Bug 410099

Summary:	Incorrect keyserver listed for Release Engineering GPG keys
Product:	Documentation	Reporter:	Justus Ranvier <gentoo>
Component:	Project-specific documentation	Assignee:	Gentoo Release Team <releng>
Status:	RESOLVED WORKSFORME
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Justus Ranvier 2012-03-29 06:47:24 UTC

http://www.gentoo.org/proj/en/releng/

Lists subkeys.pgp.net as the location for the GPG signing keys however none of the keys listed can be downloaded from there:

$ gpg --keyserver subkeys.pgp.net --recv-keys 0x96D8BF6D 0x17072058 0x2D182910 0x239C75C4 0xD8BA32AA 0x7DDAD20D
gpg: requesting key 96D8BF6D from hkp server subkeys.pgp.net
gpg: requesting key 17072058 from hkp server subkeys.pgp.net
gpg: requesting key 2D182910 from hkp server subkeys.pgp.net
gpg: requesting key 239C75C4 from hkp server subkeys.pgp.net
gpg: requesting key D8BA32AA from hkp server subkeys.pgp.net
gpg: requesting key 7DDAD20D from hkp server subkeys.pgp.net
gpgkeys: key 96D8BF6D not found on keyserver
gpgkeys: key 17072058 not found on keyserver
gpgkeys: key 2D182910 not found on keyserver
gpgkeys: key 239C75C4 not found on keyserver
gpgkeys: key D8BA32AA not found on keyserver
gpgkeys: key 7DDAD20D not found on keyserver
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

The keys can successfully be retrieved from keys.gnupg.net.

Comment 1 Jorge Manuel B. S. Vicetto (RETIRED) gentoo-dev

2012-08-26 18:56:40 UTC

These keys are still valid and I was able to get them from the subkeys.pgp.net server on a 2nd try here on my laptop and on the first try on my server.

pub   4096R/96D8BF6D 2011-11-25 [expires: 2015-11-24]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)
sub   4096R/C9189250 2011-11-25 [expires: 2015-11-24]

pub   1024D/17072058 2004-07-20 [expires: 2016-08-13]
uid                  Gentoo Linux Release Engineering (Gentoo Linux Release Signing Key) <releng@gentoo.org>
sub   2048g/1415B4ED 2004-07-20 [expires: 2016-08-13]

pub   4096R/2D182910 2009-08-25 [expires: 2013-08-24]
uid                  Gentoo Linux Release Engineering (Automated Weekly Release Key) <releng@gentoo.org>


The following keys were expired or revoked, but do show up as well.

pub   1024D/239C75C4 2007-11-25 [expired: 2012-05-23]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)

pub   1024D/D8BA32AA 2004-11-11 [revoked: 2007-11-25]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)

pub   1024D/7DDAD20D 2005-11-23 [revoked: 2007-11-25]
uid                  Gentoo Portage Snapshot Signing Key (Automated Signing Key)


I'm closing as WORKSFORME. If you have trouble fetching the keys again, please leave a comment here.

Comment 2 Kristian Fiskerstrand (RETIRED) gentoo-dev

2014-05-25 20:12:59 UTC

subkeys.pgp.net is a static pool, that I currently see returning 3 servers of which only one is active and syncronizing. 

116.240.198.71 - nonresponsive 
223.252.21.101 - OK
195.113.19.83 - nonresponsive

I recommend using pool.sks-keyservers.net as an alternative on the releng website (and other places)