Project

General

Profile

Privacy Issue #2627

[networkmanager-hardened-configs][tor-hardened-preferences] Fake signatures?

Anonymous - about 4 years ago - . Updated about 4 years ago.

Status:
fixed
Priority:
bug
Assignee:
% Done:

0%


Description

Pacman log (bandwidth removed):

$ LC_ALL=C sudo pacman -S networkmanager-hardened-configs tor-hardened-preferences
resolving dependencies...
looking for conflicting packages...

Packages (2) networkmanager-hardened-configs-0.1-1
             tor-hardened-preferences-0.1-1

Total Download Size:   0.01 MiB
Total Installed Size:  0.00 MiB

:: Proceed with installation? [Y/n] 
:: Retrieving packages...
 networkmanager-h...     6.2 KiB █████████/s 00:00 [######################] 100%
 tor-hardened-pre...     4.6 KiB █████████/s 00:00 [######################] 100%
(2/2) checking keys in keyring                     [######################] 100%
(2/2) checking package integrity                   [######################] 100%
error: networkmanager-hardened-configs: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trust
:: File /var/cache/pacman/pkg/networkmanager-hardened-configs-0.1-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: tor-hardened-preferences: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trust
:: File /var/cache/pacman/pkg/tor-hardened-preferences-0.1-1-any.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n] y
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

openmailbox.org appears to be down. Fake signatures?


Related issues

Related to Packages - Bug #2405: [multiple-packages]: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trustin progress

Actions

History

#1

Updated by Anonymous about 4 years ago

I have tried

pacman-key --refresh-keys

#2

Updated by freemor about 4 years ago

  • Status changed from unconfirmed to confirmed

Not Fake, just stale. Luke R. has not been around in forever.. If you look at the related issue you'll see that a lot of packages were effected.
Also searching in bug tracker first would have answered this for you when you read #2405.

#3

Updated by freemor about 4 years ago

  • Related to Bug #2405: [multiple-packages]: signature from "Luke R. <g4jc@openmailbox.org>" is unknown trust added
#4

Updated by freemor about 4 years ago

Did a quick and dirty rebuild to move them to my key.
Do not have time or energy for testing right now. But at least people can install them.

#5

Updated by freemor about 4 years ago

  • Assignee set to freemor
#6

Updated by freemor about 4 years ago

  • Status changed from confirmed to fixed

Also available in: Atom PDF