Re: apt - missing trustedkeys.gpg to verify source package

[Sven Joachim <svenjoac@gmx.de>]

On 2013-03-15 20:23 +0100, Alois Mahdal wrote:

> Hello,
>
> when downloading source packages, I see error regarding
> trustedkeys.gpg:
>
>     $ apt-get source mousepad
>     [...]
>     Fetched 454 kB in 0s (1,050 kB/s)
>     gpgv: keyblock resource `/home/me/.gnupg/trustedkeys.gpg':
>     file open error

${HOME}/.gnupg/trustedkeys.gpg is the default keyring for gpgv, see the
manpage.  You need to create it yourself (e.g. export your own public
key(s) to it).

>     gpgv: Signature made Sat 30 Jun 2012
>     05:49:12 PM CEST using RSA key ID 71EF0BA8 gpgv: Can't
>     check signature: public key not found dpkg-source: warning:
>     failed to verify signature on ./mousepad_0.2.16-6.dsc
>     [...]

Install the debian-keyring package.  Note that you still may get the
warning if the .dsc file has been signed with a key that is no longer in
the Debian keyring.

Cheers,
       Sven