search

Alexpux / MSYS2-pacman

MSYS2 port of Arch Linux packman package manager.
GNU General Public License v2.0
164 stars 34 forks source link

signature invalid #58

Open user706 opened 5 years ago

user706 commented 5 years ago

Since today I'm getting signature invalid, i.e.

export LC_ALL=en_US.UTF-8 # for english error message etc.

pacman -Syuu

results in 

error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: msys: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
:: Synchronizing package databases...
 mingw32                                                                                                                      534.8 KiB  32.6M/s 00:00 [###########################################################################################] 100%
 mingw32.sig                                                                                                                  119.0   B  0.00B/s 00:00 [###########################################################################################] 100%
error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: failed to update mingw32 (invalid or corrupted database (PGP signature))
 mingw64                                                                                                                      535.8 KiB  18.7M/s 00:00 [###########################################################################################] 100%
 mingw64.sig                                                                                                                  119.0   B  0.00B/s 00:00 [###########################################################################################] 100%
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: failed to update mingw64 (invalid or corrupted database (PGP signature))
 msys                                                                                                                         178.3 KiB  58.0M/s 00:00 [###########################################################################################] 100%
 msys.sig                                                                                                                     119.0   B  0.00B/s 00:00 [###########################################################################################] 100%
error: msys: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize all databases

Is it just my setup, or are other people also get this?

I've tried around with e.g.

pacman-key --refresh-keys

but it seems to hang forever and finally fails with some error. (PS: I'm behind a proxy, but have http_proxy and https_proxy set.)

Any tips what to do/try? How can I see the current signature and if it's the correct one? Thanks.

user706 commented 5 years ago

OK, so I changed to a different proxy, and then things started working 

error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: msys: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
:: Synchronizing package databases...
 mingw32                                                                                                                                  534.8 KiB  3.09M/s 00:00 [####################################################################################################] 100%
 mingw32.sig                                                                                                                              119.0   B  0.00B/s 00:00 [####################################################################################################] 100%
 mingw64                                                                                                                                  535.8 KiB  3.17M/s 00:00 [####################################################################################################] 100%
 mingw64.sig                                                                                                                              119.0   B  0.00B/s 00:00 [####################################################################################################] 100%
 msys                                                                                                                                     178.3 KiB  3.00M/s 00:00 [####################################################################################################] 100%
 msys.sig                                                                                                                                 119.0   B   116K/s 00:00 [####################################################################################################] 100%
:: Starting core system upgrade...
warning: terminate other MSYS2 programs before proceeding
resolving dependencies...
looking for conflicting packages...

Packages (5) bash-4.4.023-1  filesystem-2018.12-1  mintty-1~2.9.5-1  msys2-runtime-2.11.2-1  pacman-5.1.2-2

Total Download Size:   19.03 MiB
Total Installed Size:  68.25 MiB
Net Upgrade Size:       0.93 MiB

:: Proceed with installation? [Y/n]
Interrupt signal received

Question: I want to know what it was that the first "bad" proxy blocked. Does anybody know what it could be?

Thanks.

(PS: pacman-key --refresh-keys # still waits endlessly so no change there)

user706 commented 5 years ago

Regarding the endless hanging of 

pacman-key --refresh-keys     #hangs for every until timeout

Perhaps it's related to the following:

# following command hangs for ever until timeout
gpg --keyserver hkp://p80.pool.sks-keyservers.net:80  --search-keys alexpux@gmail.com

# following command works perfectly!!!
gpg --keyserver hkp://p80.pool.sks-keyservers.net:80 --keyserver-options "timeout=10 http-proxy=$http_proxy" --search-keys alexpux@gmail.com
user706 commented 5 years ago

Perhaps it's related to the following [...]

Ah indeed it is:

Changing /etc/pacman.d/gnupg/gpg.conf to 

no-greeting
no-permission-warning
lock-never
#keyserver hkp://pool.sks-keyservers.net
keyserver hkp://p80.pool.sks-keyservers.net:80
keyserver-options timeout=10
keyserver-options http-proxy=http://10.56.160.99:8080

now gets the command

pacman-key --refresh-keys

to succeed!!!!

tvallois commented 5 years ago

Hi,

I'm having the same issue but only with msys.

pacman -Syuu error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid :: Synchronizing package databases... mingw32 is up to date mingw64 is up to date msys 178.7 KiB 9.19M/s 00:00 [#####################] 100% msys.sig 119.0 B 0.00B/s 00:00 [#####################] 100% error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid error: failed to update msys (invalid or corrupted database (PGP signature)) error: failed to synchronize all databases

ddfznt commented 5 years ago

Hi,

I'm having the same issue but only with msys.

pacman -Syuu error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid :: Synchronizing package databases... mingw32 is up to date mingw64 is up to date msys 178.7 KiB 9.19M/s 00:00 [#####################] 100% msys.sig 119.0 B 0.00B/s 00:00 [#####################] 100% error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid error: failed to update msys (invalid or corrupted database (PGP signature)) error: failed to synchronize all databases

same here, any solution?

nvatvani commented 5 years ago

Hi, I'm having the same issue but only with msys. pacman -Syuu error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid :: Synchronizing package databases... mingw32 is up to date mingw64 is up to date msys 178.7 KiB 9.19M/s 00:00 [#####################] 100% msys.sig 119.0 B 0.00B/s 00:00 [#####################] 100% error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid error: failed to update msys (invalid or corrupted database (PGP signature)) error: failed to synchronize all databases

same here, any solution?

Yes. See below:

$ gpg --search-keys alexpux@gmail.com gpg: searching for "alexpux@gmail.com" from hkp server keys.gnupg.net (1) Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com 2048 bit RSA key CA25678A, created: 2014-09-28 (2) Alexey Pavlov (Alexpux) alexpux@gmail.com 2048 bit DSA key A47D45A1, created: 2013-11-11 Keys 1-2 of 2 for "alexpux@gmail.com". Enter number(s), N)ext, or Q)uit > 2 gpg: requesting key A47D45A1 from hkp server keys.gnupg.net gpg: key A47D45A1: public key "Alexey Pavlov (Alexpux) alexpux@gmail.com" imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg: imported: 1

How did I know to select the 2nd key of alexpux@gmail.com? You match the DSA key (or email-address if you want to risk it) from:

$ pacman-key --refresh-keys gpg: refreshing 8 keys from hkp://pool.sks-keyservers.net gpg: requesting key 43B6CE4F from hkp server pool.sks-keyservers.net gpg: requesting key CA25678A from hkp server pool.sks-keyservers.net gpg: requesting key AEEA755C from hkp server pool.sks-keyservers.net gpg: requesting key 3E0D0813 from hkp server pool.sks-keyservers.net gpg: requesting key 3E652008 from hkp server pool.sks-keyservers.net gpg: requesting key A47D45A1 from hkp server pool.sks-keyservers.net gpg: requesting key 2C51581E from hkp server pool.sks-keyservers.net gpg: requesting key 4CA56930 from hkp server pool.sks-keyservers.net gpgkeys: key 46316C7650498B2F94CD9D627D0C43A843B6CE4F not found on keyserver gpg: key CA25678A: "Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com" 4 new signatures gpg: key AEEA755C: "Martell Malone (martell) martellmalone@gmail.com" 3 new signatures gpg: key 3E0D0813: "Ray Donnelly (MSYS2 Developer - master key) mingw.android@gmail.com" 2 new signatures gpg: key 3E652008: "Ignacio Casal Quinteiro icquinteiro@gmail.com" 2 new signatures gpg: key A47D45A1: "Alexey Pavlov (Alexpux) alexpux@gmail.com" 1 new signature gpg: key 2C51581E: "Martell Malone (MSYS2 Developer) martellmalone@gmail.com" not changed gpg: key 4CA56930: "Ray Donnelly (MSYS2 Developer) mingw.android@gmail.com" 2 new signatures gpg: Total number processed: 7 gpg: unchanged: 1 gpg: new signatures: 14 gpg: keyserver communications error: key not found gpg: keyserver communications error: bad public key gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model gpg: depth: 0 valid: 1 signed: 4 trust: 0-, 0q, 0n, 0m, 0f, 1u gpg: depth: 1 valid: 4 signed: 3 trust: 0-, 0q, 0n, 4m, 0f, 0u gpg: depth: 2 valid: 3 signed: 0 trust: 3-, 0q, 0n, 0m, 0f, 0u gpg: keyserver refresh failed: bad public key ==> ERROR: A specified local key could not be updated from a keyserver.