[gentoo-user] gnupg: can't use keyservers

[gentoo-user] gnupg: can't use keyservers

[Stefan G. Weichinger]

Greets,

I recently tried to get/update keys from keyservers and always got stuff
like:

: can't connect to `pgp.zdv.uni-mainz.de': host not found
gpgkeys: HTTP fetch error 7: couldn't connect: Not found


Didn't matter which keyserver, also tried it from the shell (and not
from enigmail/thunderbird).

google showed me:

http://bugs.sabayon.org/show_bug.cgi?id=2781

while I couldn't find anything in the gentoo bugzilla.

Re-emerged curl, enigmail, gnupg, even thunderbird (just in case) ...
still the same issues. I also tried an older release of curl ...

Did anyone hit this as well, and found the solution?

Thanks, Stefan

Re: [gentoo-user] gnupg: can't use keyservers

[Stefan G. Weichinger]

Am 16.02.2012 10:23, schrieb Stefan G. Weichinger:
> 
> Greets,
> 
> I recently tried to get/update keys from keyservers and always got stuff
> like:
> 
> : can't connect to `pgp.zdv.uni-mainz.de': host not found
> gpgkeys: HTTP fetch error 7: couldn't connect: Not found
> 
> 
> Didn't matter which keyserver, also tried it from the shell (and not
> from enigmail/thunderbird).
> 
> google showed me:
> 
> http://bugs.sabayon.org/show_bug.cgi?id=2781
> 
> while I couldn't find anything in the gentoo bugzilla.
> 
> Re-emerged curl, enigmail, gnupg, even thunderbird (just in case) ...
> still the same issues. I also tried an older release of curl ...
> 
> Did anyone hit this as well, and found the solution?

*bump*

Re: [gentoo-user] gnupg: can't use keyservers

[Mick]

On 20 February 2012 12:14, Stefan G. Weichinger <lists@xunil.at> wrote:
> Am 16.02.2012 10:23, schrieb Stefan G. Weichinger:
>>
>> Greets,
>>
>> I recently tried to get/update keys from keyservers and always got stuff
>> like:
>>
>> : can't connect to `pgp.zdv.uni-mainz.de': host not found
>> gpgkeys: HTTP fetch error 7: couldn't connect: Not found
>>
>>
>> Didn't matter which keyserver, also tried it from the shell (and not
>> from enigmail/thunderbird).
>>
>> google showed me:
>>
>> http://bugs.sabayon.org/show_bug.cgi?id=2781
>>
>> while I couldn't find anything in the gentoo bugzilla.
>>
>> Re-emerged curl, enigmail, gnupg, even thunderbird (just in case) ...
>> still the same issues. I also tried an older release of curl ...
>>
>> Did anyone hit this as well, and found the solution?
>
> *bump*

Well, I did not have such a problem last time I tried - although every
now and then I have found that the key servers get busy and
connections do not succeed.

Have you tried connecting to a different keyserver?

PS.  Also, make sure that you do not attempt connections too
frequently in case some of the key servers are blacklisting repeat
offenders.

-- 
Regards,
Mick

Re: [gentoo-user] gnupg: can't use keyservers

[Stefan G. Weichinger]

Am 20.02.2012 16:47, schrieb Mick:

> Well, I did not have such a problem last time I tried - although every
> now and then I have found that the key servers get busy and
> connections do not succeed.
> 
> Have you tried connecting to a different keyserver?

Yep, I did. Also tried it manually via shell (gnupg-commandline).

Same error:

: can't connect to `subkeys.pgp.net': host not found
gpgkeys: HTTP fetch error 7: couldn't connect: Not found

> PS.  Also, make sure that you do not attempt connections too
> frequently in case some of the key servers are blacklisting repeat
> offenders.

Thanks for the hint, there was enough time between my efforts ...

[gentoo-user] Re: gnupg: can't use keyservers

[walt]

On 02/20/2012 08:23 AM, Stefan G. Weichinger wrote:
> Am 20.02.2012 16:47, schrieb Mick:
> 
>> Well, I did not have such a problem last time I tried - although every
>> now and then I have found that the key servers get busy and
>> connections do not succeed.
>>
>> Have you tried connecting to a different keyserver?
> 
> Yep, I did. Also tried it manually via shell (gnupg-commandline).
> 
> Same error:
> 
> : can't connect to `subkeys.pgp.net': host not found
> gpgkeys: HTTP fetch error 7: couldn't connect: Not found

Have you sniffed your network traffic to see if gnupg is actually
sending anything?

Re: [gentoo-user] Re: gnupg: can't use keyservers

[Stefan G. Weichinger]

Am 2012-02-20 20:34, schrieb walt:

>> Same error:
>>
>> : can't connect to `subkeys.pgp.net': host not found
>> gpgkeys: HTTP fetch error 7: couldn't connect: Not found
> 
> Have you sniffed your network traffic to see if gnupg is actually
> sending anything?

no. Right now I repeated it on my thinkpad and it works now ... gotta
repeat that on my desktop machine tomorrow.

Thanks, Stefan

Re: [gentoo-user] Re: gnupg: can't use keyservers

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 923 bytes --]

On Monday 20 Feb 2012 19:52:40 Stefan G. Weichinger wrote:
> Am 2012-02-20 20:34, schrieb walt:
> >> Same error:
> >> : can't connect to `subkeys.pgp.net': host not found
> >> 
> >> gpgkeys: HTTP fetch error 7: couldn't connect: Not found
> > 
> > Have you sniffed your network traffic to see if gnupg is actually
> > sending anything?
> 
> no. Right now I repeated it on my thinkpad and it works now ... gotta
> repeat that on my desktop machine tomorrow.


I just tried it again and it works from here.  I can see 7 keys on that 
server.

Covering all bases and just in case, you're not trying to connect behind some 
firewall/gateway that is blocking all but http/https packets?

Have you checked if you can ping the server?


My gpg version is:  

app-crypt/gnupg-2.0.17(09:22:32 02/20/11)(bzip2 ldap nls -adns -caps -doc -
openct -pcsc-lite -selinux -smartcard -static)
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-user] Re: gnupg: can't use keyservers

[Stefan G. Weichinger]

Am 2012-02-20 21:21, schrieb Mick:

> I just tried it again and it works from here.  I can see 7 keys on
> that server.
> 
> Covering all bases and just in case, you're not trying to connect
> behind some firewall/gateway that is blocking all but http/https
> packets?

Nope.

> Have you checked if you can ping the server?

Yes, sir! ;-)

> My gpg version is:
> 
> app-crypt/gnupg-2.0.17(09:22:32 02/20/11)(bzip2 ldap nls -adns
> -caps -doc - openct -pcsc-lite -selinux -smartcard -static)

2.0.18 there, ~amd64

As mentioned, I will have access again tomorrow. On my thinkpad,
~amd64 as well, it works right now ...

Stefan

Re: [gentoo-user] Re: gnupg: can't use keyservers

[Stefan G. Weichinger]

Am 20.02.2012 21:35, schrieb Stefan G. Weichinger:
> Am 2012-02-20 21:21, schrieb Mick:
> 
>> I just tried it again and it works from here.  I can see 7 keys on
>> that server.
>>
>> Covering all bases and just in case, you're not trying to connect
>> behind some firewall/gateway that is blocking all but http/https
>> packets?
> 
> Nope.
> 
>> Have you checked if you can ping the server?
> 
> Yes, sir! ;-)
> 
>> My gpg version is:
>>
>> app-crypt/gnupg-2.0.17(09:22:32 02/20/11)(bzip2 ldap nls -adns
>> -caps -doc - openct -pcsc-lite -selinux -smartcard -static)
> 
> 2.0.18 there, ~amd64
> 
> As mentioned, I will have access again tomorrow. On my thinkpad,
> ~amd64 as well, it works right now ...

more info:

~ $ /usr/bin/gpg2 --charset utf8 --batch --no-tty --status-fd 2
--keyserver subkeys.pgp.net --send-keys 0x295CB83D55D0FCE6
gpg: sende Schlüssel 55D0FCE6 auf den hkp-Server subkeys.pgp.net
: can't connect to `subkeys.pgp.net': host not found
gpgkeys: HTTP post error 7: couldn't connect: Not found
gpg: interner Fehler Schlüsselserver
gpg: Senden an Schlüsselserver fehlgeschlagen: Schlüsselserverfehler

~ $ ping subkeys.pgp.net
PING subkeys.pgp.net (173.164.61.44) 56(84) bytes of data.
64 bytes from noc.nayr.net (173.164.61.44): icmp_req=1 ttl=52 time=177 ms
64 bytes from noc.nayr.net (173.164.61.44): icmp_req=2 ttl=52 time=180 ms
^C

---

app-crypt/gnupg

Installed versions:  2.0.18(20:05:24 13.02.2012)(bzip2 nls readline
static usb -adns -doc -ldap -selinux -smartcard)

Re: [gentoo-user] Re: gnupg: can't use keyservers

[Mick]

[-- Attachment #1: Type: Text/Plain, Size: 1895 bytes --]

On Tuesday 21 Feb 2012 15:52:50 Stefan G. Weichinger wrote:
> Am 20.02.2012 21:35, schrieb Stefan G. Weichinger:
> > Am 2012-02-20 21:21, schrieb Mick:
> >> I just tried it again and it works from here.  I can see 7 keys on
> >> that server.
> >> 
> >> Covering all bases and just in case, you're not trying to connect
> >> behind some firewall/gateway that is blocking all but http/https
> >> packets?
> > 
> > Nope.
> > 
> >> Have you checked if you can ping the server?
> > 
> > Yes, sir! ;-)
> > 
> >> My gpg version is:
> >> 
> >> app-crypt/gnupg-2.0.17(09:22:32 02/20/11)(bzip2 ldap nls -adns
> >> -caps -doc - openct -pcsc-lite -selinux -smartcard -static)
> > 
> > 2.0.18 there, ~amd64
> > 
> > As mentioned, I will have access again tomorrow. On my thinkpad,
> > ~amd64 as well, it works right now ...
> 
> more info:
> 
> ~ $ /usr/bin/gpg2 --charset utf8 --batch --no-tty --status-fd 2
> --keyserver subkeys.pgp.net --send-keys 0x295CB83D55D0FCE6
> gpg: sende Schlüssel 55D0FCE6 auf den hkp-Server subkeys.pgp.net
> 
> : can't connect to `subkeys.pgp.net': host not found
> 
> gpgkeys: HTTP post error 7: couldn't connect: Not found
> gpg: interner Fehler Schlüsselserver
> gpg: Senden an Schlüsselserver fehlgeschlagen: Schlüsselserverfehler
> 
> ~ $ ping subkeys.pgp.net
> PING subkeys.pgp.net (173.164.61.44) 56(84) bytes of data.
> 64 bytes from noc.nayr.net (173.164.61.44): icmp_req=1 ttl=52 time=177 ms
> 64 bytes from noc.nayr.net (173.164.61.44): icmp_req=2 ttl=52 time=180 ms
> ^C
> 
> ---
> 
> app-crypt/gnupg
> 
> Installed versions:  2.0.18(20:05:24 13.02.2012)(bzip2 nls readline
> static usb -adns -doc -ldap -selinux -smartcard)

Do you get the same if you try just a vanilla search?

gpg --keyserver subkeys.pgp.net --search-keys 0x295CB83D55D0FCE6

here it works fine (tried it twice).
-- 
Regards,
Mick

[-- Attachment #2: This is a digitally signed message part. --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

Re: [gentoo-user] SOLVED: gnupg: can't use keyservers

[Stefan G. Weichinger]

removed USE-flag "static", rebuilt gnupg, restarted gpg-agent and used
keyserver "pgp.mit.edu".

Works now.

Thanks, Stefan