Bug 935441 – sec-keys/openpgp-keys-yubico-20240628 fetches file(s) that do not match recorded size

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Agostino Sarubbo 2024-07-04 07:18:01 UTC]

https://blogs.gentoo.org/ago/2020/07/04/gentoo-tinderbox/

Issue: sec-keys/openpgp-keys-yubico-20240628 fetches file(s) that do not match recorded size.
Discovered on: amd64 (internal ref: ci)

Info about the issue:
https://wiki.gentoo.org/wiki/Project:Tinderbox/Common_Issues_Helper#CF0018

[Comment 1 Agostino Sarubbo 2024-07-04 07:18:02 UTC]

Created attachment 896926 [details]
build.log

build log and emerge --info

[Comment 2 Agostino Sarubbo 2024-07-04 07:18:02 UTC]

Error(s) that match a know pattern:


!!! Fetched file: yubico-20240628-1D7308B0055F5AEF36944A8F27A9C24D9588EA0F.asc VERIFY FAILED!
!!! Reason: Filesize does not match recorded size

[Comment 3 mario.haustein 2024-07-04 12:32:22 UTC]

This was a race-condition between merging the last version bump and a key update from upstream.

At the time of preparing the version bump the key was valid until 07/06/2024.

$ LANG=C gpg /var/cache/distfiles/yubico-20240628-1D7308B0055F5AEF36944A8F27A9C24D9588EA0F.asc
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa4096 2018-08-15 [C] [expires: 2024-07-06]
      1D7308B0055F5AEF36944A8F27A9C24D9588EA0F
uid           Aveen Ismail <[e-mail]>
sub   rsa2048 2018-08-15 [S] [expires: 2024-07-06]
sub   rsa2048 2018-08-15 [A] [expires: 2024-07-06]
sub   rsa2048 2018-08-15 [E] [expires: 2024-07-06]
sub   rsa4096 2021-10-15 [S] [expires: 2024-07-06]
sub   rsa4096 2018-08-16 [S] [expired: 2022-07-14]
sub   rsa4096 2018-08-16 [A] [expired: 2022-07-14]
sub   rsa4096 2021-10-15 [A] [expires: 2024-07-06]

In the meantime the validity was extended to 07/01/2025.

$ LANG=C gpg /var/cache/distfiles/yubico-20240704-1D7308B0055F5AEF36944A8F27A9C24D9588EA0F.asc
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa4096 2018-08-15 [C] [expires: 2025-07-01]
      1D7308B0055F5AEF36944A8F27A9C24D9588EA0F
uid           Aveen Ismail <[e-mail]>
sub   rsa2048 2018-08-15 [S] [expires: 2025-07-01]
sub   rsa2048 2018-08-15 [A] [expires: 2025-07-01]
sub   rsa2048 2018-08-15 [E] [expires: 2025-07-01]
sub   rsa4096 2021-10-15 [S] [expires: 2025-07-01]
sub   rsa4096 2018-08-16 [S] [expired: 2022-07-14]
sub   rsa4096 2018-08-16 [A] [expired: 2022-07-14]
sub   rsa4096 2021-10-15 [A] [expires: 2025-07-01]

I will prepare another version bump, hoping that no other key update will happen in the meantime.

[Comment 4 Larry the Git Cow 2024-07-06 04:58:53 UTC]

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=1161876d6730352f7130c7097d37f1f1d2086aec

commit 1161876d6730352f7130c7097d37f1f1d2086aec
Author:     Mario Haustein <[e-mail]>
AuthorDate: 2024-07-06 04:57:25 +0000
Commit:     John Helmert III <[e-mail]>
CommitDate: 2024-07-06 04:58:38 +0000

    sec-keys/openpgp-keys-yubico: add 20240704
    
    Closes: https://bugs.gentoo.org/935441
    Signed-off-by: Mario Haustein <[e-mail]>
    Signed-off-by: John Helmert III <[e-mail]>

 sec-keys/openpgp-keys-yubico/Manifest              | 13 +++++
 .../openpgp-keys-yubico-20240704.ebuild            | 57 ++++++++++++++++++++++
 2 files changed, 70 insertions(+)