Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 815868 - Wrong GPG key used during GURU Access
Summary: Wrong GPG key used during GURU Access
Status: RESOLVED TEST-REQUEST
Alias: None
Product: GURU
Classification: Unclassified
Component: Other bugs (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: GURU project
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-10-03 01:05 UTC by Lucas Mitrak
Modified: 2021-10-03 16:57 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Lucas Mitrak 2021-10-03 01:05:10 UTC
Hello,

I submitted the wrong GPG key at my GURU request access [1]. I know this because when I attempted a `git push` I get the error:
`remote: FAIL: Unknown GIT_PUSH_CERT_STATUS
remote: Your push was not signed with a known key.`

I followed the instructions in https://wiki.gentoo.org/wiki/Project:Infrastructure/Generating_GLEP_63_based_OpenPGP_keys and I believe I submitted the wrong key. When I do a `git log --show-signature` I see the text:
`gpg:                using RSA key 1B00AF4F8C9DA947571C3B5DFB9B2ABFC2A11E6E
gpg: Good signature from "Lucas Mitrak <lucas@lucasmitrak.com>" [ultimate]`.

Therefore, I believe my actual gpg key is 1B00AF4F8C9DA947571C3B5DFB9B2ABFC2A11E6E. Could this be updated please? I am apologize for this mistake.

[1] https://bugs.gentoo.org/806568
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2021-10-03 06:59:11 UTC
We don't store your keys at the moment.  The error indicates that you're not doing a --signed push probably.
Comment 2 James Beddek 2021-10-03 07:05:45 UTC
Perhaps a different SSH key from you provided when signing up to GURU?
Comment 3 Lucas Mitrak 2021-10-03 16:57:20 UTC
Thank you both for responding. My public ssh key was correct; however, I was not doing a --signed push. I have update the git config with `git config --local push.gpgsign 1`. My newest push succeeded [1]

[1] https://gitweb.gentoo.org/repo/proj/guru.git/commit/?h=dev&id=805f57720b398aaf067c8f7d4184af20d7d2661a