Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 815868

Summary: Wrong GPG key used during GURU Access
Product: GURU Reporter: Lucas Mitrak <lucas>
Component: Other bugsAssignee: GURU project <guru-bugs>
Status: RESOLVED TEST-REQUEST    
Severity: normal CC: lucas, mgorny, telans
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Lucas Mitrak 2021-10-03 01:05:10 UTC
Hello,

I submitted the wrong GPG key at my GURU request access [1]. I know this because when I attempted a `git push` I get the error:
`remote: FAIL: Unknown GIT_PUSH_CERT_STATUS
remote: Your push was not signed with a known key.`

I followed the instructions in https://wiki.gentoo.org/wiki/Project:Infrastructure/Generating_GLEP_63_based_OpenPGP_keys and I believe I submitted the wrong key. When I do a `git log --show-signature` I see the text:
`gpg:                using RSA key 1B00AF4F8C9DA947571C3B5DFB9B2ABFC2A11E6E
gpg: Good signature from "Lucas Mitrak <lucas@lucasmitrak.com>" [ultimate]`.

Therefore, I believe my actual gpg key is 1B00AF4F8C9DA947571C3B5DFB9B2ABFC2A11E6E. Could this be updated please? I am apologize for this mistake.

[1] https://bugs.gentoo.org/806568
Comment 1 Michał Górny archtester Gentoo Infrastructure gentoo-dev Security 2021-10-03 06:59:11 UTC
We don't store your keys at the moment.  The error indicates that you're not doing a --signed push probably.
Comment 2 James Beddek 2021-10-03 07:05:45 UTC
Perhaps a different SSH key from you provided when signing up to GURU?
Comment 3 Lucas Mitrak 2021-10-03 16:57:20 UTC
Thank you both for responding. My public ssh key was correct; however, I was not doing a --signed push. I have update the git config with `git config --local push.gpgsign 1`. My newest push succeeded [1]

[1] https://gitweb.gentoo.org/repo/proj/guru.git/commit/?h=dev&id=805f57720b398aaf067c8f7d4184af20d7d2661a