Arch Linux

weirdman

Member

Registered: 2022-07-01

Posts: 3

Kernel compilation issue - gpg does not import "bad" key

I'm sorry but I need to bump an old issue that keeps recurring over time:

https://bbs.archlinux.org/viewtopic.php?id=268750 still unresolved

I tried:
- rebuilding the arch keyring
- downloading from various keyservers using --keyserver options
- manually downloading and importing key
- allow_weak_digest (md5)
- importing subkeys and key 19802F8B0D70FC30 instead of 3B94A80E50A477C7

Still does not work. Maybe the old "solved" topics on this forum worked for a particular moment in time and something changed?

I finally tried this and it shows the reason "bad signature" :

weirdman@archlinux: linux$ gpg --import 1.pub 
gpg: key 19802F8B0D70FC30: 6 duplicate signatures removed
gpg: key 19802F8B0D70FC30: 30 signatures not checked due to missing keys
gpg: key 19802F8B0D70FC30: 1 bad signature
gpg: key 19802F8B0D70FC30: 6 signatures reordered
gpg: key 19802F8B0D70FC30: "Jan Alexander Steffens (heftig) <jan.steffens@gmail.com>" 25 new signatures
gpg: Total number processed: 1
gpg:         new signatures: 25
gpg: no ultimately trusted keys found

gpg --recv-keys 3B94A80E50A477C7
gpg: key 19802F8B0D70FC30: rejected by import screener
gpg: Total number processed: 1

I tried multiple keyservers.... the "[SOLVED]" topics don't see up to date... please help

weirdman

Member

Registered: 2022-07-01

Posts: 3

Re: Kernel compilation issue - gpg does not import "bad" key

I want to add that with compiling a different kernel (the hardened package) there are no problems importing other keys:

gpg: key FC1B547C8D8172C8: 19 duplicate signatures removed
gpg: key FC1B547C8D8172C8: public key "Levente Polyak (anthraxx) <levente@leventepolyak.net>" imported
gpg: Total number processed: 1
gpg:               imported: 1
gpg: key FC1B547C8D8172C8: 19 duplicate signatures removed
gpg: key FC1B547C8D8172C8: public key "Levente Polyak (anthraxx) <levente@leventepolyak.net>" imported
gpg: Total number processed: 1
gpg:               imported: 1

linux-hardened$ gpg --recv-keys 38DBBDC86092693E
gpg: key 38DBBDC86092693E: public key "Greg Kroah-Hartman <gregkh@linuxfoundation.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1


linux-hardened$ gpg --recv-keys 38DBBDC86092693E
gpg: key 38DBBDC86092693E: public key "Greg Kroah-Hartman <gregkh@linuxfoundation.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1

It's really just this one key in the default kernel package build: with key id 3B94A80E50A477C7

Last edited by weirdman (2022-07-01 09:19:25)

loqs

Member

Registered: 2014-03-06

Posts: 17,362

Re: Kernel compilation issue - gpg does not import "bad" key

Which kernel are you trying to build?

JoeyCorleone

Member

Registered: 2022-01-22

Posts: 88

Re: Kernel compilation issue - gpg does not import "bad" key

iirc, this is how I used to verify the key. Not sure if it applies anymore.

I know you have tried most of the things mentioned in the wiki, just wanted to mention it as well.