You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@whimsical.apache.org by Craig Russell <ap...@gmail.com> on 2019/03/04 00:52:45 UTC

Re: Failure trying to validate signature

Here's today's version of "no key found". In case anyone can say "this is what we expect for no key found". 

This is the result of gpg --verify
Should we try to fix the no default file /srv/gpg/gpg.conf?

gpg: Signature made Sun Mar 3 16:51:55 2019 UTC using RSA key ID 8D59EBAD 
gpg: Can't check signature: No public key 

The above is the result of gpg --verify
The following is the result of gpg --recv-keys

gpg: Note: no default option file '/srv/gpg/gpg.conf' 
gpg: enabled debug flags: ipc 
gpg: DBG: chan_3 <- # Home: /srv/gpg 
gpg: DBG: chan_3 <- # Config: [none] 
gpg: DBG: chan_3 <- OK Dirmngr 2.1.11 at your service 
gpg: DBG: chan_4 <- # Home: /srv/gpg 
gpg: DBG: chan_4 <- # Config: [none] 
gpg: DBG: chan_4 <- OK Dirmngr 2.1.11 at your service 
gpg: DBG: connection to the dirmngr established 
gpg: DBG: chan_4 -> GETINFO version 
gpg: DBG: chan_4 <- D 2.1.11 gpg: DBG: chan_4 <- OK 
gpg: DBG: chan_4 -> KEYSERVER --clear hkp://hkps.pool.sks-keyservers.net 
gpg: DBG: chan_4 <- OK gpg: DBG: chan_4 -> KS_GET -- 0x8D59EBAD 
gpg: DBG: chan_4 <- S PROGRESS tick ? 0 0 
gpg: DBG: chan_4 <- ERR 167772218 No data <Dirmngr> 
gpg: keyserver receive failed: No data 
gpg: DBG: chan_4 -> BYE 
gpg: secmem usage: 0/65536 bytes in 0 blocks

> On Feb 20, 2019, at 4:20 PM, sebb <se...@gmail.com> wrote:
> 
> http://hkps.pool.sks-keyservers.net/pks/lookup?search=0x7e3ed5bc&fingerprint=on&op=index
> 
> says not found
> 
> However this does find the key:
> 
> http://pool.sks-keyservers.net/pks/lookup?search=0x7E3ED5BC&op=vindex
> 
> Seems to be an issue with the pool.
> 
> On Wed, 20 Feb 2019 at 23:22, Craig Russell <ap...@gmail.com> wrote:
>> 
>> Hi,
>> 
>> The icla received today at 12:55 PM PST failed. There was no body; just icla.pdf and signature.
>> 
>> Any ideas? Is this "no key found"? (I hope not)
>> 
>> gpg: Signature made Wed Feb 20 20:00:56 2019 UTC using RSA key ID 7E3ED5BC
>> gpg: Can't check signature: No public key
>> gpg: Note: no default option file '/srv/gpg/gpg.conf'
>> gpg: enabled debug flags: ipc
>> gpg: DBG: chan_3 <- # Home: /srv/gpg
>> gpg: DBG: chan_3 <- # Config: [none]
>> gpg: DBG: chan_3 <- OK Dirmngr 2.1.11 at your service
>> gpg: DBG: chan_4 <- # Home: /srv/gpg
>> gpg: DBG: chan_4 <- # Config: [none]
>> gpg: DBG: chan_4 <- OK Dirmngr 2.1.11 at your service
>> gpg: DBG: connection to the dirmngr established
>> gpg: DBG: chan_4 -> GETINFO version
>> gpg: DBG: chan_4 <- D 2.1.11
>> gpg: DBG: chan_4 <- OK
>> gpg: DBG: chan_4 -> KEYSERVER --clear hkp://hkps.pool.sks-keyservers.net
>> gpg: DBG: chan_4 <- OK gpg: DBG: chan_4 -> KS_GET -- 0x7E3ED5BC
>> gpg: DBG: chan_4 <- S PROGRESS tick ? 0 0
>> gpg: DBG: chan_4 <- ERR 167772218 No data <Dirmngr>
>> gpg: keyserver receive failed: No data
>> gpg: DBG: chan_4 -> BYE
>> gpg: secmem usage: 0/65536 bytes in 0 blocks
>> 
>> Craig L Russell
>> Secretary, Apache Software Foundation
>> clr@apache.org http://db.apache.org/jdo
>> 

Craig L Russell
Secretary, Apache Software Foundation
clr@apache.org <ma...@apache.org> http://db.apache.org/jdo <http://db.apache.org/jdo>

Re: Failure trying to validate signature

Posted by sebb <se...@gmail.com>.
On Mon, 4 Mar 2019 at 00:52, Craig Russell <ap...@gmail.com> wrote:
>
> Here's today's version of "no key found". In case anyone can say "this is what we expect for no key found".
>

Back in Dec 2018 I posted a dummy ICLA signed with a test key.
I have not uploaded the test key.

The mail is still available here:

https://whimsy.apache.org/secretary/workbench/201812/0db97d2af8/

If you try to check the sig, the response is very similar to what you
show below.
So we know that a missing key produces that response; I suppose other
conditions may also produce the same response.

Note that this does seem to happen from time to time even if the key
has been uploaded.
If that is the case, a retry should fix the issue.

> This is the result of gpg --verify
> Should we try to fix the no default file /srv/gpg/gpg.conf?

It's just a Note - I don't think it matters.

> gpg: Signature made Sun Mar 3 16:51:55 2019 UTC using RSA key ID 8D59EBAD
> gpg: Can't check signature: No public key
>
> The above is the result of gpg --verify
> The following is the result of gpg --recv-keys
>
> gpg: Note: no default option file '/srv/gpg/gpg.conf'
> gpg: enabled debug flags: ipc
> gpg: DBG: chan_3 <- # Home: /srv/gpg
> gpg: DBG: chan_3 <- # Config: [none]
> gpg: DBG: chan_3 <- OK Dirmngr 2.1.11 at your service
> gpg: DBG: chan_4 <- # Home: /srv/gpg
> gpg: DBG: chan_4 <- # Config: [none]
> gpg: DBG: chan_4 <- OK Dirmngr 2.1.11 at your service
> gpg: DBG: connection to the dirmngr established
> gpg: DBG: chan_4 -> GETINFO version
> gpg: DBG: chan_4 <- D 2.1.11 gpg: DBG: chan_4 <- OK
> gpg: DBG: chan_4 -> KEYSERVER --clear hkp://hkps.pool.sks-keyservers.net
> gpg: DBG: chan_4 <- OK gpg: DBG: chan_4 -> KS_GET -- 0x8D59EBAD
> gpg: DBG: chan_4 <- S PROGRESS tick ? 0 0
> gpg: DBG: chan_4 <- ERR 167772218 No data <Dirmngr>
> gpg: keyserver receive failed: No data
> gpg: DBG: chan_4 -> BYE
> gpg: secmem usage: 0/65536 bytes in 0 blocks
>
> > On Feb 20, 2019, at 4:20 PM, sebb <se...@gmail.com> wrote:
> >
> > http://hkps.pool.sks-keyservers.net/pks/lookup?search=0x7e3ed5bc&fingerprint=on&op=index
> >
> > says not found
> >
> > However this does find the key:
> >
> > http://pool.sks-keyservers.net/pks/lookup?search=0x7E3ED5BC&op=vindex
> >
> > Seems to be an issue with the pool.
> >
> > On Wed, 20 Feb 2019 at 23:22, Craig Russell <ap...@gmail.com> wrote:
> >>
> >> Hi,
> >>
> >> The icla received today at 12:55 PM PST failed. There was no body; just icla.pdf and signature.
> >>
> >> Any ideas? Is this "no key found"? (I hope not)
> >>
> >> gpg: Signature made Wed Feb 20 20:00:56 2019 UTC using RSA key ID 7E3ED5BC
> >> gpg: Can't check signature: No public key
> >> gpg: Note: no default option file '/srv/gpg/gpg.conf'
> >> gpg: enabled debug flags: ipc
> >> gpg: DBG: chan_3 <- # Home: /srv/gpg
> >> gpg: DBG: chan_3 <- # Config: [none]
> >> gpg: DBG: chan_3 <- OK Dirmngr 2.1.11 at your service
> >> gpg: DBG: chan_4 <- # Home: /srv/gpg
> >> gpg: DBG: chan_4 <- # Config: [none]
> >> gpg: DBG: chan_4 <- OK Dirmngr 2.1.11 at your service
> >> gpg: DBG: connection to the dirmngr established
> >> gpg: DBG: chan_4 -> GETINFO version
> >> gpg: DBG: chan_4 <- D 2.1.11
> >> gpg: DBG: chan_4 <- OK
> >> gpg: DBG: chan_4 -> KEYSERVER --clear hkp://hkps.pool.sks-keyservers.net
> >> gpg: DBG: chan_4 <- OK gpg: DBG: chan_4 -> KS_GET -- 0x7E3ED5BC
> >> gpg: DBG: chan_4 <- S PROGRESS tick ? 0 0
> >> gpg: DBG: chan_4 <- ERR 167772218 No data <Dirmngr>
> >> gpg: keyserver receive failed: No data
> >> gpg: DBG: chan_4 -> BYE
> >> gpg: secmem usage: 0/65536 bytes in 0 blocks
> >>
> >> Craig L Russell
> >> Secretary, Apache Software Foundation
> >> clr@apache.org http://db.apache.org/jdo
> >>
>
> Craig L Russell
> Secretary, Apache Software Foundation
> clr@apache.org <ma...@apache.org> http://db.apache.org/jdo <http://db.apache.org/jdo>