Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 901975 - net-irc/ngircd-26.1-r5 - ERROR OpenPGP verification failed for <_io.BufferedReader
Summary: net-irc/ngircd-26.1-r5 - ERROR OpenPGP verification failed for <_io.BufferedR...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Sam James
URL:
Whiteboard:
Keywords: PullRequest
Depends on:
Blocks:
 
Reported: 2023-03-17 18:18 UTC by Toralf Förster
Modified: 2024-12-11 06:01 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge-info.txt (emerge-info.txt,19.01 KB, text/plain)
2023-03-17 18:18 UTC, Toralf Förster
Details
emerge-history.txt (emerge-history.txt,99.30 KB, text/plain)
2023-03-17 18:18 UTC, Toralf Förster
Details
environment (environment,73.26 KB, text/plain)
2023-03-17 18:19 UTC, Toralf Förster
Details
etc.clang.tar.bz2 (etc.clang.tar.bz2,694 bytes, application/x-bzip)
2023-03-17 18:19 UTC, Toralf Förster
Details
etc.portage.tar.bz2 (etc.portage.tar.bz2,17.06 KB, application/x-bzip)
2023-03-17 18:19 UTC, Toralf Förster
Details
logs.tar.bz2 (logs.tar.bz2,1.60 KB, application/x-bzip)
2023-03-17 18:19 UTC, Toralf Förster
Details
net-irc:ngircd-26.1-r5:20230317-171454.log (net-irc:ngircd-26.1-r5:20230317-171454.log,3.44 KB, text/plain)
2023-03-17 18:19 UTC, Toralf Förster
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Toralf Förster gentoo-dev 2023-03-17 18:18:57 UTC
 * Maintainer: sam@gentoo.org
 * USE:        abi_x86_64 amd64 elibc_glibc gnutls ident ipv6 kernel_linux pam ssl strict-rfc tcpd userland_GNU verify-sig
 * FEATURES:   network-sandbox preserve-libs sandbox userpriv usersandbox

>>> Unpacking source...
 * Verifying ngircd-26.1.tar.xz ...
ERROR    OpenPGP verification failed for <_io.BufferedReader                    
         name='/var/tmp/portage/net-irc/ngircd-26.1-r5/distdir/ngircd-26.1.tar.x
         z'> (sig in                                                            

  -------------------------------------------------------------------

  This is an unstable amd64 chroot image at a tinderbox (==build bot)
  name: 17.1_no_multilib_systemd-j5-20230316-220014

  -------------------------------------------------------------------

gcc-config -l:
 [1] x86_64-pc-linux-gnu-12 *
clang/llvm (if any):
clang version 15.0.7
Target: x86_64-pc-linux-gnu
Thread model: posix
InstalledDir: /usr/lib/llvm/15/bin
Configuration file: /etc/clang/clang.cfg
/usr/lib/llvm/15
15.0.7
Python 3.10.10
Available Ruby profiles:
  [1]   ruby27 (with Rubygems)
  [2]   ruby30 (with Rubygems) *
Available Rust versions:
  [1]   rust-1.67.1 *
The following VMs are available for generation-2:
1)	Eclipse Temurin JDK 17.0.6_p10 [openjdk-bin-17]
*)	Eclipse Temurin JDK 8.362_p09 [openjdk-bin-8]
Available Java Virtual Machines:
  [1]   openjdk-bin-8  system-vm
  [2]   openjdk-bin-17 

The Glorious Glasgow Haskell Compilation System, version 9.0.2
php cli (if any):

  HEAD of ::gentoo
commit 518fe471c775321777fccca683dc5b1f0f227703
Author: Repository mirror & CI <repomirrorci@gentoo.org>
Date:   Fri Mar 17 16:02:04 2023 +0000

    2023-03-17 16:02:04 UTC

emerge -qpvO net-irc/ngircd
[ebuild  N    ] net-irc/ngircd-26.1-r5  USE="gnutls ident ipv6 pam ssl strict-rfc tcpd verify-sig -debug -irc-plus -test -zlib"
Comment 1 Toralf Förster gentoo-dev 2023-03-17 18:18:58 UTC
Created attachment 858119 [details]
emerge-info.txt
Comment 2 Toralf Förster gentoo-dev 2023-03-17 18:18:59 UTC
Created attachment 858121 [details]
emerge-history.txt
Comment 3 Toralf Förster gentoo-dev 2023-03-17 18:19:00 UTC
Created attachment 858123 [details]
environment
Comment 4 Toralf Förster gentoo-dev 2023-03-17 18:19:01 UTC
Created attachment 858125 [details]
etc.clang.tar.bz2
Comment 5 Toralf Förster gentoo-dev 2023-03-17 18:19:02 UTC
Created attachment 858127 [details]
etc.portage.tar.bz2
Comment 6 Toralf Förster gentoo-dev 2023-03-17 18:19:03 UTC
Created attachment 858129 [details]
logs.tar.bz2
Comment 7 Toralf Förster gentoo-dev 2023-03-17 18:19:04 UTC
Created attachment 858131 [details]
net-irc:ngircd-26.1-r5:20230317-171454.log
Comment 8 Zhixu Liu 2024-12-10 13:44:13 UTC
For expired key, may be we should add an option to ignore expired key for gemato, since the key is valid in the past and verified by ebuild Manifest?

OpenPGP signature rejected because of expired key:
gpg: Signature made Sat Jan  2 14:34:19 2021 UTC
gpg:                using RSA key 47ECB2F6D427373730E901138A459AD2EAA15A24
gpg: Good signature from "Alexander Barton <alex@barton.de>" [expired]
gpg:                 aka "Alexander Barton <alex@arthur.ath.cx>" [expired]
gpg:                 aka "[jpeg image of size 5499]" [expired]
gpg:                 aka "Alexander Barton <alex@barton-it.de>" [expired]
gpg:                 aka "[jpeg image of size 1488]" [expired]
gpg:                 aka "[jpeg image of size 1718]" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: F5B9 F52E D909 20D2 5203  76A2 C24A 0F63 7E36 4856
     Subkey fingerprint: 47EC B2F6 D427 3737 30E9  0113 8A45 9AD2 EAA1 5A24
Comment 9 Larry the Git Cow gentoo-dev 2024-12-11 06:01:14 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3149e0acf7211d76ea9782ccb82142f771e31fd6

commit 3149e0acf7211d76ea9782ccb82142f771e31fd6
Author:     Z. Liu <zhixu.liu@gmail.com>
AuthorDate: 2024-12-11 04:07:09 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-12-11 05:58:10 +0000

    sec-keys/openpgp-keys-alexbarton: update 20241211
    
    1. replace expired key with new one from ubuntu keyserver
    2. add a new key for ngircd-27
    
    Closes: https://bugs.gentoo.org/901975
    Signed-off-by: Z. Liu <zhixu.liu@gmail.com>
    Signed-off-by: Sam James <sam@gentoo.org>

 sec-keys/openpgp-keys-alexbarton/Manifest                 |  3 ++-
 ...416.ebuild => openpgp-keys-alexbarton-20241211.ebuild} | 15 +++++++++++----
 2 files changed, 13 insertions(+), 5 deletions(-)

Additionally, it has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0e87697f7b0156ed13ea2fda04667711fefb0817

commit 0e87697f7b0156ed13ea2fda04667711fefb0817
Author:     Z. Liu <zhixu.liu@gmail.com>
AuthorDate: 2024-12-11 05:43:55 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2024-12-11 06:00:03 +0000

    net-irc/ngircd: verify-sig depend on newer pgp key
    
    Bug: https://bugs.gentoo.org/901975
    Signed-off-by: Z. Liu <zhixu.liu@gmail.com>
    Closes: https://github.com/gentoo/gentoo/pull/39674
    Signed-off-by: Sam James <sam@gentoo.org>

 net-irc/ngircd/ngircd-26.1-r5.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)