From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Bad signature on commit 6a34f4ccc8a5d (gnu: python-prompt-toolkit: Update to 1.0.9.) Date: Wed, 28 Dec 2016 21:47:33 -0500 Message-ID: <20161229024733.GA9193@jasmine> References: <20161229021015.GA16162@jasmine> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="kXdP64Ggrk/fb43R" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:52105) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1cMQkm-0002Hk-O0 for guix-devel@gnu.org; Wed, 28 Dec 2016 21:47:41 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1cMQki-0004J6-1m for guix-devel@gnu.org; Wed, 28 Dec 2016 21:47:40 -0500 Received: from out1-smtp.messagingengine.com ([66.111.4.25]:44971) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1cMQkh-0004J0-Pu for guix-devel@gnu.org; Wed, 28 Dec 2016 21:47:35 -0500 Content-Disposition: inline In-Reply-To: <20161229021015.GA16162@jasmine> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: guix-devel@gnu.org --kXdP64Ggrk/fb43R Content-Type: multipart/mixed; boundary="u3/rZRmxL6MmkK24" Content-Disposition: inline --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Dec 28, 2016 at 09:10:15PM -0500, Leo Famulari wrote: > I see this in the log: >=20 > $ git log --show-signature 6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91 > commit 6a34f4ccc8a5d4a48e25ad3c9c512f8634928b91 > gpg: Signature made Wed 28 Dec 2016 08:38:21 PM EST > gpg: using RSA key 91CCDB9B48541B99 > gpg: BAD signature from "Tobias Geerinckx-Rice " [unknown] > Author: Tobias Geerinckx-Rice > Date: Wed Dec 28 23:01:49 2016 +0100 >=20 > gnu: python-prompt-toolkit: Update to 1.0.9. > =20 > * gnu/packages/python.scm (python-prompt-toolkit): Update to 1.0.9. >=20 > Does anyone else get the same result? Any ideas? >=20 > Tobias, what version of GnuPG are you using? >=20 > I'm using: >=20 > gnupg 2.1.17 /gnu/store/1sa7k3x3y3chdl31p7y7x3sa7p9h1qa3-gnupg-2.1.17 >=20 > ... which is built from Guix commit 791ac6a68d1e4bc80f4760cd968cb6c26dbab= 9ba. I'm also unable to verify the signature of two more commits, as below. I've attached a handy Git signature verifier script. commit e0f8a520eda6b86a71f99eddf2c6968a95c8de0e gpg: Signature made Thu 24 Nov 2016 08:21:51 PM EST gpg: using RSA key 91CCDB9B48541B99 gpg: BAD signature from "Tobias Geerinckx-Rice " [unknown] Author: Tobias Geerinckx-Rice Date: Thu Nov 24 19:28:52 2016 +0100 gnu: miniupnpc: Improve synopsis and description. =20 * gnu/packages/upnp.scm (miniupnp)[synopsis, description]: Edit, fix ty= pos, add some relevant (search) terms from the home page, and expand acronym= s. commit 7d162df8ce4dc90c681ff627b2ed94c192e6342f gpg: Signature made Thu 15 Dec 2016 09:08:42 PM EST gpg: using RSA key 91CCDB9B48541B99 gpg: BAD signature from "Tobias Geerinckx-Rice " [unknown] Author: Tobias Geerinckx-Rice Date: Thu Dec 15 23:17:52 2016 +0100 gnu: mcelog: Update to 146. =20 * gnu/packages/linux.scm (mcelog): Update to 146. --u3/rZRmxL6MmkK24 Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename=verifier #!/bin/sh # This script requires a Git revision selector, such as HEAD, 734713bc0, # origin/master..HEAD, et cetera: # https://git-scm.com/book/en/v2/Git-Tools-Revision-Selection # A revision selector example for guix.git: v0.11.0..HEAD if test $# -eq 1 ; then range=$1 else exit 1 fi for commit in $(git rev-list $range); do results=$(git verify-commit $commit 2>&1) if test $? -ne 0; then git show --format=full --show-signature $commit # I'm not sure if the previous line will always include the # contents of $results, so I re-print it just in case. printf "%s\n\n" "$results" fi done --u3/rZRmxL6MmkK24-- --kXdP64Ggrk/fb43R Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAlhkeUUACgkQJkb6MLrK fwi3bg//UXkL3Mwky6LBge9LLpsTadeLpRsi9kHV0I0pQk0eMxeHtkJ506Tky+F7 Q0J+6jb7YoI9oHvQKph/Fp00VQiXdEJ1rJz8mpAtxreSrKK82llJylFG5jt/5g1Z YGPAknC/Pnd5BK1swK8snDl+qS4q16AYvfHvVK2qDFeKj1Vv+wVg2vWRJqIuV3QK 7WBsYnsvyT7238DLUzAZe3C2GDdBWNNnjb1sojP8lmkxo0UYdxEdzhB31B8w6+CV 2xHipD7+bb+7H0DYym8wg2T4d50Fno1wJoS7kKuetllEqMMBXl8Gb0AC7eiuhTFn +5qcbEaaBUUUiXHTs7r9Cdf7bNFq8qg/ozswsTv3z6eVXsazazFXj2VMzlQaDpni ZXBm4e3uQsFII9aMU3hufZPAIWxN2VlkCnx6mibmxGYWB08KeBJ3kveauzwI61ZN YHqMxV2wR1VLt7cWwEkAbjBAMZixTkxpBg54kjAOHpsdMoOD8YCXHXVaiscthse6 QNS42AajYH47NhONDTjy19SM5SYdEcHfm8tN3AJEJPJButjWeaya0RD6IXq71MCW Qa+hKBNf6L7ffMUDFyMMmkQbl9ryP7iX5jYAMDjA2wvxVVG4sTDplHPpKvParYJ2 Has6MVhNcTSq64VErRNrbfXP5FJRVCjqoRXHWQmYzGkeJ2PRBuQ= =AzYj -----END PGP SIGNATURE----- --kXdP64Ggrk/fb43R--