You are not logged in.

#1 2020-06-17 15:21:07

Orionis
Member
Registered: 2018-01-19
Posts: 23

Issue fetching GPG keys

One of my Linux systems (last updated in April) has the following issue:

pacman-key --refresh-keys                                                                                                        :(
gpg: refreshing 117 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: Server indicated a failure

Just to exclude my network I ran it on another Linux server where it runs fine.

I tried port 80 and 443 nonetheless.

I also did:

gpg --debug-level guru --keyserver hkp://keys.gnupg.net --search-keys abcdefghij
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /root/.gnupg
gpg: DBG: chan_3 <- # Config: [none]
gpg: DBG: chan_3 <- OK Dirmngr 2.2.20 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.20
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KEYSERVER --clear hkp://keys.gnupg.net
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_SEARCH -- abcdefghij
gpg: DBG: chan_3 <- ERR 219 Server indicated a failure <Unspecified source>
gpg: error searching keyserver: Server indicated a failure
gpg: keyserver search failed: Server indicated a failure
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks

The problem stops me from updating since I get this on the upgrade:

(142/142) checking keys in keyring                                                             [#######################################################] 100%
downloading required keys...
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n] Y
error: key "3B94A80E50A477C7" could not be looked up remotely

I update gnupg, keyutils and pacman-keyring to see if it would help, but no luck there...

Can anybody help me out?

Last edited by Orionis (2020-06-17 15:27:04)

Offline

#2 2020-06-17 15:25:43

Head_on_a_Stick
Member
From: London
Registered: 2014-02-20
Posts: 5,436
Website

Re: Issue fetching GPG keys

https://bbs.archlinux.org/viewtopic.php?id=255968

Please search before posting...

Offline

#3 2020-06-17 15:30:39

Orionis
Member
Registered: 2018-01-19
Posts: 23

Re: Issue fetching GPG keys

That may say something about the heftig key, but not about the general issue of not being able to reach any keyserver. Which is why I was reluctant to include it in my post.

Please read my entire post before telling me I didn't just spend two hours on Google trying to figure it out for myself and failing.

I'm sorry, but that reply bites after two hours.

EDIT: I already had the thread you referred me to open to troubleshoot that as well. But I am bound to run into issues if gpg can no longer get to the keys.

EDIT2: The system where "refresh-keys" works was last updated on May 2nd, so I figured maybe it was an aoutdated package. Which is why I usually run "refresh-keys" before upgrading, I've had issues with outdated keys in the past.in the middle of an update.

Last edited by Orionis (2020-06-17 15:41:38)

Offline

#4 2020-06-17 15:41:51

Head_on_a_Stick
Member
From: London
Registered: 2014-02-20
Posts: 5,436
Website

Re: Issue fetching GPG keys

Is your system date correct and is dirmngr set up correctly?

How about https://bbs.archlinux.org/viewtopic.php?id=220996?

Offline

#5 2020-06-17 17:05:13

loqs
Member
Registered: 2014-03-06
Posts: 10,970

Re: Issue fetching GPG keys

(142/142) checking keys in keyring                                                             [#######################################################] 100%
downloading required keys...
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n] Y
error: key "3B94A80E50A477C7" could not be looked up remotely

What command produce this output and what is the full output of the command?

Offline

#6 2020-06-28 16:23:58

fisherjf
Member
Registered: 2020-06-28
Posts: 2

Re: Issue fetching GPG keys

I got the same error when install meson on a fresh new system

8/8) checking keys in keyring                                                  [##############################################] 100%
downloading required keys...
:: Import PGP key 3B94A80E50A477C7, "Jan Alexander Steffens (heftig) <heftig@archlinux.org>"? [Y/n] y
error: key "3B94A80E50A477C7" could not be looked up remotely
error: required key missing from keyring
error: failed to commit transaction (unexpected error)
Errors occurred, no packages were upgraded.

Then I tried the following:

gpg --search-keys --batch 3B94A80E50A477C7
gpg: directory '/home/mpiuser/.gnupg' created
gpg: keybox '/home/mpiuser/.gnupg/pubring.kbx' created
gpg: error searching keyserver: Server indicated a failure
gpg: keyserver search failed: Server indicated a failure

And:

gpg-connect-agent --dirmngr
> keyserver --resolve hkp://gpg.mit.edu
S # hkps://hkps.pool.sks-keyservers.net:443: resolve failed: Server indicated a failure

Offline

#7 2020-06-28 17:03:35

loqs
Member
Registered: 2014-03-06
Posts: 10,970

Re: Issue fetching GPG keys

@fisherjf That key was included the  20200603-1 release archlinux-keyring by the commit https://git.archlinux.org/archlinux-key … a6efb2150c

Offline

#8 2020-06-28 17:43:27

fisherjf
Member
Registered: 2020-06-28
Posts: 2

Re: Issue fetching GPG keys

@loqs Yeh, I just missed. I used 20200601 iso to setup the new system. After update the keyring, problem solved. Thanks.

Offline

Board footer

Powered by FluxBB