GPG signing failed

peroyhav · 2024-10-21 09:03:05

Hello,
I have used Arch for a short time, and generated a GPG key a couple of months agou for signing GIT commits, but now I get a Bad CA error whenever trying to generate GPG keys:
E.g.
```
peroyhav :~$ echo "test" | gpg --clearsign
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

test
gpg: signing failed: Bad CA certificate
gpg: [stdin]: clear-sign failed: Bad CA certificate
```
Also tried to generate a new GPG key using --generate-key and --full-generate-key, and same issue arrises when trying to generate the key
```
peroyhav@archBox:~$ gpg --full-generate-key
gpg (GnuPG) 2.4.5; Copyright (C) 2024 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Please select what kind of key you want:
(1) RSA and RSA
(2) DSA and Elgamal
(3) DSA (sign only)
(4) RSA (sign only)
(9) ECC (sign and encrypt) *default*
(10) ECC (sign only)
(14) Existing key from card
Your selection? 1
RSA keys may be between 1024 and 4096 bits long.
What keysize do you want? (3072) 4096
Requested keysize is 4096 bits
Please specify how long the key should be valid.
0 = key does not expire
<n> = key expires in n days
<n>w = key expires in n weeks
<n>m = key expires in n months
<n>y = key expires in n years
Key is valid for? (0) 366
Key expires at Wed 22 Oct 2025 11:00:56 AM CEST
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: My Full Name
Email address: test@test.com
Comment:
You selected this USER-ID:
"My Full Name <test@test.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.
gpg: agent_genkey failed: Bad CA certificate
Key generation failed: Bad CA certificate
```

peroyhav · 2024-10-21 09:04:49

Forgot to include result from neofetch, and uname

peroyhav@archBox:~$ neofetch
-` peroyhav@archBox
.o+` ----------------
`ooo/ OS: Arch Linux x86_64
`+oooo: Host: Precision 3440
`+oooooo: Kernel: 6.10.10-arch1-1
-+oooooo+: Uptime: 26 days, 13 hours, 14 mins
`/:-:++oooo+: Packages: 826 (pacman)
`/++++/+++++++: Shell: bash 5.2.37
`/++++++++++++++: Resolution: 3440x1440
`/+++ooooooooooooo/` Terminal: /dev/pts/18
./ooosssso++osssssso+` CPU: Intel i7-10700 (16) @ 4.800GHz
.oossssso-````/ossssss+` GPU: Intel CometLake-S GT2 [UHD Graphics 630]
-osssssso. :ssssssso. Memory: 15425MiB / 47873MiB
:osssssss/ osssso+++.
/ossssssss/ +ssssooo/-
`/ossssso+/:- -:/+osssso+-
`+sso+:-` `.-/+oso:
`++:. `-/+/
.` `/

peroyhav@archBox:~$ uname -a
Linux archBox 6.10.10-arch1-1 #1 SMP PREEMPT_DYNAMIC Thu, 12 Sep 2024 17:21:02 +0000 x86_64 GNU/Linux

seth · 2024-10-21 14:11:46

Please use [code][/code] tags. Edit your post in this regard.

gpg --list-secret-keys

Can you reproduce this
a) on a multi-user.target login (console)
b) w/ a fresh user?

Are you being asked for a password? Are you typically?
(in doubt this is some keyring service screwing up)

AnotherUser · 2024-12-12 07:34:05

Since today i have the exact same problem.
What was your solution @peroyhav ?

Solved: For me it was an intellij update

Last edited by AnotherUser (2024-12-12 07:46:06)

WorMzy · 2024-12-12 10:52:59

Mod note: Closing this abandoned thread.

Arch Linux

#1 2024-10-21 09:03:05

GPG signing failed

#2 2024-10-21 09:04:49

Re: GPG signing failed

#3 2024-10-21 14:11:46

Re: GPG signing failed

#4 2024-12-12 07:34:05

Re: GPG signing failed

#5 2024-12-12 10:52:59

Re: GPG signing failed

Board footer