On Fri, 27 May 2022 08:24:39 +0200, Daniel Wagner wrote:
>Signing key fingerprint:
>
> 5BF6 7BC5 0826 72CA BB45 ACAE 587C 5ECA 5D0A 306C
>
>All keys used for the above files and repositories can be found on the
>following git repository:
>
> git://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git
>
>Enjoy!
Hi Daniel,
again it's no joy to import your key ;).
$ git clone git://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git
2>/dev/null && gpg --import pgpkeys/keys/587C5ECA5D0A306C.asc gpg: key
2>587C5ECA5D0A306C: 17 signatures not checked due to missing keys
gpg: key 587C5ECA5D0A306C: "Daniel Wagner <wagi@xxxxxxxxx>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
#### So I imported 500+ keys...
$ gpg --import pgpkeys/keys/*asc
[snip]
gpg: Total number processed: 525
gpg: imported: 515
gpg: unchanged: 6
gpg: new subkeys: 2
gpg: new signatures: 35
gpg: no ultimately trusted keys found
$ gpg --import pgpkeys/keys/587C5ECA5D0A306C.asc
gpg: key 587C5ECA5D0A306C: "Daniel Wagner <wagi@xxxxxxxxx>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
#### ...and validation still fails.
$ makepkg -s
==> Making package: linux-rt-cornflower 4.19.245_rt109-0.300 (Sun 05 Jun 2022 14:08:01 CEST)
[...]
==> Verifying source file signatures with gpg...
linux-4.19.245.tar ... Passed
patch-4.19.245-rt109.patch ... FAILED (invalid public key 5BF67BC5082672CABB45ACAE587C5ECA5D0A306C)
==> ERROR: One or more PGP signatures could not be verified!
Regards,
Ralf
