also sprach Michael Vogt <m...@debian.org> [2009.04.09.0943 +0200]: > Could you please run (preferably only with the debian.madduck.net > url): # apt-get update -o debug::acquire::gpgv=true and attach the > output? I just tested it on my system and it seems to be working > (your clock was not off for some reason, e.g. to test expiring > keys?).
I have not touched the clock at all. pulse:/home/madduck# apt-get update -o debug::acquire::gpgv=true Get:1 http://debian.madduck.net sid Release.gpg [197B] Hit http://debian.madduck.net sid Release 99% [Working]inside VerifyGetSigners gpgv path: /usr/bin/gpgv Keyring path: /etc/apt/trusted.gpg Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --ignore-time-conflict --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/debian.madduck.net_repo_dists_sid_Release.gpg /var/lib/apt/lists/debian.madduck.net_repo_dists_sid_Release 99% [Release gpgv 9914]Read: [GNUPG:] KEYEXPIRED 1182334739 Got KEYEXPIRED! Read: [GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead Read: [GNUPG:] SIG_ID D2M7RKDiTEH9ZrZjtANG3Hfmnus 2009-04-07 1239122210 Read: [GNUPG:] EXPKEYSIG A4BA872BD5B9E51E madduck's archive signing key (http://debian.madduck.net/repo) <arch...@debian.madduck.net> Read: [GNUPG:] VALIDSIG 57260E2A6376CB441AE90B77A4BA872BD5B9E51E 2009-04-07 1239122210 0 4 0 17 2 00 57260E2A6376CB441AE90B77A4BA872BD5B9E51E gpgv exited Err http://debian.madduck.net sid Release Get:2 http://debian.madduck.net sid Release [9914B] 99% [2 Release gpgv 9914]yGetSigners gpgv path: /usr/bin/gpgv Keyring path: /etc/apt/trusted.gpg Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --ignore-time-conflict --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/debian.madduck.net_repo_dists_sid_Release.gpg /var/lib/apt/lists/debian.madduck.net_repo_dists_sid_Release Read: [GNUPG:] KEYEXPIRED 1182334739 Got KEYEXPIRED! Read: [GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead Read: [GNUPG:] SIG_ID D2M7RKDiTEH9ZrZjtANG3Hfmnus 2009-04-07 1239122210 Read: [GNUPG:] EXPKEYSIG A4BA872BD5B9E51E madduck's archive signing key (http://debian.madduck.net/repo) <arch...@debian.madduck.net> Read: [GNUPG:] VALIDSIG 57260E2A6376CB441AE90B77A4BA872BD5B9E51E 2009-04-07 1239122210 0 4 0 17 2 00 57260E2A6376CB441AE90B77A4BA872BD5B9E51E gpgv exited Ign http://debian.madduck.net sid Release Ign http://debian.madduck.net sid/main Packages/DiffIndex Ign http://debian.madduck.net sid/main Sources/DiffIndex Ign http://debian.madduck.net sid/main Packages Ign http://debian.madduck.net sid/main Sources Hit http://debian.madduck.net sid/main Packages Hit http://debian.madduck.net sid/main Sources Fetched 10.1kB in 0s (72.3kB/s) Reading package lists... Done W: GPG error: http://debian.madduck.net sid Release: The following signatures were invalid: KEYEXPIRED 1182334739 W: You may want to run apt-get update to correct these problems > > pulse:~# wget -q > > http://debian.madduck.net/repo/gpg/a4ba872bd5b9e51e.key.asc > > http://debian.madduck.net/repo/dists/sid/Release{,.gpg} > > pulse:~# gpg --import < a4ba872bd5b9e51e.key.asc > > gpg: /root/.gnupg/trustdb.gpg: trustdb created > > gpg: key D5B9E51E: public key "madduck's archive signing key > > (http://debian.madduck.net/repo) <arch...@debian.madduck.net>" imported > > gpg: Total number processed: 1 > > gpg: imported: 1 > > gpg: no ultimately trusted keys found > > pulse:~# gpg --verify Release.gpg Release > [..] > > Could you please also run: > # gpgv --status-fd 1 Release.gpg Release After playing around with this and having to use --keyring, I eventually found out that I hadn't updated the key in /etc/apt/trusted.gpg in the chroot. :) So it seems to work. Thanks! -- .''`. martin f. krafft <madd...@d.o> Related projects: : :' : proud Debian developer http://debiansystem.info `. `'` http://people.debian.org/~madduck http://vcs-pkg.org `- Debian - when you have better things to do than fixing systems fitter, healthier, more productive like a pig, in a cage, on antibiotics -- radiohead
digital_signature_gpg.asc
Description: Digital signature (see http://martin-krafft.net/gpg/)
