Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 730454 - app-crypt/gentoo-keys-201901130136 - all keys have expired
Summary: app-crypt/gentoo-keys-201901130136 - all keys have expired
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal with 2 votes (vote)
Assignee: Gentoo-keys project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-07-02 15:17 UTC by Martin Filo
Modified: 2022-01-01 22:39 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Martin Filo 2020-07-02 15:17:25 UTC
Hello,

All keys provided by package gentoo-keys-201901130136 are expired

$ gpg --homedir /var/lib/gentoo/gkeys/keyrings/gentoo/release/ -k
gpg: WARNING: unsafe ownership on homedir '/var/lib/gentoo/gkeys/keyrings/gentoo/release'
gpg: Note: trustdb not writable
/var/lib/gentoo/gkeys/keyrings/gentoo/release/pubring.gpg
---------------------------------------------------------
pub   rsa4096 2014-10-03 [C] [expired: 2020-01-13]
      D2DE1DBBA0F43EBA341B97D8825533CBF6CD6C97
uid           [ expired] Gentoo-keys Team <gkeys@gentoo.org>

pub   dsa1024 2004-07-20 [SC] [expired: 2020-07-01]
      D99EAC7379A850BCE47DA5F29E6438C817072058
uid           [ expired] Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>

pub   rsa4096 2011-11-25 [C] [expired: 2020-07-01]
      DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
uid           [ expired] Gentoo Portage Snapshot Signing Key (Automated Signing Key)
uid           [ expired] Gentoo ebuild repository signing key (Automated Signing Key) <infrastructure@gentoo.org>

pub   rsa4096 2009-08-25 [SC] [expired: 2020-07-01]
      13EBBDBEDE7A12775DFDB1BABB572E0E2D182910
uid           [ expired] Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>
Comment 1 Masoch Von Sade 2020-10-08 19:51:03 UTC
All keys provided by package gentoo-keys-201901130136 are expired and the package that it is supposed to update the keys don't exist anymore.
https://packages.gentoo.org/packages/app-crypt/gkeys

gen2 ~ # emerge app-crypt/gkeys                

These are the packages that would be merged, in order:

Calculating dependencies... done!

emerge: there are no ebuilds to satisfy "app-crypt/gkeys".

emerge: searching for similar names...
emerge: Maybe you meant any of these: app-crypt/keybase, app-crypt/ekeyd, app-crypt/age?
Comment 2 Masoch Von Sade 2020-10-08 20:03:54 UTC
Also, https://wiki.gentoo.org/wiki/Handbook:AMD64/Working/Features#Validated_Gentoo_repository_snapshots need to be updated, since the gkeys package don't exist anymore.
Comment 3 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2022-01-01 22:39:27 UTC
replaced by sec-keys/openpgp-keys-gentoo-release