Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 857093 - app-crypt/signify-31 fails signature verification
Summary: app-crypt/signify-31 fails signature verification
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Patrick Lauer
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-07-09 05:38 UTC by Michał Górny
Modified: 2022-07-09 08:28 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2022-07-09 05:38:06 UTC
Looks like someone's back to bumping stuff without proper testing.


 * Package:    app-crypt/signify-31
 * Repository: gentoo
 * Maintainer: patrick@gentoo.org mgorny@gentoo.org
 * USE:        abi_x86_64 amd64 elibc_glibc kernel_linux userland_GNU verify-sig
 * FEATURES:   network-sandbox preserve-libs sandbox userpriv usersandbox
>>> Unpacking source...
signify: can't open /usr/share/signify-keys/signify-31.pub for reading: No such file or directory
 * ERROR: app-crypt/signify-31::gentoo failed (unpack phase):
 *   Signify signature verification failed
 * 
 * Call stack:
 *     ebuild.sh, line  122:  Called src_unpack
 *   environment, line 1285:  Called verify-sig_verify_signed_checksums 'signify-31.sha.sig' 'sha256' 'signify-31.tar.xz'
 *   environment, line 2132:  Called die
 * The specific snippet of code:
 *               signify -C -p "${key}" -x "${checksum_file}" "${files[@]}" || die "Signify signature verification failed"
 * 
 * If you need support, post the output of `emerge --info '=app-crypt/signify-31::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=app-crypt/signify-31::gentoo'`.
 * The complete build log is located at '/var/log/portage/app-crypt:signify-31:20220709-053517.log'.
 * For convenience, a symlink to the build log is located at '/tmp/portage/app-crypt/signify-31/temp/build.log'.
 * The ebuild environment file is located at '/tmp/portage/app-crypt/signify-31/temp/environment'.
 * Working directory: '/tmp/portage/app-crypt/signify-31/work'
 * S: '/tmp/portage/app-crypt/signify-31/work/signify-31'
Comment 1 Larry the Git Cow gentoo-dev 2022-07-09 08:28:11 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b67cc22cb9bfdb16aac4e4c5b319170383778433

commit b67cc22cb9bfdb16aac4e4c5b319170383778433
Author:     Patrick Lauer <patrick@gentoo.org>
AuthorDate: 2022-07-09 08:27:50 +0000
Commit:     Patrick Lauer <patrick@gentoo.org>
CommitDate: 2022-07-09 08:28:09 +0000

    app-crypt/signify: Fix verify-sig
    
    Closes: https://bugs.gentoo.org/857093
    Package-Manager: Portage-3.0.30, Repoman-3.0.3
    Signed-off-by: Patrick Lauer <patrick@gentoo.org>

 app-crypt/signify/signify-31.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)