From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 85B6F138334 for ; Wed, 4 Jul 2018 22:36:14 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 480C7E0AD1; Wed, 4 Jul 2018 22:36:04 +0000 (UTC) Received: from icp-osb-irony-out3.external.iinet.net.au (icp-osb-irony-out3.external.iinet.net.au [203.59.1.153]) by pigeon.gentoo.org (Postfix) with ESMTP id 995CFE0ABB for ; Wed, 4 Jul 2018 22:36:02 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2BDDQBTSz1b/16i0HZcHAEBAQQBAQoBA?= =?us-ascii?q?YNJYgNqEiiDeohjjTIIIoULgyuEKYhRgXoLH4NMgQECgiQhNhYBAgEBAQEBAQJ?= =?us-ascii?q?tHAyFNwEFIw8BVgsNCwICJgICITYTBgIBAYMcAYFnAxQQpxERgSGCHBoChD+CM?= =?us-ascii?q?w2BLoE6gQuJOD+BNgyCXIJWgnGCNIJVAodXAoVhQYsmKwmGBoJkgyuDBQaBQEO?= =?us-ascii?q?DSYJGEwOFL4d7gwmHBYEjJQYrgVJNHxmDJAmKUIYGMjABkXABAQ?= X-IPAS-Result: =?us-ascii?q?A2BDDQBTSz1b/16i0HZcHAEBAQQBAQoBAYNJYgNqEiiDeoh?= =?us-ascii?q?jjTIIIoULgyuEKYhRgXoLH4NMgQECgiQhNhYBAgEBAQEBAQJtHAyFNwEFIw8BV?= =?us-ascii?q?gsNCwICJgICITYTBgIBAYMcAYFnAxQQpxERgSGCHBoChD+CMw2BLoE6gQuJOD+?= =?us-ascii?q?BNgyCXIJWgnGCNIJVAodXAoVhQYsmKwmGBoJkgyuDBQaBQEODSYJGEwOFL4d7g?= =?us-ascii?q?wmHBYEjJQYrgVJNHxmDJAmKUIYGMjABkXABAQ?= X-IronPort-AV: E=Sophos;i="5.51,309,1526313600"; d="scan'208";a="91907928" Received: from unknown (HELO mail.vm.localdomain) ([118.208.162.94]) by icp-osb-irony-out3.iinet.net.au with ESMTP; 05 Jul 2018 06:35:58 +0800 Received: from localhost (mail.vm.localdomain [127.0.0.1]) by mail.vm.localdomain (Postfix) with ESMTP id 0D4775EB1A for ; Thu, 5 Jul 2018 06:35:58 +0800 (AWST) X-Virus-Scanned: amavisd-new at localdomain Received: from mail.vm.localdomain ([127.0.0.1]) by localhost (mail.vm.localdomain [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FXqhh1OJTSkB for ; Thu, 5 Jul 2018 06:35:28 +0800 (AWST) Received: from [192.168.44.7] (rattus.lan.localdomain [192.168.44.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: wdk) by mail.vm.localdomain (Postfix) with ESMTPSA id 8B83F5EB0F for ; Thu, 5 Jul 2018 06:34:26 +0800 (AWST) Subject: Re: [gentoo-user] syncing via via git and signature failure To: gentoo-user@lists.gentoo.org References: <496335eb-11e1-fd01-0609-4780dfc73210@iinet.net.au> <2931123.A1fGm12rzv@dell_xps> From: Bill Kenworthy Message-ID: Date: Thu, 5 Jul 2018 06:32:49 +0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Content-Language: en-AU X-Archives-Salt: a11b9503-df1f-45c1-9cf2-9bfac54b0954 X-Archives-Hash: 72220af8fe6da4edc5ea0df2ddfaa0d0 On 05/07/18 02:32, gevisz wrote: > 2018-07-04 21:01 GMT+03:00 Mick : >> On Wednesday, 4 July 2018 18:57:56 BST gevisz wrote: >>> 2018-07-04 11:55 GMT+03:00 Alex Thorne : >>>>> I use rsync and get the following for more than a day now; >>>>> >>>>> !!! Manifest verification failed: >>>>> OpenPGP verification failed: >>>>> gpg: Signature made Wed 04 Jul 2018 04:08:28 AM UTC >>>>> gpg: using RSA key >>>>> E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250 >>>>> gpg: Can't check signature: No public key >>>> I'm seeing this too. For me `app-crypt/gentoo-keys` is somehow no longer >>>> installed and `/var/lib/gentoo/gkeys` is missing. I have no idea how this >>>> happened. Perhaps it somehow got into `emerge --depclean` and I didn't >>>> catch it. >>> No. Gentoo maintainers just overlooked that all Gentoo signing keys expired >>> on July 1, and added new openpgp-keys-gentoo into portage tree only on July >>> 2. >>> >>> So, since July 1, rsync cannot verify any new portage tree and cannot >>> download app-crypt/openpgp-keys-gentoo-release-20180702 >>> >>> It was discovered in the thread >>> "All Gentoo signing key expired and no way to fix it" >> Is there a documented manual workaround we could follow at present, >> irrespective of our sync'ing mechanism of choice? > For me, it somehow worked by manually refreshing the Gentoo signing keys by > executing the following two commands: > # gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release --refresh-keys > # gpg --keyserver hkps.pool.sks-keyservers.net --recv-keys 0xDB6B8C1F96D8BF6D > in different order and sourcing /etc/profile > > But, please, note that I use emerge-webrsync to update the portage tree. > I believe the internal mechanisms are different between git and rsync.  Ive tried manually updating the keys with no luck. BillK