941142 – app-crypt/pinentry-1.3.1[verify-sig]: emerge fails with "Fetched file: pinentry-1.3.1.tar.bz2.sig VERIFY FAILED!"

Bug 941142 - app-crypt/pinentry-1.3.1[verify-sig]: emerge fails with "Fetched file: pinentry-1.3.1.tar.bz2.sig VERIFY FAILED!"

Summary: app-crypt/pinentry-1.3.1[verify-sig]: emerge fails with "Fetched file: pinent...

Status:	UNCONFIRMED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal
Assignee:	Gentoo's Team for Core System packages

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2024-10-07 21:29 UTC by Pär Karlsson
Modified:	2024-10-08 07:17 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Pär Karlsson 2024-10-07 21:29:15 UTC

app-crypt/pinentry-1.3.0-r3 fails to emerge with USE="verify-sig", probably because the signature at https://gnupg.org/ftp/gcrypt/pinentry/ has changed or been updated since. 

Reproducible: Always

Steps to Reproduce:
1. Set USE="verify-sig"
2. emerge -av app-crypt/pinentry
3. Watch the signature validation fail
Actual Results:  
 * pinentry-1.3.1.tar.bz2 BLAKE2B SHA512 size ;-) ...                    [ ok ]                                         >>> Downloading 'http://tux.rainside.sk/gentoo/distfiles/27/pinentry-1.3.1.tar.bz2.sig'                                 --2024-10-07 23:17:33--  http://tux.rainside.sk/gentoo/distfiles/27/pinentry-1.3.1.tar.bz2.sig                          Resolving tux.rainside.sk (tux.rainside.sk)... 212.89.225.155
Connecting to tux.rainside.sk (tux.rainside.sk)|212.89.225.155|:80... connected.
HTTP request sent, awaiting response... 404 Not Found                                                                   2024-10-07 23:17:33 ERROR 404: Not Found.

>>> Downloading 'https://mirrors.dotsrc.org/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig'
--2024-10-07 23:17:33--  https://mirrors.dotsrc.org/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig
Resolving mirrors.dotsrc.org (mirrors.dotsrc.org)... 130.225.254.116, 2001:878:346::116
Connecting to mirrors.dotsrc.org (mirrors.dotsrc.org)|130.225.254.116|:443... connected.
HTTP request sent, awaiting response... 200 OK                                                                          Length: 238 [text/plain]
Saving to: ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’                                                                                                                                                                            0K                                                       100% 59,1M=0s                                                                                                                                                                     2024-10-07 23:17:33 (59,1 MB/s) - ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’ saved [238/238]

!!! Fetched file: pinentry-1.3.1.tar.bz2.sig VERIFY FAILED!                                                             !!! Reason: Filesize does not match recorded size
!!! Got:      238
!!! Expected: 119
Refetching... File renamed to '/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig._checksum_failure_.uof031af'
                                                                                                                        >>> Downloading 'https://gnupg.org/ftp/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig'                                      --2024-10-07 23:17:34--  https://gnupg.org/ftp/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig
Resolving gnupg.org (gnupg.org)... 217.69.76.60, 2001:aa8:fff1:2100::60
Connecting to gnupg.org (gnupg.org)|217.69.76.60|:443... connected.
HTTP request sent, awaiting response... 200 OK                                                                          Length: 238 [application/pgp-signature]                                                                                 Saving to: ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’
                                                                                                                             0K                                                       100% 3,22M=0s                                                                                                                                                                     2024-10-07 23:17:34 (3,22 MB/s) - ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’ saved [238/238]
                                                                                                                        !!! Fetched file: pinentry-1.3.1.tar.bz2.sig VERIFY FAILED!                                                             !!! Reason: Filesize does not match recorded size                                                                       !!! Got:      238
!!! Expected: 119
Refetching... File renamed to '/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig._checksum_failure_.uof031af'

>>> Downloading 'ftp://ftp.gnupg.org/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig'
--2024-10-07 23:17:34--  ftp://ftp.gnupg.org/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig
           => ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’
Resolving ftp.gnupg.org (ftp.gnupg.org)... 217.69.76.55
Connecting to ftp.gnupg.org (ftp.gnupg.org)|217.69.76.55|:21... failed: Connection refused.
>>> Downloading 'https://www.mirrorservice.org/sites/ftp.gnupg.org/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig'
--2024-10-07 23:17:34--  https://www.mirrorservice.org/sites/ftp.gnupg.org/gcrypt/pinentry/pinentry-1.3.1.tar.bz2.sig
Resolving www.mirrorservice.org (www.mirrorservice.org)... 212.219.56.184, 2001:630:341:12::184
Connecting to www.mirrorservice.org (www.mirrorservice.org)|212.219.56.184|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 238 [application/pgp-signature]
Saving to: ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’

     0K                                                       100%  102M=0s

2024-10-07 23:17:34 (102 MB/s) - ‘/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig.__download__’ saved [238/238]

!!! Fetched file: pinentry-1.3.1.tar.bz2.sig VERIFY FAILED!
!!! Reason: Filesize does not match recorded size
!!! Got:      238
!!! Expected: 119
Refetching... File renamed to '/var/cache/distfiles/pinentry-1.3.1.tar.bz2.sig._checksum_failure_.uof031af'

!!! Couldn't download 'pinentry-1.3.1.tar.bz2.sig'. Aborting.

 * GNU info directory index is up-to-date.


Expected Results:  
The package would've been validated and emerged.

Comment 1 Greg Kubaryk 2024-10-07 21:53:57 UTC

Can you clarify which actual version you are reporting an issue for? There are two listed in the bug.

Comment 2 Pär Karlsson 2024-10-07 22:06:29 UTC

This concerns app-crypt/pinentry-1.3.1-r3.

The version I have installed is 1.3.0-r3 and is being upgraded to 1.3.1-r3.

Apologies for the confusion.