Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 410099 - Incorrect keyserver listed for Release Engineering GPG keys
Summary: Incorrect keyserver listed for Release Engineering GPG keys
Status: RESOLVED WORKSFORME
Alias: None
Product: Documentation
Classification: Unclassified
Component: Project-specific documentation (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Release Team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-03-29 06:47 UTC by Justus Ranvier
Modified: 2014-05-25 20:12 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Justus Ranvier 2012-03-29 06:47:24 UTC
http://www.gentoo.org/proj/en/releng/

Lists subkeys.pgp.net as the location for the GPG signing keys however none of the keys listed can be downloaded from there:

$ gpg --keyserver subkeys.pgp.net --recv-keys 0x96D8BF6D 0x17072058 0x2D182910 0x239C75C4 0xD8BA32AA 0x7DDAD20D
gpg: requesting key 96D8BF6D from hkp server subkeys.pgp.net
gpg: requesting key 17072058 from hkp server subkeys.pgp.net
gpg: requesting key 2D182910 from hkp server subkeys.pgp.net
gpg: requesting key 239C75C4 from hkp server subkeys.pgp.net
gpg: requesting key D8BA32AA from hkp server subkeys.pgp.net
gpg: requesting key 7DDAD20D from hkp server subkeys.pgp.net
gpgkeys: key 96D8BF6D not found on keyserver
gpgkeys: key 17072058 not found on keyserver
gpgkeys: key 2D182910 not found on keyserver
gpgkeys: key 239C75C4 not found on keyserver
gpgkeys: key D8BA32AA not found on keyserver
gpgkeys: key 7DDAD20D not found on keyserver
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

The keys can successfully be retrieved from keys.gnupg.net.
Comment 1 Jorge Manuel B. S. Vicetto (RETIRED) gentoo-dev 2012-08-26 18:56:40 UTC
These keys are still valid and I was able to get them from the subkeys.pgp.net server on a 2nd try here on my laptop and on the first try on my server.

pub   4096R/96D8BF6D 2011-11-25 [expires: 2015-11-24]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)
sub   4096R/C9189250 2011-11-25 [expires: 2015-11-24]

pub   1024D/17072058 2004-07-20 [expires: 2016-08-13]
uid                  Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>
sub   2048g/1415B4ED 2004-07-20 [expires: 2016-08-13]

pub   4096R/2D182910 2009-08-25 [expires: 2013-08-24]
uid                  Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>


The following keys were expired or revoked, but do show up as well.

pub   1024D/239C75C4 2007-11-25 [expired: 2012-05-23]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)

pub   1024D/D8BA32AA 2004-11-11 [revoked: 2007-11-25]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)

pub   1024D/7DDAD20D 2005-11-23 [revoked: 2007-11-25]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)


I'm closing as WORKSFORME. If you have trouble fetching the keys again, please leave a comment here.
Comment 2 Kristian Fiskerstrand (RETIRED) gentoo-dev 2014-05-25 20:12:59 UTC
subkeys.pgp.net is a static pool, that I currently see returning 3 servers of which only one is active and syncronizing. 

116.240.198.71 - nonresponsive 
223.252.21.101 - OK
195.113.19.83 - nonresponsive

I recommend using pool.sks-keyservers.net as an alternative on the releng website (and other places)