[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: dget complains that public key not found



Looks like this bug is the culprit:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=706919

op 22-04-14 20:02, Yuri Kanivetsky schreef:
Unlikely. First, my man page doesn't list ~/.gnupg/trustedkeys.gpg as a
default location. Then, my dscverify filters out keyrings, which doesn't
exist. And in the end it runs the following command:

cat openssl_0.9.8o-4squeeze14.dsc | gpg --batch --no-options
--no-default-keyring \
     --always-trust --keyring /usr/share/keyrings/debian-keyring.gpg \
     --keyring /usr/share/keyrings/debian-maintainers.gpg

So, it seems like gpg's issue. I answered my serverfault.com question:
http://serverfault.com/questions/587486/dget-complains-that-public-key-not-found


On Tue, Apr 22, 2014 at 8:11 PM, Alad Wenter <the.changing.side@gmail.com>wrote:

Dget seems to rely on a configured gpg. When you invoke gpg (if you don't
need a key pair gpg -k is the easiest way to do so), it creates defaults in
~/.gnupg. The -k or --list-keys argument displays the available keys (none
in this case).

I assume this is because dscverify searches in ~/.gnupg first. From man
dscverify

STANDARD KEYRING LOCATIONS
        By default dscverify searches for the debian-keyring in the fol‐
        lowing locations:

        - ~/.gnupg/trustedkeys.gpg

        - /org/keyring.debian.org/keyrings/debian-keyring.gpg

        - /usr/share/keyrings/debian-keyring.gpg

        - /usr/share/keyrings/debian-maintainers.gpg


op 22-04-14 19:02, Yuri Kanivetsky schreef:

  Could you elaborate on what it does and why dget can't do that on its own?
It indeed solves the problem.


On Tue, Apr 22, 2014 at 6:55 PM, Alad Wenter <the.changing.side@gmail.com
wrote:
  Try before using dget
$ gpg -k

Cheers,

Alad

op 22-04-14 17:48, Yuri Kanivetsky schreef:

   Hi,

Not sure if it's a proper place to ask. I'm trying to backport jessie's
rfc5766-turn-server package to wheezy. I'm following the steps specified
on
this page: https://wiki.debian.org/SimpleBackportCreation But when I'm
trying to download .dsc file, dget says:

$ dget -x
http://ftp.de.debian.org/debian/pool/main/r/rfc5766-
turn-server/rfc5766-turn-server_2.6.5.2-1.dsc
dget: retrieving
http://ftp.de.debian.org/debian/pool/main/r/rfc5766-
turn-server/rfc5766-turn-server_2.6.5.2-1.dsc
     % Total    % Received % Xferd  Average Speed   Time    Time     Time
    Current
                                    Dload  Upload   Total   Spent    Left
    Speed
100  2242  100  2242    0     0  34633      0 --:--:-- --:--:-- --:--:--
65941
dget: retrieving
http://ftp.de.debian.org/debian/pool/main/r/rfc5766-
turn-server/rfc5766-turn-server_2.6.5.2.orig.tar.gz
     % Total    % Received % Xferd  Average Speed   Time    Time     Time
    Current
                                    Dload  Upload   Total   Spent    Left
    Speed
100  225k  100  225k    0     0   567k      0 --:--:-- --:--:-- --:--:--
    613k
dget: retrieving
http://ftp.de.debian.org/debian/pool/main/r/rfc5766-
turn-server/rfc5766-turn-server_2.6.5.2-1.debian.tar.gz
     % Total    % Received % Xferd  Average Speed   Time    Time     Time
    Current
                                    Dload  Upload   Total   Spent    Left
    Speed
100  8530  100  8530    0     0   125k      0 --:--:-- --:--:-- --:--:--
    231k
rfc5766-turn-server_2.6.5.2-1.dsc:
dscverify: rfc5766-turn-server_2.6.5.2-1.dsc failed signature check:
gpg: keyblock resource `/home/yuri/.gnupg/secring.gpg': file open error
gpg: Signature made Fri 11 Oct 2013 09:03:15 PM EEST using RSA key ID
69D5AA83
gpg: fatal: /home/yuri/.gnupg: directory does not exist!
secmem usage: 1408/1408 bytes in 2/2 blocks of pool 1408/32768
Validation FAILED!!

What am I doing wrong? Should I ignore this error? Or does this mean
there's some issues with my server? I updated debian-keyring package, to
no
effect. My hosting provider is hetzner and I'm using his mirrors, but I
confirmed debian-keyring package doesn't differ from what is in other
mirrors. Just in case, this is the question I was asking when I tried to
backport openssl package:
http://serverfault.com/questions/587486/dget-
complains-that-public-key-not-foundThanks
in advance for your replies.


  --
The Ant tries his best to convince the Kid why he shouldn't be squished.
Should we squish bugs? Depends on the bug? Depends on the situation?


--
To UNSUBSCRIBE, email to debian-backports-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Archive: [🔎] 535690E0.5080508@gmail.com">https://lists.debian.org/[🔎] 535690E0.5080508@gmail.com



--
The Ant tries his best to convince the Kid why he shouldn't be squished.
Should we squish bugs? Depends on the bug? Depends on the situation?



--
The Ant tries his best to convince the Kid why he shouldn't be squished.
Should we squish bugs? Depends on the bug? Depends on the situation?


Reply to: