LinuxQuestions.org
Latest LQ Deal: Linux Power User Bundle
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 04-22-2015, 06:41 PM   #1
magicm
Member
 
Registered: May 2003
Distribution: Slackware
Posts: 130

Rep: Reputation: 61
sbopkg resync fails GPG key after latest security upgrades - advice?


After the massive updates to -current (truly amazing amount of work!), and the subsequent updates to the security patches that followed, I upgraded all via slackpkg. Everything seemed to go swimmingly.

Then, because I sometimes exhibit anal-retentive characteristics (and to be thorough), I decided to resync (and take any needed actions) the various SlackBuilds that I have using sbopkg (excellent tool).

When I attempt that, I get the following:

Code:
root@yurt:~# sbopkg -r
Syncing with the remote repository into /var/lib/sbopkg/SBo/14.1.
receiving incremental file list

sent 5,461 bytes  received 972,349 bytes  130,374.67 bytes/sec
total size is 71,404,974  speedup is 73.03

Rsync with the SBo repository for Slackware 14.1 complete.

Importing SBo repository for Slackware 14.1 GPG Key...
gpg: DBG: armor-keys-failed (KEY 0x0000000000000000 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x0000000000000000 END
) ->0
Import done.

***SYNC COMPLETE***
I'm sure this is a side-effect of the security update to gpg, but am not sure how to correct this.

Thanks in advance for any help.
 
Old 04-23-2015, 01:11 AM   #2
mancha
Member
 
Registered: Aug 2012
Posts: 484

Rep: Reputation: Disabled
Hi magicm.

GnuPG 1.4.19's armor check prints extraneous debug output that doesn't appear to impact sbopkg (beyond littering the screen). I don't
use sbopkg so please confirm if this is not the case.

If you're interested, GnuPG fixed this in commit f34d88364a98494. Rebuilding GnuPG 1.4.19 with that patch should get rid of the junk.

--mancha

Last edited by mancha; 04-23-2015 at 01:26 AM.
 
3 members found this post helpful.
Old 04-23-2015, 09:14 AM   #3
magicm
Member
 
Registered: May 2003
Distribution: Slackware
Posts: 130

Original Poster
Rep: Reputation: 61
mancha -

Thank you. It does seem like I was fooled by a "false negative". I'll mark this as "solved".
 
Old 04-25-2015, 10:21 PM   #4
mancha
Member
 
Registered: Aug 2012
Posts: 484

Rep: Reputation: Disabled
You're welcome magicm.

There's a bit of good news in the latest current upgrades - seems Willy Sudiarto passed our analysis on to Pat.

Code:
Sat Apr 25 23:13:15 UTC 2015
n/gnupg2-2.0.27-i486-2.txz:  Rebuilt.
  Patched to fix spurious debug messages that may break sbopkg and slackpkg.
  Thanks to Willy Sudiarto Raharjo.
Unfortunately, only GnuPG-2 was fixed and I believe sbopkg and slackpkg use GnuPG-1.

--mancha
 
Old 04-25-2015, 10:28 PM   #5
mister_b
LQ Newbie
 
Registered: Aug 2013
Location: US
Distribution: Slackware 14.1
Posts: 28

Rep: Reputation: Disabled
Quote:
Originally Posted by mancha View Post

Unfortunately, only GnuPG-2 was fixed and I believe sbopkg and slackpkg use GnuPG-1.

--mancha
It was patching and rebuilding GnuPG-1 only that fixed the sbopkg error for me.
 
Old 04-25-2015, 11:50 PM   #6
willysr
Senior Member
 
Registered: Jul 2004
Location: Jogja, Indonesia
Distribution: Slackware-Current
Posts: 3,823

Rep: Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097
Yes, i asked Pat to do the same for gnupg as well after i saw that it was only rebuilt for GnuPG2
 
1 members found this post helpful.
Old 04-26-2015, 12:54 AM   #7
MadMaverick9
Member
 
Registered: Aug 2010
Posts: 285
Blog Entries: 3

Rep: Reputation: Disabled
Quote:
Originally Posted by willysr View Post
Yes, i asked Pat to do the same for gnupg as well after i saw that it was only rebuilt for GnuPG2
Only for -current or will/can this be done for 14.0/14.1 as well? Thanks.
 
Old 04-26-2015, 02:52 AM   #8
willysr
Senior Member
 
Registered: Jul 2004
Location: Jogja, Indonesia
Distribution: Slackware-Current
Posts: 3,823

Rep: Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097
it should be backported to -stable as well since i got this on 14.1 machine when running sbopkg -r

Code:
Importing SBo repository for Slackware 14.1 GPG Key...
gpg: DBG: armor-keys-failed (KEY 0x0000000000000000 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x0000000000000000 END
) ->0
Import done.
 
Old 04-26-2015, 06:11 AM   #9
mats_b_tegner
Member
 
Registered: Nov 2009
Location: Gothenburg, Sweden
Distribution: Slackware64
Posts: 444

Rep: Reputation: 232Reputation: 232Reputation: 232
If you run -current it's possible to use the patch provided in /source/n/gnupg2 on gnupg and add the appropriate to line the gnupg.SlackBuild e.g:
Code:
zcat $CWD/gnupg.remove.left.over.debug.messages.diff.gz | patch -p1 --verbose || exit 1
 
Old 04-26-2015, 07:51 AM   #10
kikinovak
MLED Founder
 
Registered: Jun 2011
Location: Montpezat (South France)
Distribution: Slackware, CentOS, FreeBSD
Posts: 3,362

Rep: Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911Reputation: 1911
Quote:
Originally Posted by willysr View Post
it should be backported to -stable as well since i got this on 14.1 machine when running sbopkg -r

Code:
Importing SBo repository for Slackware 14.1 GPG Key...
gpg: DBG: armor-keys-failed (KEY 0x0000000000000000 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x0000000000000000 END
) ->0
Import done.
+1. Same problem here on 14.1.
 
Old 04-26-2015, 01:31 PM   #11
mancha
Member
 
Registered: Aug 2012
Posts: 484

Rep: Reputation: Disabled
Quote:
Originally Posted by mats_b_tegner View Post
If you run -current it's possible to use the patch provided in /source/n/gnupg2 on gnupg and add the appropriate to line the gnupg.SlackBuild
That's because the patch being applied to GnuPG-2 in -current is actually the patch against GnuPG-1 that I provided in post #2. It
happens to apply to GnuPG-2 (with offsets) because of the shared code-base but the clean patch against GnuPG-2 is actually
936416690e6c.

--mancha
 
2 members found this post helpful.
Old 04-29-2015, 05:39 AM   #12
willysr
Senior Member
 
Registered: Jul 2004
Location: Jogja, Indonesia
Distribution: Slackware-Current
Posts: 3,823

Rep: Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097Reputation: 1097
it has been applied to gnupg (1.x) and also backported to -stable as well
 
1 members found this post helpful.
Old 04-29-2015, 07:24 AM   #13
magicm
Member
 
Registered: May 2003
Distribution: Slackware
Posts: 130

Original Poster
Rep: Reputation: 61
Thumbs up

XLNT ! - downloaded, applied, verified - 14.1 32-bit - thanx all
 
Old 04-29-2015, 09:12 AM   #14
mister_b
LQ Newbie
 
Registered: Aug 2013
Location: US
Distribution: Slackware 14.1
Posts: 28

Rep: Reputation: Disabled
Quote:
Originally Posted by willysr View Post
it has been applied to gnupg (1.x) and also backported to -stable as well
Great news. It's a sweet moment when you see the payoff of choosing not to blacklist a package rebuilt from -current for -stable.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Kernel security and maintenance advice needed. Recompile existing or build latest? holister Linux - Security 7 12-12-2011 11:13 PM
GPG: Bad session key gpg between gpg on linux and gpg gui on windows XP konqi Linux - Software 1 07-21-2009 09:37 AM
Revoking GPG key with only passphrase and public key djib Linux - Security 2 03-13-2007 03:20 AM
can see gpg key in apt-key, still can't update Dan63043 Ubuntu 2 09-25-2006 11:35 AM
GPG Data, Secret Key but no Public Key? Aeiri Linux - Software 5 07-20-2004 06:00 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 01:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration