Kwpolska / pkgbuilder

An AUR helper (and library) in Python 3.
http://pkgbuilder.rtfd.org/
BSD 3-Clause "New" or "Revised" License
69 stars 13 forks source link

PGP Key expired #61

Closed fsworld009 closed 5 years ago

fsworld009 commented 5 years ago

Hi,

looks like your key has expired, according to your README it was valid until 12th this month.

For now I have to disable pkgbuilder upgrade on pacman due to invalid key.

Would be nice if you get a chance to renew it, thanks!

Kwpolska commented 5 years ago

Did you refresh the key, as instructed in the README? I'll check with my Arch box later, but the signatures are considered valid by my Fedora server. The last update of the packages was on January 12th, whereas the key was recently extended to 2020-01-01.

-- Chris Warrick https://chriswarrick.com/

On Sat, 19 Jan 2019, 14:53 WorldFS <notifications@github.com wrote:

Hi,

looks like your key has expired, according to your README it was valid until 12th this month.

For now I have to disable pkgbuilder upgrade on pacman due to invalid key.

Would be nice if you get a chance to renew it, thanks!

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/Kwpolska/pkgbuilder/issues/61, or mute the thread https://github.com/notifications/unsubscribe-auth/AAT-m-dTxVQ2is6gBe0W54sZrldIc8a6ks5vEyNegaJpZM4aJJgb .

fsworld009 commented 5 years ago

It works now.

Previously I was getting this error:

$  sudo pacman-key -r 5EAAEA16
gpg: keyserver receive failed: No data
==> ERROR: Remote key not fetched correctly from keyserver.

And doing pacman -Syu will give me

error: pkgbuilder: signature from "Chris Warrick <kwpolska@gmail.com>" is unknown trust

Hence I checked this repo and thought the key was expired. So I disabled pkgbuilder in pacman.conf and do a pacman upgrade, I think keyring has been updated because of this, so now retrieving keys works again.

To summarize the steps I took to resolve this issue (for future reference):

  1. disable pkgbuilder upgrade temporarily
    1. add pkgbuilder to IgnorePkg (comma-separated list)
    2. comment out pkgbuilder repo
      # [pkgbuilder]
      # Server = https://pkgbuilder-repo.chriswarrick.com/
  2. do pacman -Syu
  3. revert pacman.conf
  4. follow README to sign the key again, now pacman -Syu should work and can upgrade pkgbuilder

Thanks for your help :)