search

Debian / debiman

debiman generates a static manpage HTML repository out of a Debian archive
Apache License 2.0
195 stars 46 forks source link

openpgp: signature made by unknown entity #103

Closed bdrung closed 6 years ago

bdrung commented 6 years ago

I tried to upgrade from my locally built debiman to debiman 0.0~git20180319.c870bfe-2 from the Debian package, but the debiman call will fail:

$ debiman -serving_dir=/srv/man -local_mirror=/srv/mirror -sync_suites='' -sync_codenames=wheezy,jessie,stretch,buster -base_url=http://example.com/man
2018/05/02 15:11:54 main.go:185: gathering packages: LoadInRelease(dists/wheezy/InRelease): openpgp: signature made by unknown entity
stapelberg commented 6 years ago

This would mean that the archive you’re hitting is not signed with a key from your /usr/share/keyrings/debian-archive-keyring.gpg.

Can you provide a failing invocation that I can use to reproduce the issue without needing access to your /srv/mirror?

bdrung commented 6 years ago

Right. That local mirror contains our inhouse repository that is signed by our own key. It would be nice if the error message would tell me which key is used for checking. Can I specify a different key?

stapelberg commented 6 years ago

Not right now. That will require some plumbing in pault.ag/go/debian/archive first.

bdrung commented 6 years ago

Then this bug report is about requesting this.