gpg request for keys always times out

debsys07 · 02-17-2011, 04:52 PM

Just trying to get some packages upgraded on Debian/Lenny, esp. PHP5, but I always get the NO_PUBKEY error from php53.dotdeb.org.

I resolved the same problem with security.debian.org by doing:

apt-get install debian-keyring debian-archive-keyring
apt-key update

but no luck on dotdeb. trying:

gpg --keyserver keys.gnupg.net --recv-key A2098A6E

on several different suggested keyservers merely hangs. I'm stuck!

Thx,
Ron

jlinkels · 02-17-2011, 05:12 PM

You have to paste the entire string specified behind NO_PUBKEY in gpg --keyserver keys.gnupg.net --recv-key command. Your requested key seems too short.

And remember that this TCP communication runs to port 11371. My firewall blocked ports > 1024 and any connection failed until I opened up that port.

jlinkels

debsys07 · 02-17-2011, 05:39 PM

Thx for the reply! Hmmm, examples & suggestions I had seen elsewhere said use the last 8 chars from the key string in the msg.

But -- since the request is hanging, the port/firewall problem sounds likely. I haven't fiddled with opening a port, so more investigation -- any quick hints?

jlinkels · 02-17-2011, 06:35 PM

This is exactly what I did (from my history file yesterday)

Code:

gpg --keyserver pgpkeys.mit.edu --recv-key AED4B06F473041FA
gpg -a --export AED4B06F473041FA | apt-key add -

jlinkels