also sprach Michael Vogt <mvo@debian.org> [2009.04.09.0943 +0200]:
> Could you please run (preferably only with the debian.madduck.net
> url): # apt-get update -o debug::acquire::gpgv=true and attach the
> output? I just tested it on my system and it seems to be working
> (your clock was not off for some reason, e.g. to test expiring
> keys?).
I have not touched the clock at all.
pulse:/home/madduck# apt-get update -o debug::acquire::gpgv=true
Get:1 http://debian.madduck.net sid Release.gpg [197B]
Hit http://debian.madduck.net sid Release
99% [Working]inside VerifyGetSigners
gpgv path: /usr/bin/gpgv
Keyring path: /etc/apt/trusted.gpg
Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --ignore-time-conflict --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/debian.madduck.net_repo_dists_sid_Release.gpg /var/lib/apt/lists/debian.madduck.net_repo_dists_sid_Release
99% [Release gpgv 9914]Read: [GNUPG:] KEYEXPIRED 1182334739
Got KEYEXPIRED!
Read: [GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
Read: [GNUPG:] SIG_ID D2M7RKDiTEH9ZrZjtANG3Hfmnus 2009-04-07 1239122210
Read: [GNUPG:] EXPKEYSIG A4BA872BD5B9E51E madduck's archive signing key (http://debian.madduck.net/repo) <archive@debian.madduck.net>
Read: [GNUPG:] VALIDSIG 57260E2A6376CB441AE90B77A4BA872BD5B9E51E 2009-04-07 1239122210 0 4 0 17 2 00 57260E2A6376CB441AE90B77A4BA872BD5B9E51E
gpgv exited
Err http://debian.madduck.net sid Release
Get:2 http://debian.madduck.net sid Release [9914B]
99% [2 Release gpgv 9914]yGetSigners
gpgv path: /usr/bin/gpgv
Keyring path: /etc/apt/trusted.gpg
Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --ignore-time-conflict --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/debian.madduck.net_repo_dists_sid_Release.gpg /var/lib/apt/lists/debian.madduck.net_repo_dists_sid_Release
Read: [GNUPG:] KEYEXPIRED 1182334739
Got KEYEXPIRED!
Read: [GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
Read: [GNUPG:] SIG_ID D2M7RKDiTEH9ZrZjtANG3Hfmnus 2009-04-07 1239122210
Read: [GNUPG:] EXPKEYSIG A4BA872BD5B9E51E madduck's archive signing key (http://debian.madduck.net/repo) <archive@debian.madduck.net>
Read: [GNUPG:] VALIDSIG 57260E2A6376CB441AE90B77A4BA872BD5B9E51E 2009-04-07 1239122210 0 4 0 17 2 00 57260E2A6376CB441AE90B77A4BA872BD5B9E51E
gpgv exited
Ign http://debian.madduck.net sid Release
Ign http://debian.madduck.net sid/main Packages/DiffIndex
Ign http://debian.madduck.net sid/main Sources/DiffIndex
Ign http://debian.madduck.net sid/main Packages
Ign http://debian.madduck.net sid/main Sources
Hit http://debian.madduck.net sid/main Packages
Hit http://debian.madduck.net sid/main Sources
Fetched 10.1kB in 0s (72.3kB/s)
Reading package lists... Done
W: GPG error: http://debian.madduck.net sid Release: The following signatures were invalid: KEYEXPIRED 1182334739
W: You may want to run apt-get update to correct these problems
> > pulse:~# wget -q http://debian.madduck.net/repo/gpg/a4ba872bd5b9e51e.key.asc http://debian.madduck.net/repo/dists/sid/Release{,.gpg}
> > pulse:~# gpg --import < a4ba872bd5b9e51e.key.asc
> > gpg: /root/.gnupg/trustdb.gpg: trustdb created
> > gpg: key D5B9E51E: public key "madduck's archive signing key (http://debian.madduck.net/repo) <archive@debian.madduck.net>" imported
> > gpg: Total number processed: 1
> > gpg: imported: 1
> > gpg: no ultimately trusted keys found
> > pulse:~# gpg --verify Release.gpg Release
> [..]
>
> Could you please also run:
> # gpgv --status-fd 1 Release.gpg Release
After playing around with this and having to use --keyring,
I eventually found out that I hadn't updated the key in
/etc/apt/trusted.gpg in the chroot. :)
So it seems to work. Thanks!
--
.''`. martin f. krafft <madduck@d.o> Related projects:
: :' : proud Debian developer http://debiansystem.info
`. `'` http://people.debian.org/~madduck http://vcs-pkg.org
`- Debian - when you have better things to do than fixing systems
fitter, healthier, more productive
like a pig, in a cage, on antibiotics
-- radiohead
Attachment:
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)