You are not logged in.

#1 2020-05-19 16:11:13

jesusignazio
Member
Registered: 2014-03-07
Posts: 14

gradle: signature from Levente Polyak (anthraxx) is invalid (PGP sign)

pacman -S gradle

sudo pacman -S gradle
resolving dependencies...
looking for conflicting packages...

Packages (1) gradle-6.4-1

Total Installed Size:  110.60 MiB
Net Upgrade Size:        0.64 MiB

:: Proceed with installation? [Y/n] 
(1/1) checking keys in keyring                                           [########################################] 100%
(1/1) checking package integrity                                         [########################################] 100%
error: gradle: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is invalid
:: File /var/cache/pacman/pkg/gradle-6.4-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] 

Debug output:

Packages (1) gradle-6.4-1

Total Installed Size:  110.60 MiB
Net Upgrade Size:        0.64 MiB

:: Proceed with installation? [Y/n] 
debug: using cachedir: /var/cache/pacman/pkg/
checking keyring...
debug: GPGME version: 1.13.1
debug: GPGME engine info: file=/usr/bin/gpg, home=/etc/pacman.d/gnupg/
debug: looking up key FC1B547C8D8172C8 locally
debug: key lookup success, key exists
checking package integrity...
debug: found cached pkg: /var/cache/pacman/pkg/gradle-6.4-1-any.pkg.tar.zst
debug: sig data: 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
debug: checking signature for /var/cache/pacman/pkg/gradle-6.4-1-any.pkg.tar.zst
debug: 1 signatures returned
debug: fingerprint: FC1B547C8D8172C8
debug: summary: red
debug: status: Bad signature
debug: timestamp: 0
debug: exp_timestamp: 0
debug: validity: unknown; reason: Success
debug: key: E240B57E2C4630BA768E2F26FC1B547C8D8172C8, Levente Polyak (anthraxx) <levente@leventepolyak.net>, owner_trust unknown, disabled 0
debug: signature is not valid
error: gradle: signature from "Levente Polyak (anthraxx) <levente@leventepolyak.net>" is invalid
:: File /var/cache/pacman/pkg/gradle-6.4-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]

pacman -Q archlinux-keyring

archlinux-keyring 20200422-1

pacman-key --list-sigs Master:

pub   rsa4096 2018-11-08 [SC]
      D8AFDDA07A5B6EDFA7D8CCDAD6D055F927843F1C
uid        [   total   ] Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig 3        D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig          39E4B877E62EB915 2018-12-28  Sven-Hendrik Haase <svenstaro@gmail.com>
sig          FC1B547C8D8172C8 2018-11-12  Levente Polyak (anthraxx) <levente@leventepolyak.net>
sig   L      788214E4621CBB32 2020-05-19  Pacman Keyring Master Key <pacman@localhost>
sub   rsa4096 2018-11-08 [E]
sig          D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sub   rsa4096 2018-11-08 [A]
sig          D6D055F927843F1C 2018-11-08  Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>

I tried:
pacman -S archlinux-keyring
pacman-key --init
pacman-key --populate archlinux
pacman-key --delete D8AFDDA07A5B6EDFA7D8CCDAD6D055F927843F1C and pacman-key --populate archlinux again

Nothing worked.

Last edited by jesusignazio (2020-05-19 16:12:50)

Offline

#2 2020-05-19 16:15:00

Scimmia
Fellow
Registered: 2012-09-01
Posts: 11,463

Re: gradle: signature from Levente Polyak (anthraxx) is invalid (PGP sign)

Try downloading it from a different mirror

Offline

#3 2020-05-19 17:02:39

jesusignazio
Member
Registered: 2014-03-07
Posts: 14

Re: gradle: signature from Levente Polyak (anthraxx) is invalid (PGP sign)

Scimmia wrote:

Try downloading it from a different mirror

It worked, thanks

Offline

Board footer

Powered by FluxBB