlinux.org>" 2 new user IDs
gpg: key 013C2580: "Jaroslav Lichtblau <svetlemodry@archlinux.org>" 7 new signatures
gpg: key C2E5C0D2: "Xyne. <xyne@archlinux.ca>" 6 new signatures
gpg: key AB441196: "Stéphane Gaudreault <stephane@archlinux.org>" 6 new signatures
gpg: key 70E80477: "Роман Кирилич (Roman Kyrylych) <roman@archlinux.org>" 5 new signatures
gpg: key E19DAA50: "Peter Richard Lewis <pete@muddygoat.org>" 153 new signatures
gpg: key D21E1A55: "Kaiting Chen <kaitocracy@gmail.com>" 5 new signatures
gpg: key 983D4366: "Justin Davis (juster) <jrcd83@gmail.com>" 8 new signatures
gpg: key 3CFD4BB6: "Jonathan Conder <jonno.conder@gmail.com>" 5 new signatures
gpg: key 1985A992: "Dieter Plaetinck <dieter@plaetinck.be>" 6 new signatures
gpg: key 99AD6E84: "Gavin Marciniak-Bisesi <Daenyth@gmail.com>" 13 new signatures
gpg: key F15447D5: "Federico Cinelli <cinelli@aur.archlinux.org>" 11 new signatures
gpg: key C6C11350: "Federico Cinelli <cinelli.federico@gmail.com>" 5 new signatures
gpg: key 6521E06D: "Christopher Brannon <chris@the-brannons.com>" 9 new signatures
gpg: key 8F173680: "Xyne. (key #3) <xyne@archlinux.ca>" 3 new signatures
gpg: key 437520BD: "Vesa Kaihlavirta <vegai@iki.fi>" 1 new signature
gpg: key 295AFBF4: "Thorsten Töpper <atsutane@freethoughts.de>" 126 new signatures
gpg: key 3C4F88BC: "Timothy Redaelli <timothy.redaelli@gmail.com>" 6 new signatures
gpg: key 7EDF681F: "Tobias Powalowski <tobias.powalowski@googlemail.com>" 7 new signatures
gpg: key 06361833: "Tom Gundersen <teg@jklm.no>" 5 new signatures
gpg: key 8E4B1A25: "Thomas Bächler <thomas@archlinux.org>" 6 new signatures
gpg: Total number processed: 81
gpg:           new user IDs: 3
gpg:         new signatures: 1654
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   5  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   5  signed:  64  trust: 0-, 0q, 0n, 5m, 0f, 0u
gpg: depth: 2  valid:  64  signed:   6  trust: 64-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2016-01-22

settled ntpd, hwclock -w, changed timeserver
Reinstalled keyring, pacman -Syu | pacman -Syy | pacman -Sc
Tried to clean cache, erased keyring in cache, removed /var/lib/pacman/sync
changed mirror (tested 14 mirrors) changed server on /etc/pacman.d/gnupg/gpg.conf redo all previous steps
forced pacman to use wget / curl
changed from network 2 times... and...

I cant find why the signers are not updated /trusted
I readed a lot,googled it, search on arch forums, posts, I swear, I have tried all and the problem persists.

Edit problem fixed.

Last edited by jorgemota (2015-10-01 18:09:59)

jorgemota · 2015-10-01 17:30:27

Update: after running 3 or 4 times the block code to remove keys... now only vim and vim-runtime fails and start to fail some others

Running a lot of times... reboot and fixed.

Last edited by jorgemota (2015-10-01 18:09:38)

smiley8088 · 2015-10-24 04:38:38

Thanks for posting. For anyone else struggling with this, if the usual steps fail (correcting system time, refreshing keys), this is the block which fixed the problem for me:

rm -R /etc/pacman.d/gnupg
rm -R /root/.gnupg
dirmngr </dev/null

pacman-key --init
pacman-key --populate archlinux
pacman-key --refresh-keys

I didn't have to reboot, after this I could upgrade.

Last edited by smiley8088 (2015-10-24 04:39:55)

rixz · 2016-10-13 10:29:07

Hello smiley8088,

Thanks for this thread.

I had the same problem and this helped me to solve it. However I found a problem as my shell was hanging while doing the `pacman-key --init` command.
I just thought to mention this here just in case anyone else is stuck on the same issue.

So for all the others if you system hangs while executing `pacman-key --init` you need to do the following:

vim /etc/pacman.conf

Change SigLevel to Never:

[community]
SigLevel = Never

Dont forget to switch it back once you are done!

Next, install `haveged`

pacman -S haveged
haveged -w 1024

Continue with the rest of the steps to initialize and populate the keys. In the end

pacman-key --init
pacman-key --populate archlinux
pacman-key --refresh-keys

Remove `haveged`

pkill haveged
pacman -Rs haveged

Reurnt SigLevel to the default value:

SigLevel = Required DatabaseOptional

Enjoy!

Last edited by rixz (2016-10-13 10:29:41)

WorMzy · 2016-10-13 10:41:25

Thanks for sharing, rixz. I'm going to go ahead and close this old thread now.

Arch Linux

#1 2015-10-01 17:02:47

[Solved] signature from "Blabla <blabla@blabla>" problem

#2 2015-10-01 17:30:27

Re: [Solved] signature from "Blabla <blabla@blabla>" problem

#3 2015-10-24 04:38:38

Re: [Solved] signature from "Blabla <blabla@blabla>" problem

#4 2016-10-13 10:29:07

Re: [Solved] signature from "Blabla <blabla@blabla>" problem

#5 2016-10-13 10:41:25

Re: [Solved] signature from "Blabla <blabla@blabla>" problem

Board footer