FS#53492 - Invalid signature

Attached to Project: Community Packages
Opened by desbma (desbma) - Tuesday, 28 March 2017, 21:18 GMT
Last edited by Jelle van der Waa (jelly) - Wednesday, 29 March 2017, 09:30 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Jelle van der Waa (jelly)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 1
Private No

Details

I can not install this package because of failing signature check (disabled key) :

$ sudo pacman -Sy libaacs
:: Synchronizing package databases...
core is up to date
extra is up to date
community is up to date
multilib is up to date
resolving dependencies...
looking for conflicting packages...

Package (1) New Version Net Change Download Size

community/libaacs 0.8.1-1 0.12 MiB 0.05 MiB

Total Download Size: 0.05 MiB
Total Installed Size: 0.12 MiB

:: Proceed with installation? [Y/n]
:: Retrieving packages...
libaacs-0.8.1-1-x86_64 47.0 KiB 1565K/s 00:00 [####################################################################] 100%
(1/1) checking keys in keyring [####################################################################] 100%
(1/1) checking package integrity [####################################################################] 100%
error: libaacs: key "Martin Wimpress (http://www.flexion.org) <martin@flexion.org>" is disabled
:: File /var/cache/pacman/pkg/libaacs-0.8.1-1-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.


All packages signed with Martin Wimpress's key seem to be affected, see https://bugs.archlinux.org/task/53435

I have no trouble installing/updating other packages.
This task depends upon

Closed by  Jelle van der Waa (jelly)
Wednesday, 29 March 2017, 09:30 GMT
Reason for closing:  Fixed
Additional comments about closing:  Rebuild python2-pybonjour and libaacs
Comment by Eli Schwartz (eschwartz) - Tuesday, 28 March 2017, 21:26 GMT
grepping the sync databases, this and python2-pybonjour are still signed by Martin Wimpress. I'm actually a bit surprised no one grepped for and rebuilt/dropped all his packages...
Comment by Jelle van der Waa (jelly) - Wednesday, 29 March 2017, 09:25 GMT
libaacs rebuild, python2-pybonjour will be rebuild too.

Loading...