Arch Linux

an4rki_

Member

Registered: 2022-08-16

Posts: 50

[SOLVED] ERROR: One or more PGP signatures could not be verified!

I am getting this error while installing librewolf:

[an4rki@arch librewolf]$ makepkg -si
==> Making package: librewolf-bin 103.0.2-1 (Tue 16 Aug 2022 02:54:53 PM IST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found librewolf-103.0.2-1-x86_64.pkg.tar.zst
  -> Found librewolf-103.0.2-1-x86_64.pkg.tar.zst.sig
==> Validating source_x86_64 files with sha256sums...
    librewolf-103.0.2-1-x86_64.pkg.tar.zst ... Passed
    librewolf-103.0.2-1-x86_64.pkg.tar.zst.sig ... Skipped
==> Verifying source file signatures with gpg...
    librewolf-103.0.2-1-x86_64.pkg.tar.zst ... FAILED (unknown public key 2954CC8585E27A3F)
==> ERROR: One or more PGP signatures could not be verified!

I tried the following to fix the issue:

[an4rki@arch librewolf]$ gpg --recv-key 2954CC8585E27A3F

But that did not fix the issue, I get the following output:

gpg: keyserver receive failed: Invalid argument

What am I missing/doing wrong here?

Thanks.

Last edited by an4rki_ (2022-08-25 07:29:21)

---

"A computer is like air conditioning - it becomes useless when you open Windows." - Linus Torvalds
Arch + DWM

dogknowsnx

Member

Registered: 2021-04-12

Posts: 648

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

Mind the 's'

gpg --recv-keys 2954CC8585E27A3F

---

RI - Rest your Eyes and Self

"We are eternal, all this pain is an illusion" - Maynard James Keenan

loqs

Member

Registered: 2014-03-06

Posts: 17,372

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

Mind the 's'

gpg --recv-keys 2954CC8585E27A3F

gpg --recv-key 2954CC8585E27A3F
gpg: key D2845E1305D6E801: 4 duplicate signatures removed
gpg: key D2845E1305D6E801: 4 signatures reordered
gpg: key D2845E1305D6E801: public key "ohfp repo key (Repository signing key for privacyshark repo) <1813007-ohfp@users.noreply.gitlab.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
$ gpg --recv-keys 2954CC8585E27A3F
gpg: key D2845E1305D6E801: 4 duplicate signatures removed
gpg: key D2845E1305D6E801: 4 signatures reordered
gpg: key D2845E1305D6E801: "ohfp repo key (Repository signing key for privacyshark repo) <1813007-ohfp@users.noreply.gitlab.com>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

dogknowsnx

Member

Registered: 2021-04-12

Posts: 648

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

@loqs "..and Bob's your uncle" ¯\_ (ツ)_/¯

---

RI - Rest your Eyes and Self

"We are eternal, all this pain is an illusion" - Maynard James Keenan

an4rki_

Member

Registered: 2022-08-16

Posts: 50

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

Mind the 's'

gpg --recv-keys 2954CC8585E27A3F

Getting the same error regardless of s or no s.

---

"A computer is like air conditioning - it becomes useless when you open Windows." - Linus Torvalds
Arch + DWM

cloverskull

Member

Registered: 2018-09-30

Posts: 172

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

Posting from mobile, excuse brevity - I think you might need to use the —lsign arg after —recv-keys

Scimmia

Fellow

Registered: 2012-09-01

Posts: 11,559

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

No, DO NOT use --lsign.

loqs

Member

Registered: 2014-03-06

Posts: 17,372

Re: [SOLVED] ERROR: One or more PGP signatures could not be verified!

You could also acquire the signing key from https://gitlab.com/ohfp -> key icon upper right.  Then Import ohfp.gpg.