FS#71854 - signature is unknown trust for chezmoi

Attached to Project: Arch Linux
Opened by David Doblas (daviddoji) - Tuesday, 17 August 2021, 11:57 GMT
Last edited by Andreas Radke (AndyRTR) - Tuesday, 31 August 2021, 19:10 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To No-one
Architecture x86_64
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
Trying to install chezmoi, I got the following message:
```
error: chezmoi: signature from "Daurnimator <quae@daurnimator.com>" is unknown trust
:: File /var/cache/pacman/pkg/chezmoi-2.1.5-1-x86_64.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] Y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
```

Additional info:
* package version(s)
* config and/or log files etc.
* link to upstream bug report, if any

Steps to reproduce:

sudo pacman -S chezmoi
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Tuesday, 31 August 2021, 19:10 GMT
Reason for closing:  Not a bug
Comment by Morten Linderud (Foxboron) - Tuesday, 17 August 2021, 12:04 GMT
Output of pacman-key --list-keys daurnimator and `pacman -Q archlinux-keyring` please
Comment by David Doblas (daviddoji) - Tuesday, 17 August 2021, 12:06 GMT
pacman -Q archlinux-keyring
archlinux-keyring 20210802-1


pacman-key --list-sigs Daurnimator
gpg: Note: trustdb not writable
pub rsa4096 2015-01-25 [SC] [expired: 2021-08-12]
954A3772D62EF90E4B31FBC6C91A9911192C187A
uid [ expired] Daurnimator <quae@daurnimator.com>
sig 3348882F6AC6A4C2 2018-12-23 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig 9B729B06A680C281 2019-01-21 Bart\xc5\x82omiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
sig A88E23E377514E00 2018-12-24 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig BA1DFB64FFF979E7 2019-04-10 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig 3 C91A9911192C187A 2019-08-13 Daurnimator <quae@daurnimator.com>
sig 6BC26A17B9B7018A 2019-10-05 Alad Wenter <alad@archlinux.org>
sig 94657AB20F2A092B 2019-10-05 Andreas Radke <andyrtr@archlinux.org>
sig D6D055F927843F1C 2019-09-29 Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig 12C87A28FEAC6B20 2019-10-07 Maxim Baz <pgp@maximbaz.com>
sig 7258734B41C31549 2019-10-05 David Runge <dvzrv@archlinux.org>
sig 89AA27231C530226 2019-10-10 Konstantin Gizdov <arch@kge.pw>
uid [ expired] Daurnimator <daurnimator@archlinux.org>
sig 3348882F6AC6A4C2 2019-08-25 Pierre Schmitz (Arch Linux Master Key) <pierre@master-key.archlinux.org>
sig A88E23E377514E00 2019-08-25 Florian Pritz (Arch Linux Master Key) <florian@master-key.archlinux.org>
sig 3 C91A9911192C187A 2019-08-13 Daurnimator <quae@daurnimator.com>
sig 6BC26A17B9B7018A 2019-10-05 Alad Wenter <alad@archlinux.org>
sig 94657AB20F2A092B 2019-10-05 Andreas Radke <andyrtr@archlinux.org>
sig D6D055F927843F1C 2019-09-29 Levente Polyak (Arch Linux Master Key) <anthraxx@master-key.archlinux.org>
sig 12C87A28FEAC6B20 2019-10-07 Maxim Baz <pgp@maximbaz.com>
sig BA1DFB64FFF979E7 2019-10-11 Allan McRae (Arch Linux Master Key) <allan@master-key.archlinux.org>
sig 7258734B41C31549 2019-10-05 David Runge <dvzrv@archlinux.org>
sig 89AA27231C530226 2019-10-10 Konstantin Gizdov <arch@kge.pw>
sig 9B729B06A680C281 2019-10-11 Bart\xc5\x82omiej Piotrowski (Arch Linux Master Key) <bpiotrowski@master-key.archlinux.org>
Comment by Morten Linderud (Foxboron) - Tuesday, 17 August 2021, 12:13 GMT
`--list-keys` not `--list-sigs`
Comment by David Doblas (daviddoji) - Tuesday, 17 August 2021, 12:15 GMT
My bad :( It looks like the signature expired some days ago

pacman-key --list-keys Daurnimator
gpg: Note: trustdb not writable
pub rsa4096 2015-01-25 [SC] [expired: 2021-08-12]
954A3772D62EF90E4B31FBC6C91A9911192C187A
uid [ expired] Daurnimator <quae@daurnimator.com>
uid [ expired] Daurnimator <daurnimator@archlinux.org>
Comment by Morten Linderud (Foxboron) - Tuesday, 17 August 2021, 12:18 GMT
No the lifetime has been extended with the release of 20210802-1. I'm not sure why you are seeing an old key.
Comment by Morten Linderud (Foxboron) - Tuesday, 17 August 2021, 12:18 GMT
pacman-key --refresh should pull the new key from WKD fwiw. But it's still weird.
Comment by David Doblas (daviddoji) - Tuesday, 17 August 2021, 12:32 GMT
That worked, thanks!

Loading...