Public key (and mailing list issue)

Public key (and mailing list issue)

[Brett Gilio]

Hi everybody,

I am sending this email on behalf of a friend trying to install the Guix
binary using the shell script. It appears his email is being rejected as
"inappropriate by the moderator." for some unknown reason. I think it
might be a spam-filter mechanism against his @gmail.com mailing address,
but that is just a suspicion.

Anyways, here is his message paraphrased:

He is trying to install GNU Guix using the shell script.
It asks for a GPG verification step that fails due to a missing key.
When he tries to import the key using the appropriate gpg --recv-keys
command pointed at pool.sys-keyservers.net, it is saying

"gpg: keyserver receive failed: No data"

Upon investigation of the key server it seems that Ludo's key is
missing.

I did a key listing on my end for that key, and it is not expired until
February 18th of this month, but in either case the key is missing from
the server rendering the shell script unuseable without commenting out
the verification steps.

Thought I would pass this information along as it seemed important.

Brett Gilio

Re: Public key (and mailing list issue)

[Ricardo Wurmus]

Brett Gilio <brettg@posteo.net> writes:

> I am sending this email on behalf of a friend trying to install the Guix
> binary using the shell script. It appears his email is being rejected as
> "inappropriate by the moderator." for some unknown reason. I think it
> might be a spam-filter mechanism against his @gmail.com mailing address,
> but that is just a suspicion.

No, there’s no filter against gmail addresses.
Messages by new senders are always graylisted at first.  They eventually
do make their way to the mailing list.

-- 
Ricardo

Re: Public key (and mailing list issue)

[Giovanni Biscuolo]

[-- Attachment #1: Type: text/plain, Size: 1342 bytes --]

Hi Brett, hi devels

Brett Gilio <brettg@posteo.net> writes:

[...]

> Upon investigation of the key server it seems that Ludo's key is
> missing.

i searched for it four times in 5 minutes and it worked three times,
failing twice with "No data"; anyway it seems to me that search is always
very slow

this issue has been reported to GnuPG https://dev.gnupg.org/T4163 but
AFAIU thers is nothing they can do, nor Guix maintainers

...but: I've switched to hkps://hkps.pool.sks-keyservers.net [1] as my
default pool and now lookups are _very_ fast

should we change the proposed command line to fetch the key in the
installation script and in the "Binary installation" section of the
manual?

something like

  gpg --keyserver hkps://hkps.pool.sks-keyservers.net --search-keys 3CE464558A84FDC69DB40CFB090B11993D9AEBB5

AFAIU for this to work out of the box users need a 2.1.11 and above
gnupg version, otherwise they should follow the instructions found here:

  https://sks-keyservers.net/overview-of-pools.php#pool_hkps

pointers to official GnuPG manual/howto on how to set hkps pools?

WDYT?

if there is enough consensus I can send a pathcset

Ciao
Giovanni

[...]

[1] "keyserver hkps://hkps.pool.sks-keyservers.net" in my .gnupg/gpg.conf

-- 
Giovanni Biscuolo

Xelera IT Infrastructures

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 832 bytes --]