Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
All Downloads Have Wrong GPG Signature (?) [closed]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Installing Gentoo
View previous topic :: View next topic  
Author Message
GumbyTM
n00b
n00b


Joined: 30 Jun 2019
Posts: 8

PostPosted: Sun Jun 30, 2019 2:56 pm    Post subject: All Downloads Have Wrong GPG Signature (?) [closed] Reply with quote

Trying to get the latest version a Stage 3 tarball all the digests seem to be signed by persons unknown.

i.e.

I appear to have a valid key according to this page https://www.gentoo.org/downloads/signatures/

Code:

gpg --list-keys

pub   rsa4096 2009-08-25 [SC] [expires: 2019-08-22]
      13EBBDBEDE7A12775DFDB1BABB572E0E2D182910
uid           [ unknown] Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>

...


Yet the .asc from the downloads page appear to be signed by an unknown person.



Code:

gpg --verify stage3-amd64-20190626T214502Z.tar.xz.DIGESTS.asc
gpg: Signature made Wed 26 Jun 2019 10:45:51 PM EDT
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
gpg: Can't check signature: No public key



They appear to have signed everything which was all updated only a few days ago.....

e.g.

Code:

ls ./*.asc
./stage3-amd64-20190626T214502Z.tar.xz.DIGESTS.asc
./stage3-amd64-hardened+nomultilib-20190626T214502Z.tar.xz.DIGESTS.asc
./stage3-x32-20190626T214502Z.tar.xz.DIGESTS.asc
./stage4-amd64-minimal-20190626T214502Z.tar.xz.DIGESTS.asc
./stage4-amd64-minimal-nomultilib-20190626T214502Z.tar.xz.DIGESTS.asc

for i in $(ls ./*.asc);do (gpg --verify $i);done
gpg: Signature made Wed 26 Jun 2019 10:45:51 PM EDT
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
gpg: Can't check signature: No public key
gpg: Signature made Thu 27 Jun 2019 03:04:40 PM EDT
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
gpg: Can't check signature: No public key
gpg: Signature made Thu 27 Jun 2019 04:46:10 AM EDT
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
gpg: Can't check signature: No public key
gpg: Signature made Thu 27 Jun 2019 12:05:52 AM EDT
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
gpg: Can't check signature: No public key
gpg: Signature made Thu 27 Jun 2019 04:05:17 AM EDT
gpg:                using RSA key 534E4209AB49EEE1C19D96162C44695DB9F6043D
gpg: Can't check signature: No public key



Apologies in advance if I'm missing something dumb. (I may be a little on tilt as the 17.1 upgrade was not 'seamless' for me)



*edit*

So yeah, something obvious.

Key 534E4209AB49EEE1C19D96162C44695DB9F6043D is a subkey of 13EBBDBEDE7A12775DFDB1BABB572E0E2D182910.

This was recognized once I refreshed the key.

Code:

gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys "13EB BDBE DE7A 1277 5DFD B1BA BB57 2E0E 2D18 2910"
Back to top
View user's profile Send private message
TigerJr
Guru
Guru


Joined: 19 Jun 2007
Posts: 540

PostPosted: Sun Jul 21, 2019 5:21 am    Post subject: Can't install gentoo! Reply with quote

trying to install gentoo, after untaring stage3-amd64-20190716T103222Z.tar.xz in / and portage-latest.tar.bz2 in /mnt/gentoo/usr i recive error
Code:
livecd / # emerge --sync
>>> Syncing repository 'gentoo' into '/var/db/repos/gentoo'...
 * Using keys from /usr/share/openpgp-keys/gentoo-release.asc
 * Refreshing keys from keyserver None ...OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No such file or directory

OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No such file or directory

OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No such file or directory

OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No such file or directory

OpenPGP keyring refresh failed:
gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: No such file or directory

^C

Exiting on signal Signals.SIGINT
livecd / # emerge eix -a


!!! /etc/portage/make.profile is not a symlink and will probably prevent most merges.
!!! It should point into a profile within /var/db/repos/gentoo/profiles/
!!! (You can safely ignore this message when syncing. It's harmless.)


!!! Your current profile is invalid. If you have just changed your profile
!!! configuration, you should revert back to the previous configuration.
!!! Allowed actions are limited to --help, --info, --search, --sync, and
!!! --version.
livecd / # eselect profile list
!!! Error: Failed to get a list of valid profiles
exiting
livecd / #

_________________
Do not use gentoo, it die
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Installing Gentoo All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum