Privacy Issue #2627
[networkmanager-hardened-configs][tor-hardened-preferences] Fake signatures?
Status:
fixed
Priority:
bug
Assignee:
% Done:
0%
Description
Pacman log (bandwidth removed):
$ LC_ALL=C sudo pacman -S networkmanager-hardened-configs tor-hardened-preferences resolving dependencies... looking for conflicting packages... Packages (2) networkmanager-hardened-configs-0.1-1 tor-hardened-preferences-0.1-1 Total Download Size: 0.01 MiB Total Installed Size: 0.00 MiB :: Proceed with installation? [Y/n] :: Retrieving packages... networkmanager-h... 6.2 KiB █████████/s 00:00 [######################] 100% tor-hardened-pre... 4.6 KiB █████████/s 00:00 [######################] 100% (2/2) checking keys in keyring [######################] 100% (2/2) checking package integrity [######################] 100% error: networkmanager-hardened-configs: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trust :: File /var/cache/pacman/pkg/networkmanager-hardened-configs-0.1-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: tor-hardened-preferences: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trust :: File /var/cache/pacman/pkg/tor-hardened-preferences-0.1-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded.
openmailbox.org appears to be down. Fake signatures?
Related issues
History
Updated by freemor about 4 years ago
- Status changed from unconfirmed to confirmed
Not Fake, just stale. Luke R. has not been around in forever.. If you look at the related issue you'll see that a lot of packages were effected.
Also searching in bug tracker first would have answered this for you when you read #2405.
Updated by freemor about 4 years ago
- Related to Bug #2405: [multiple-packages]: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trust added
Updated by freemor about 4 years ago
Did a quick and dirty rebuild to move them to my key.
Do not have time or energy for testing right now. But at least people can install them.