Bug 857093

Summary:	app-crypt/signify-31 fails signature verification
Product:	Gentoo Linux	Reporter:	Michał Górny <mgorny>
Component:	Current packages	Assignee:	Patrick Lauer <patrick>
Status:	RESOLVED FIXED
Severity:	normal	CC:	mgorny, qa
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Michał Górny archtester

2022-07-09 05:38:06 UTC

Looks like someone's back to bumping stuff without proper testing.


 * Package:    app-crypt/signify-31
 * Repository: gentoo
 * Maintainer: patrick@gentoo.org mgorny@gentoo.org
 * USE:        abi_x86_64 amd64 elibc_glibc kernel_linux userland_GNU verify-sig
 * FEATURES:   network-sandbox preserve-libs sandbox userpriv usersandbox
>>> Unpacking source...
signify: can't open /usr/share/signify-keys/signify-31.pub for reading: No such file or directory
 * ERROR: app-crypt/signify-31::gentoo failed (unpack phase):
 *   Signify signature verification failed
 * 
 * Call stack:
 *     ebuild.sh, line  122:  Called src_unpack
 *   environment, line 1285:  Called verify-sig_verify_signed_checksums 'signify-31.sha.sig' 'sha256' 'signify-31.tar.xz'
 *   environment, line 2132:  Called die
 * The specific snippet of code:
 *               signify -C -p "${key}" -x "${checksum_file}" "${files[@]}" || die "Signify signature verification failed"
 * 
 * If you need support, post the output of `emerge --info '=app-crypt/signify-31::gentoo'`,
 * the complete build log and the output of `emerge -pqv '=app-crypt/signify-31::gentoo'`.
 * The complete build log is located at '/var/log/portage/app-crypt:signify-31:20220709-053517.log'.
 * For convenience, a symlink to the build log is located at '/tmp/portage/app-crypt/signify-31/temp/build.log'.
 * The ebuild environment file is located at '/tmp/portage/app-crypt/signify-31/temp/environment'.
 * Working directory: '/tmp/portage/app-crypt/signify-31/work'
 * S: '/tmp/portage/app-crypt/signify-31/work/signify-31'

Comment 1 Larry the Git Cow gentoo-dev

2022-07-09 08:28:11 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=b67cc22cb9bfdb16aac4e4c5b319170383778433

commit b67cc22cb9bfdb16aac4e4c5b319170383778433
Author:     Patrick Lauer <patrick@gentoo.org>
AuthorDate: 2022-07-09 08:27:50 +0000
Commit:     Patrick Lauer <patrick@gentoo.org>
CommitDate: 2022-07-09 08:28:09 +0000

    app-crypt/signify: Fix verify-sig
    
    Closes: https://bugs.gentoo.org/857093
    Package-Manager: Portage-3.0.30, Repoman-3.0.3
    Signed-off-by: Patrick Lauer <patrick@gentoo.org>

 app-crypt/signify/signify-31.ebuild | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)