Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 894074 - app-arch/xz-utils-5.4.1 with USE=verify-sig: OpenPGP signature rejected because of expired key
Summary: app-arch/xz-utils-5.4.1 with USE=verify-sig: OpenPGP signature rejected becau...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-02-12 18:48 UTC by Albert W. Hopkins
Modified: 2023-02-13 05:47 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
emerge --info (emerge-info.txt,6.08 KB, text/plain)
2023-02-12 18:48 UTC, Albert W. Hopkins 		Details
build.log (build.log,2.04 KB, text/plain)
2023-02-12 18:49 UTC, Albert W. Hopkins 		Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Albert W. Hopkins 2023-02-12 18:48:30 UTC 
When upgrading to app-arch/xz-utils-5.4.1:0 with USE=verify-sig it fails:

```
 * Package:    app-arch/xz-utils-5.4.1:0
 * Repository: gentoo
 * Maintainer: base-system@gentoo.org
 * USE:        abi_x86_64 amd64 elibc_glibc extra-filters kernel_linux nls split-usr userland_GNU verify-sig
 * FEATURES:   preserve-libs sandbox
>>> Unpacking source...
 * Verifying xz-5.4.1.tar.gz ...
[  ERROR] OpenPGP verification failed for /var/tmp/portage/app-arch/xz-utils-5.4.1/distdir/xz-5.4.1.tar.gz (sig in /var/tmp/portage/app-arch/xz-utils-5.4.1/distdir/xz-5.4.1.tar.gz.sig):
OpenPGP signature rejected because of expired key:
gpg: Warning: using insecure memory!
gpg: Signature made Wed Jan 11 17:12:29 2023 UTC
gpg:                using RSA key 3690C240CE51B4670D30AD1C38EE757D69184620
gpg: Good signature from "Lasse Collin <lasse.collin@tukaani.org>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 3690 C240 CE51 B467 0D30  AD1C 38EE 757D 6918 4620
```
Comment 1 Albert W. Hopkins 2023-02-12 18:48:58 UTC 
Created attachment 850536 [details]
emerge --info
Comment 2 Albert W. Hopkins 2023-02-12 18:49:57 UTC 
Created attachment 850538 [details]
build.log
Comment 3 Larry the Git Cow gentoo-dev 2023-02-13 04:44:39 UTC 
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=81260457d76492e0e7a26241c6b594b4d35f869f

commit 81260457d76492e0e7a26241c6b594b4d35f869f
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-02-13 04:41:03 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-13 04:41:30 +0000

    sec-keys/openpgp-keys-lassecollin: add 20230213
    
    Closes: https://bugs.gentoo.org/894074
    Signed-off-by: Sam James <sam@gentoo.org>

 sec-keys/openpgp-keys-lassecollin/Manifest           |  1 +
 .../openpgp-keys-lassecollin-20230213.ebuild         | 20 ++++++++++++++++++++
 2 files changed, 21 insertions(+)
Comment 4 Larry the Git Cow gentoo-dev 2023-02-13 05:47:14 UTC 
The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bf74073a1d83b63125fbd39f5169ff1027a017d4

commit bf74073a1d83b63125fbd39f5169ff1027a017d4
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-02-13 05:43:55 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-02-13 05:46:56 +0000

    app-arch/xz-utils: update verify-sig dep
    
    Bug: https://bugs.gentoo.org/894074
    Signed-off-by: Sam James <sam@gentoo.org>

 app-arch/xz-utils/xz-utils-5.2.10.ebuild | 4 ++--
 app-arch/xz-utils/xz-utils-5.4.1.ebuild  | 2 +-
 app-arch/xz-utils/xz-utils-9999.ebuild   | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)