Re: [ANNOUNCE] 4.19.245-rt109

[Ralf Mardorf <ralf.mardorf@alice-dsl.net>]

On Fri, 27 May 2022 08:24:39 +0200, Daniel Wagner wrote:
>Signing key fingerprint:
>
>  5BF6 7BC5 0826 72CA BB45  ACAE 587C 5ECA 5D0A 306C
>
>All keys used for the above files and repositories can be found on the
>following git repository:
>
>   git://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git
>
>Enjoy!

Hi Daniel,

again it's no joy to import your key ;).

$ git clone git://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git
2>/dev/null && gpg --import pgpkeys/keys/587C5ECA5D0A306C.asc gpg: key
2>587C5ECA5D0A306C: 17 signatures not checked due to missing keys
gpg: key 587C5ECA5D0A306C: "Daniel Wagner <wagi@monom.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1


#### So I imported 500+ keys...


$ gpg --import pgpkeys/keys/*asc
[snip]
gpg: Total number processed: 525
gpg:               imported: 515
gpg:              unchanged: 6
gpg:            new subkeys: 2
gpg:         new signatures: 35
gpg: no ultimately trusted keys found
$ gpg --import pgpkeys/keys/587C5ECA5D0A306C.asc
gpg: key 587C5ECA5D0A306C: "Daniel Wagner <wagi@monom.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1


#### ...and validation still fails.


$ makepkg -s 
==> Making package: linux-rt-cornflower 4.19.245_rt109-0.300 (Sun 05 Jun 2022 14:08:01 CEST)
[...]
==> Verifying source file signatures with gpg...
    linux-4.19.245.tar ... Passed
    patch-4.19.245-rt109.patch ... FAILED (invalid public key 5BF67BC5082672CABB45ACAE587C5ECA5D0A306C)
==> ERROR: One or more PGP signatures could not be verified!

Regards,
Ralf