Arch Linux

super_trash

Banned

Registered: 2018-07-04

Posts: 50

[SOLVED] FAILED (unknown public key KEYID)

After reading this article from Allan I still don't understand and the step by step to solve the issue? http://allanmcrae.com/2015/01/two-pgp-k … rch-linux/

Can someone give me an insight?

Last edited by super_trash (2018-09-07 17:41:12)

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 25,435

Re: [SOLVED] FAILED (unknown public key KEYID)

https://wiki.archlinux.org/index.php/Ma … e_checking

What is your actual issue? Which program are you trying to install with which command and which exact error do you get? And what from the above link have you tried to fix the issue?

Last edited by V1del (2018-09-07 11:29:02)

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

https://wiki.archlinux.org/index.php/Ma … e_checking

What is your actual issue? Which program are you trying to install with which command and which exact error do you get? And what from the above link have you tried to fix the issue?

Let me reproduce this:

cd $HOME
mkdir ABS; cd ABS
sudo pacman -S asp
asp checkout wget; cd wget/repos/extra-x86_64
makepkg -so

Now the error:

    wget-1.19.5.tar.lz ... FAILED (unknown public key 08302DB6A2670428)
==> ERROR: One or more PGP signatures could not be verified!

The system is pretty clean and in control.

Last edited by super_trash (2018-09-07 12:07:14)

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,718

Website

Re: [SOLVED] FAILED (unknown public key KEYID)

You haven't imported the key. If you think you have, tell us how you did, and what the output is if you try to import it again.

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 25,435

Re: [SOLVED] FAILED (unknown public key KEYID)

Read my link, you have to import the key in question, since you are unlikely to have the key file, import the key ID you have access to from a keyserver.

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

Read my link, you have to import the key in question, since you are unlikely to have the key file, import the key ID you have access to from a keyserver.

You haven't imported the key. If you think you have, tell us how you did, and what the output is if you try to import it again.

I did and tried import the keyID again, this is result:

gpg --recv-keys 08302DB6A2670428
gpg: keyserver receive failed: Server indicated a failure

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

Debugging:

gpg -vvv --debug-all --recv-keys --keyserver hkp://pgp.mit.edu 08302DB6A2670428
gpg: Note: no default option file '/home/user/.gnupg/gpg.conf'
gpg: using character set 'utf-8'
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /home/user/.gnupg
gpg: DBG: chan_3 <- # Config: [none]
gpg: DBG: chan_3 <- OK Dirmngr 2.2.10 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.10
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KEYSERVER --clear hkp://pgp.mit.edu
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_GET -- 0x08302DB6A2670428
gpg: DBG: chan_3 <- ERR 219 Server indicated a failure <Unspecified source>
gpg: keyserver receive failed: Server indicated a failure
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,718

Website

Re: [SOLVED] FAILED (unknown public key KEYID)

I guess pgp.mit.edu is having issues. Try with --keyserver=pool.sks-keyservers.net

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

Alad

Wiki Admin/IRC Op

From: Bagelstan

Registered: 2014-05-04

Posts: 2,422

Website

Re: [SOLVED] FAILED (unknown public key KEYID)

That makes me wonder: is there any reliable keyserver available? Switching them constantly gets annoying.

---

Mods are just community members who have the occasionally necessary option to move threads around and edit posts. -- Trilby

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

I guess pgp.mit.edu is having issues. Try with --keyserver=pool.sks-keyservers.net

No luck I guess.

sudo killall dirmngr

gpg -vvv --debug-all --recv-keys --keyserver=pool.sks-keyservers.net 08302DB6A2670428
gpg: Note: no default option file '/home/user/.gnupg/gpg.conf'
gpg: using character set 'utf-8'
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /home/user/.gnupg
gpg: DBG: chan_3 <- # Config: [none]
gpg: DBG: chan_3 <- OK Dirmngr 2.2.10 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.10
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KEYSERVER --clear hkp://pool.sks-keyservers.net
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_GET -- 0x08302DB6A2670428
gpg: DBG: chan_3 <- ERR 219 Server indicated a failure <Unspecified source>
gpg: keyserver receive failed: Server indicated a failure
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks

V1del

Forum Moderator

Registered: 2012-10-16

Posts: 25,435

Re: [SOLVED] FAILED (unknown public key KEYID)

Might also be related to DNS/ISP configuration, see here for example

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

I tried something:

sudo vim /etc/resolve.conf
8.8.8.8
8.8.4.4
sudo systemctl restart systemd-resolved.service
sudo killall dirmngr
gpg -vvv --debug-all --recv-keys --keyserver pool.sks-keyservers.net 08302DB6A2670428
#output:

gpg: DBG: chan_3 <- ERR 219 Server indicated a failure <Unspecified source>
gpg: keyserver receive failed: Server indicated a failure
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop

follow this post https://bbs.archlinux.org/viewtopic.php … 1#p1703981
also failed with same error.

I can ping pool.sks-keyservers.net.

I do believe this is from DNS issue but can't read debug output.

gpg (GnuPG) 2.2.9

Last edited by super_trash (2018-09-07 17:10:45)

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

I'm trying to downgrade to gnupg 2.1.15-2. https://git.archlinux.org/svntogit/pack … 900587087a

EDIT: It works when downgrade to gnupg 2.1.15-2, too sad, this kind of issue happens like thousands times and gnupg still brorke in upstream.

Last edited by super_trash (2018-09-07 17:31:03)

loqs

Member

Registered: 2014-03-06

Posts: 19,113

Re: [SOLVED] FAILED (unknown public key KEYID)

I'm trying to downgrade to gnupg 2.1.15-2. https://git.archlinux.org/svntogit/pack … 900587087a

EDIT: It works when downgrade to gnupg 2.1.15-2, too sad, this kind of issue happens like thousands times and gnupg still brorke in upstream.

Please consider an alternative solution you have performed a partial upgrade on a package that is required by pacman itself.  The next incompatible ABI update to gnupg or readline and you will break pacman.

super_trash

Banned

Registered: 2018-07-04

Posts: 50

Re: [SOLVED] FAILED (unknown public key KEYID)

I'm trying to downgrade to gnupg 2.1.15-2. https://git.archlinux.org/svntogit/pack … 900587087a

EDIT: It works when downgrade to gnupg 2.1.15-2, too sad, this kind of issue happens like thousands times and gnupg still brorke in upstream.

Please consider an alternative solution you have performed a partial upgrade on a package that is required by pacman itself.  The next incompatible ABI update to gnupg or readline and you will break pacman.

If that we should make clear in wiki what version of gnupg that compatible with pacman and still provides its function to import devs key. This issue almost disabled normal users from using ABS.

Last edited by super_trash (2018-09-08 02:50:53)