MSYS2-packages icon indicating copy to clipboard operation
MSYS2-packages copied to clipboard

crosstool-ng "the public key is not trusted"

Open nistvan86 opened this issue 9 years ago • 3 comments

Getting this error when running makepkg:

Istvan@inagy-pc MSYS ~/MSYS2-packages/crosstool-ng
$ makepkg
==> Making package: crosstool-ng 1.21.0-1 (25 Feb 2016 20:19:36)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Found crosstool-ng-1.21.0.tar.xz
  -> Found crosstool-ng-1.21.0.tar.xz.sig
  -> Found 0001-Modify-config-to-support-correct-Mingw64-Triplet-Nam.patch
  -> Found 0002-use-wide-versions-of-libs-for-nconf.patch
  -> Found 0003-modify-kconfig-make-lintl.patch
  -> Found 0004-kconfig-nconf-fix-compile-with-ncurses-reentrant-API.patch
==> Validating source files with sha256sums...
    crosstool-ng-1.21.0.tar.xz ... Passed
    crosstool-ng-1.21.0.tar.xz.sig ... Skipped
    0001-Modify-config-to-support-correct-Mingw64-Triplet-Nam.patch ... Passed
    0002-use-wide-versions-of-libs-for-nconf.patch ... Passed
    0003-modify-kconfig-make-lintl.patch ... Passed
    0004-kconfig-nconf-fix-compile-with-ncurses-reentrant-API.patch ... Passed
==> Verifying source file signatures with gpg...
    crosstool-ng-1.21.0.tar.xz ... FAILED (the public key 561ED9B6209588ED23C68329CAD7C8FC35B871D1 is not trusted)
==> ERROR: One or more PGP signatures could not be verified!

Seems like public key has changed. How can i accept the new public key? Executing gpg --recv-key 561ED9B6209588ED23C68329CAD7C8FC35B871D1 has no effect.

nistvan86 avatar Feb 25 '16 19:02 nistvan86

consu_000@Estudio-2 MSYS ~/MSYS2-packages/crosstool-ng
$ makepkg
==> Making package: crosstool-ng 1.21.0-1 (Fri Dec  9 16:38:35 BRT 2016)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
  -> Downloading crosstool-ng-1.21.0.tar.xz...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 1566k  100 1566k    0     0   105k      0  0:00:14  0:00:14 --:--:--  245k
  -> Downloading crosstool-ng-1.21.0.tar.xz.sig...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   287  100   287    0     0    287      0  0:00:01 --:--:--  0:00:01   294
  -> Found 0001-Modify-config-to-support-correct-Mingw64-Triplet-Nam.patch
  -> Found 0002-use-wide-versions-of-libs-for-nconf.patch
  -> Found 0003-modify-kconfig-make-lintl.patch
  -> Found 0004-kconfig-nconf-fix-compile-with-ncurses-reentrant-API.patch
==> Validating source files with sha256sums...
    crosstool-ng-1.21.0.tar.xz ... Passed
    crosstool-ng-1.21.0.tar.xz.sig ... Skipped
    0001-Modify-config-to-support-correct-Mingw64-Triplet-Nam.patch ... Passed
    0002-use-wide-versions-of-libs-for-nconf.patch ... Passed
    0003-modify-kconfig-make-lintl.patch ... Passed
    0004-kconfig-nconf-fix-compile-with-ncurses-reentrant-API.patch ... Passed
==> Verifying source file signatures with gpg...
    crosstool-ng-1.21.0.tar.xz ... FAILED (the public key 561ED9B6209588ED23C68329CAD7C8FC35B871D1 is not trusted)
==> ERROR: One or more PGP signatures could not be verified!

I too, same steps.

carlosdelfino avatar Dec 09 '16 19:12 carlosdelfino

this resolve:

consu_000@Estudio-2 MSYS ~/MSYS2-packages/crosstool-ng
$ gpg --edit-key 561ED9B6209588ED23C68329CAD7C8FC35B871D1
gpg (GnuPG) 1.4.20; Copyright (C) 2015 Free Software Foundation, Inc.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.


pub  2048R/35B871D1  created: 2014-02-20  expires: 2017-02-20  usage: SC
                     trust: full          validity: unknown
sub  2048R/A773DF6F  created: 2014-02-20  expires: 2018-04-30  usage: E
[ unknown] (1). Bryan Hundven <[email protected]>
[ unknown] (2). [jpeg image of size 16246]
[ revoked] (3)  Bryan Hundven <[email protected]>
[ revoked] (4)  Bryan Hundven <[email protected]>
[ unknown] (5)  Bryan Hundven <[email protected]>
[ unknown] (6)  Bryan Hundven <[email protected]>
[ unknown] (7)  Bryan Hundven <[email protected]>
[ unknown] (8)  Bryan Hundven <[email protected]>
[ unknown] (9)  [jpeg image of size 3080]

gpg> trust
pub  2048R/35B871D1  created: 2014-02-20  expires: 2017-02-20  usage: SC
                     trust: full          validity: unknown
sub  2048R/A773DF6F  created: 2014-02-20  expires: 2018-04-30  usage: E
[ unknown] (1). Bryan Hundven <[email protected]>
[ unknown] (2). [jpeg image of size 16246]
[ revoked] (3)  Bryan Hundven <[email protected]>
[ revoked] (4)  Bryan Hundven <[email protected]>
[ unknown] (5)  Bryan Hundven <[email protected]>
[ unknown] (6)  Bryan Hundven <[email protected]>
[ unknown] (7)  Bryan Hundven <[email protected]>
[ unknown] (8)  Bryan Hundven <[email protected]>
[ unknown] (9)  [jpeg image of size 3080]

Please decide how far you trust this user to correctly verify other users' keys
(by looking at passports, checking fingerprints from different sources, etc.)

  1 = I don't know or won't say
  2 = I do NOT trust
  3 = I trust marginally
  4 = I trust fully
  5 = I trust ultimately
  m = back to the main menu

Your decision? 5
Do you really want to set this key to ultimate trust? (y/N) y

pub  2048R/35B871D1  created: 2014-02-20  expires: 2017-02-20  usage: SC
                     trust: ultimate      validity: unknown
sub  2048R/A773DF6F  created: 2014-02-20  expires: 2018-04-30  usage: E
[ unknown] (1). Bryan Hundven <[email protected]>
[ unknown] (2). [jpeg image of size 16246]
[ revoked] (3)  Bryan Hundven <[email protected]>
[ revoked] (4)  Bryan Hundven <[email protected]>
[ unknown] (5)  Bryan Hundven <[email protected]>
[ unknown] (6)  Bryan Hundven <[email protected]>
[ unknown] (7)  Bryan Hundven <[email protected]>
[ unknown] (8)  Bryan Hundven <[email protected]>
[ unknown] (9)  [jpeg image of size 3080]
Please note that the shown key validity is not necessarily correct
unless you restart the program.

gpg> quit


carlosdelfino avatar Dec 09 '16 20:12 carlosdelfino

I changed the key's trust as shown here

Now I get these build errors:

==> Making package: ctpv-git r152.2220d63-1 (Tue 05 Jul 2022 13:26:51 IST)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> WARNING: Using existing $srcdir/ tree
==> Starting pkgver()...
==> Removing existing $pkgdir/ directory...
==> Entering fakeroot environment...
==> Starting package()...
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/config.o src/config.c
make -C embed
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/error.o src/error.c
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/lexer.o src/lexer.c
make[1]: Entering directory '/home/adam/.cache/paru/clone/ctpv-git/src/ctpv/embed'
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter  -L/usr/lib -lmagic -lcrypto  embed.c   -o embed
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/preview.o src/preview.c
src/preview.c: In function ‘run’:
src/preview.c:134:13: warning: ignoring return value of ‘write’ declared with attribute ‘warn_unused_result’ [-Wunused-result]
  134 |             write(STDOUT_FILENO, buf, len);
      |             ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/server.o src/server.c
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/shell.o src/shell.c
make[1]: Leaving directory '/home/adam/.cache/paru/clone/ctpv-git/src/ctpv/embed'
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/ulist.o src/ulist.c
cc -march=x86-64 -mtune=generic -O2 -pipe -fno-plt -fexceptions         -Wp,-D_FORTIFY_SOURCE=2 -Wformat -Werror=format-security         -fstack-clash-protection -fcf-protection -O2 -MD -Wall -Wextra -Wno-unused-parameter   -c -o src/utils.o src/utils.c
src/shell.c:6:10: fatal error: ../gen/helpers.h: No such file or directory
    6 | #include "../gen/helpers.h"
      |          ^~~~~~~~~~~~~~~~~~
compilation terminated.
make: *** [<builtin>: src/shell.o] Error 1
make: *** Waiting for unfinished jobs....
src/server.c:12:10: fatal error: ../gen/server.h: No such file or directory
   12 | #include "../gen/server.h"
      |          ^~~~~~~~~~~~~~~~~
compilation terminated.
make: *** [<builtin>: src/server.o] Error 1
==> ERROR: A failure occurred in package().
    Aborting...
error: failed to build 'ctpv-git-r146.2d36fa4-1':
error: packages failed to build: ctpv-git-r146.2d36fa4-1

Note: I was able to install ctpv fine manually by just cloning and running sudo make install, but I'd prefer to use the AUR package.

adastx avatar Jul 05 '22 12:07 adastx