[X2Go-Dev] Bug#1401: PGP-Key is not available on keyservers for debian buster

2019-08-24 Thread Daniel Ullrich

Package: complete x2go repo
version: none

sudo apt update
The following signatures could not be verified because their public key 
is not available: NO_PUBKEY E1F958385BFE2B6E
W: GPG error: http://packages.x2go.org/debian buster InRelease: The 
following signatures could not be verified because their public key is 
not available: NO_PUBKEY E1F958385BFE2B6E
E: The depot "http://packages.x2go.org/debian buster InRelease" is not 
signed.
N: An update from such a repository cannot be done in a secure way, so 
it is disabled by default.
N: See the apt-secure(8) manual page for more details on package vault 
creation and user configuration.


sudo apt-key adv --recv-keys --keyserver keys.gnupg.net E1F958385BFE2B6E
Executing: /tmp/apt-key-gpghome.4WhtJFIi3f/gpg.1.sh --recv-keys 
--keyserver keys.gnupg.net E1F958385BFE2B6E
gpg: Received from key server failed: The waiting time for the 
connection has expired.


x2go-keyring package is not available for debian buster => would solve 
this issue!___
x2go-dev mailing list
x2go-dev@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-dev


[X2Go-Dev] Processed: Re: Bug#1401: PGP-Key is not available on keyservers for debian buster

2019-08-24 Thread X2Go Bug Tracking System
Processing control commands:

> reassign -1 packages.x2go.org
Bug #1401 [complete x2go repo] PGP-Key is not available on keyservers for 
debian buster
Warning: Unknown package 'complete'
Warning: Unknown package 'x2go'
Warning: Unknown package 'repo'
Bug reassigned from package 'complete x2go repo' to 'packages.x2go.org'.
No longer marked as found in versions none.
Ignoring request to alter fixed versions of bug #1401 to the same values 
previously set

-- 
1401: bugs.x2go.org/cgi-bin/bugreport.cgi?bug=1401
X2Go Bug Tracking System
Contact ow...@bugs.x2go.org with problems
___
x2go-dev mailing list
x2go-dev@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-dev


[X2Go-Dev] Bug#1401: PGP-Key is not available on keyservers for debian buster

2019-08-24 Thread Mihai Moldovan
Control: reassign -1 packages.x2go.org


> N: An update from such a repository cannot be done in a secure way, so
> it is disabled by default.

The x2go-keyring package is available for Debian buster, includes the required
key file and should work just fine.

However, newer apt versions will disallow downloading from an untrusted 
repository.

In order to actually install the keyring package, try running something like:
sudo apt-get --allow-unauthenticated install x2go-keyring

Afterwards, sudo apt update should not return an error again. Do not use the
--allow-unauthenticated flag without understanding its implications.


> sudo apt-key adv --recv-keys --keyserver keys.gnupg.net E1F958385BFE2B6E
> Executing: /tmp/apt-key-gpghome.4WhtJFIi3f/gpg.1.sh --recv-keys
> --keyserver keys.gnupg.net E1F958385BFE2B6E
> gpg: Received from key server failed: The waiting time for the
> connection has expired.

The public key is also available on keyservers. Most keyservers are still
stoned, however, from the attacks that have been carried out a few months ago
and a year ago. For more information, and why this problem is unlike to be fixed
in the first place, refer to
https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f for instance.
I cannot fix public keyservers for you.

Like the message said: there was a timeout while fetching the key. It did not
say that such a key does not exist.



Mihai



signature.asc
Description: OpenPGP digital signature
___
x2go-dev mailing list
x2go-dev@lists.x2go.org
https://lists.x2go.org/listinfo/x2go-dev