From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id 8L/0BeOTYWI3UQAAbAwnHQ (envelope-from ) for ; Thu, 21 Apr 2022 19:26:59 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id KKoKBeOTYWIkQAEAG6o9tA (envelope-from ) for ; Thu, 21 Apr 2022 19:26:59 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id B1B58996F for ; Thu, 21 Apr 2022 19:26:58 +0200 (CEST) Received: from localhost ([::1]:60370 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nhaa1-00070W-HL for larch@yhetil.org; Thu, 21 Apr 2022 13:26:57 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:43088) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nhaP7-0007dO-AF for guix-devel@gnu.org; Thu, 21 Apr 2022 13:15:42 -0400 Received: from relay2-d.mail.gandi.net ([217.70.183.194]:45257) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nhaP5-0000X9-Iz; Thu, 21 Apr 2022 13:15:41 -0400 Received: (Authenticated sender: tanguy@bioneland.org) by mail.gandi.net (Postfix) with ESMTPSA id A61F240007; Thu, 21 Apr 2022 17:15:34 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable References: <164966505518.14431.3309259068866383863@localhost> <87tuaqw36n.fsf@gnu.org> Subject: Re: Finding a =?utf-8?b?4oCcZ29vZOKAnQ==?= OpenPGP key server From: Tanguy LE CARROUR To: Ludovic =?utf-8?q?Court=C3=A8s?= In-Reply-To: <87tuaqw36n.fsf@gnu.org> Date: Thu, 21 Apr 2022 19:15:33 +0200 Message-ID: <165056133382.1357.5086217061038440864@localhost> User-Agent: alot/0.10 Received-SPF: none client-ip=217.70.183.194; envelope-from=tanguy@bioneland.org; helo=relay2-d.mail.gandi.net X-Spam_score_int: -13 X-Spam_score: -1.4 X-Spam_bar: - X-Spam_report: (-1.4 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URI_DOTEDU=1.246 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: guix-devel@gnu.org Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1650562018; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:list-id:list-help: list-unsubscribe:list-subscribe:list-post; bh=+R6lAVVnOnerwM6oJcrAgQXxxXnUXQmLz77sa0gpruI=; b=j86OfhQy3/uOOIV7nr1YpvdKM/XFVx0vltmPazn4wnA1up3eYSLsbloK6f5VswDaa7evJA paJhBoVW02Nr/glh0IUlM2/bpBtVhExpFBNm/3iHZI2oioeM4jWm3lp9h+K2ME9x3t3lWD rIo8UZukI4GXXwpUMNhS+NkbRlNTNB0Ila0WLPJAhF118d0kUN8dy6Gp6Fk3fEx5EedV0x aUaYW7CSbqGYUk0pYp0bWNddCPMCJ5nv4zLnn7T8qN8YD5Y3K2dLAisZXjs3W7m4BVjb2r +XjKlMSgU5qrpK8491RzkZUtwQT0ps4nQ1pHbDKeMVP6BsoeyQdLyFJsOrOdsA== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1650562018; a=rsa-sha256; cv=none; b=jBT3Cb2bBS/xQ8paEUr1Lt5Q0TS0ZExsao0Ur/BRnTTTqRRELYY9Y9gKy39jw28LyKelX9 htg0elRLW13i87OxDg/hBXuqvI21dJuUcLEmQLaeOfYvWxFNMXs25wACYnXnXQ5+i74aEs RdkiI216D+e2S9M+swWBS5W5KQ+/+HeYXZeeaLkcweV41gya7063xwyvOegiqH4w07pebQ njGFzDDqsoU6i2FDYbNBS3etplXuAI3J/n+VdY0Lr6q6pSV4JmWoOtcPuC2g/S75RFNRYH tWe27gDRR8eCexURtDzeNaUhHOQClcg8yDnzJQl3RItzouDv2td/lDS/ip/8aQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -2.43 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: B1B58996F X-Spam-Score: -2.43 X-Migadu-Scanner: scn1.migadu.com X-TUID: CRcUTu6Yn4zU Hi Ludo=E2=80=99, Thanks for updating the topic! :-) Quoting Ludovic Court=C3=A8s (2022-04-18 22:24:00) > Tanguy LE CARROUR skribis: >=20 > > $ ./pre-inst-env guix refresh -u gnurl > > > > Starting download of /tmp/guix-file.NqJa4t > > From https://ftpmirror.gnu.org/gnu/gnunet/gnurl-7.72.0.tar.gz... > > following redirection to `https://mirrors.ocf.berkeley.edu/gnu/gnunet/g= nurl-7.72.0.tar.gz'... > > =E2=80=A62.0.tar.gz 3.3MiB 3.1MiB/s 00:01 [#########= #########] 100.0% > > > > Starting download of /tmp/guix-file.VXn0IS > > From https://ftpmirror.gnu.org/gnu/gnunet/gnurl-7.72.0.tar.gz.sig... > > following redirection to `https://mirrors.ocf.berkeley.edu/gnu/gnunet/g= nurl-7.72.0.tar.gz.sig'... > > =E2=80=A60.tar.gz.sig 833B 654KiB/s 00:00 [#########= #########] 100.0% > > gpgv: Signature made Wed 16 Sep 2020 22:30:16 CEST > > gpgv: using RSA key 6115012DEA3026F62A98A556D6B570842F7E= 7F8D > > gpgv: Can't check signature: No public key > > Would you like to add this key to keyring '/home/tanguy/.config/guix/up= stream/trustedkeys.kbx'? > > yes > > gpg: keyserver receive failed: No data >=20 > This indicates that =E2=80=98guix refresh=E2=80=99 failed to download the= relevant GPG > key from the default key server, the one that appears in > ~/.gnupg/dirmngr.conf (if it exists). >=20 > That=E2=80=99s unfortunately often the case these days. :-/ This key app= ears to > be on keys.openpgp.org, but it lacks a =E2=80=9Cuser ID=E2=80=9D packet a= nd so gpg > ignores it (for no good reason): >=20 > --8<---------------cut here---------------start------------->8--- > $ gpg --no-default-keyring --keyring /home/ludo/.config/guix/upstream/tru= stedkeys.kbx --keyserver keys.openpgp.org --recv-keys 6115012DEA3026F62A98A= 556D6B570842F7E7F8D > gpg: key D6B570842F7E7F8D: no user ID > gpg: Total number processed: 1 > $ gpg --no-default-keyring --keyring /home/ludo/.config/guix/upstream/tru= stedkeys.kbx --list-keys 6115012DEA3026F62A98A556D6B570842F7E7F8D > gpg: error reading key: No public key > --8<---------------cut here---------------end--------------->8--- >=20 > I=E2=80=99m not sure what a good solution is (other than looking for the = key > manually on Savannah or on some random key server). Sorry it took me so long to answer! Actually, Nikita answered this question on a thread on GNUnet's mailing lis= t: https://lists.gnu.org/archive/html/gnunet-developers/2022-04/msg00030.html The end of the discussion is off list. The key used to sign the package is deprecated and not to be used any more/any where. The proper solution should come from GNUnet, but maybe, we could bypass the key verification in Guix. Or, I could clone the repo, claim ownership and sign a new package myself. But that doesn't look like a good/fair solution to me! Thoughts?! Regards, --=20 Tanguy