tech-pkg archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

gnupg22+ vs netpgpverify status



Related to the libassuan upgrade, does anyone know of the current status of support for gnupg 2.2+ keys in netpgpverify? This is one of the reasons why I still need to build my own version of gnupg20 (which is now going to be a lot more difficult after the upgrade).

Essentially packages signed using GnuPG 2.2 or newer can no longer be verified by netpgpverify, something changed in the format of the keys, so you just get e.g.

pkg_add: unable to verify signature: Signature key id 8918e8130c2627d6 not found
even though:

  pub   rsa4096 2022-06-29 [SC]
        59C22B295D7A6D8918E8130C2627D6EF6BD79CFC
  uid           [ultimate] MNX Cloud Package Signing (trunk) <pkgsrc+trunk%smartos.org@localhost>

Thanks,

--
Jonathan Perkin   -   mnx.io   -   pkgsrc.smartos.org
Open Source Complete Cloud   www.tritondatacenter.com


Home | Main Index | Thread Index | Old Index