signature invalid

[user706]

Since today I'm getting signature invalid, i.e.

export LC_ALL=en_US.UTF-8 # for english error message etc.

pacman -Syuu

results in

error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: msys: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
:: Synchronizing package databases...
 mingw32                                                                                                                      534.8 KiB  32.6M/s 00:00 [###########################################################################################] 100%
 mingw32.sig                                                                                                                  119.0   B  0.00B/s 00:00 [###########################################################################################] 100%
error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: failed to update mingw32 (invalid or corrupted database (PGP signature))
 mingw64                                                                                                                      535.8 KiB  18.7M/s 00:00 [###########################################################################################] 100%
 mingw64.sig                                                                                                                  119.0   B  0.00B/s 00:00 [###########################################################################################] 100%
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: failed to update mingw64 (invalid or corrupted database (PGP signature))
 msys                                                                                                                         178.3 KiB  58.0M/s 00:00 [###########################################################################################] 100%
 msys.sig                                                                                                                     119.0   B  0.00B/s 00:00 [###########################################################################################] 100%
error: msys: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize all databases

Is it just my setup, or are other people also get this?

I've tried around with e.g.

pacman-key --refresh-keys

but it seems to hang forever and finally fails with some error.
(PS: I'm behind a proxy, but have http_proxy and https_proxy set.)

Any tips what to do/try?
How can I see the current signature and if it's the correct one?
Thanks.

[user706]

OK, so I changed to a different proxy, and then things started working

error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
error: msys: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
:: Synchronizing package databases...
 mingw32                                                                                                                                  534.8 KiB  3.09M/s 00:00 [####################################################################################################] 100%
 mingw32.sig                                                                                                                              119.0   B  0.00B/s 00:00 [####################################################################################################] 100%
 mingw64                                                                                                                                  535.8 KiB  3.17M/s 00:00 [####################################################################################################] 100%
 mingw64.sig                                                                                                                              119.0   B  0.00B/s 00:00 [####################################################################################################] 100%
 msys                                                                                                                                     178.3 KiB  3.00M/s 00:00 [####################################################################################################] 100%
 msys.sig                                                                                                                                 119.0   B   116K/s 00:00 [####################################################################################################] 100%
:: Starting core system upgrade...
warning: terminate other MSYS2 programs before proceeding
resolving dependencies...
looking for conflicting packages...

Packages (5) bash-4.4.023-1  filesystem-2018.12-1  mintty-1~2.9.5-1  msys2-runtime-2.11.2-1  pacman-5.1.2-2

Total Download Size:   19.03 MiB
Total Installed Size:  68.25 MiB
Net Upgrade Size:       0.93 MiB

:: Proceed with installation? [Y/n]
Interrupt signal received

Question: I want to know what it was that the first "bad" proxy blocked. Does anybody know what it could be?

Thanks.

(PS: pacman-key --refresh-keys # still waits endlessly so no change there)

[user706]

Regarding the endless hanging of

pacman-key --refresh-keys     #hangs for every until timeout

Perhaps it's related to the following:

# following command hangs for ever until timeout
gpg --keyserver hkp://p80.pool.sks-keyservers.net:80  --search-keys alexpux@gmail.com

# following command works perfectly!!!
gpg --keyserver hkp://p80.pool.sks-keyservers.net:80 --keyserver-options "timeout=10 http-proxy=$http_proxy" --search-keys alexpux@gmail.com

[user706]

Perhaps it's related to the following [...]

Ah indeed it is:

Changing /etc/pacman.d/gnupg/gpg.conf to

no-greeting
no-permission-warning
lock-never
#keyserver hkp://pool.sks-keyservers.net
keyserver hkp://p80.pool.sks-keyservers.net:80
keyserver-options timeout=10
keyserver-options http-proxy=http://10.56.160.99:8080

now gets the command

pacman-key --refresh-keys

to succeed!!!!

[tvallois]

Hi,

I'm having the same issue but only with msys.

pacman -Syuu
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
:: Synchronizing package databases...
mingw32 is up to date
mingw64 is up to date
msys 178.7 KiB 9.19M/s 00:00 [#####################] 100%
msys.sig 119.0 B 0.00B/s 00:00 [#####################] 100%
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize all databases

[ddfznt]

Hi,

I'm having the same issue but only with msys.

pacman -Syuu
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
:: Synchronizing package databases...
mingw32 is up to date
mingw64 is up to date
msys 178.7 KiB 9.19M/s 00:00 [#####################] 100%
msys.sig 119.0 B 0.00B/s 00:00 [#####################] 100%
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize all databases

same here, any solution?

[nvatvani]

Hi,
I'm having the same issue but only with msys.
pacman -Syuu
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
:: Synchronizing package databases...
mingw32 is up to date
mingw64 is up to date
msys 178.7 KiB 9.19M/s 00:00 [#####################] 100%
msys.sig 119.0 B 0.00B/s 00:00 [#####################] 100%
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize all databases

same here, any solution?

Yes. See below:

$ gpg --search-keys alexpux@gmail.com
gpg: searching for "alexpux@gmail.com" from hkp server keys.gnupg.net
(1) Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com
2048 bit RSA key CA25678A, created: 2014-09-28
(2) Alexey Pavlov (Alexpux) alexpux@gmail.com
2048 bit DSA key A47D45A1, created: 2013-11-11
Keys 1-2 of 2 for "alexpux@gmail.com". Enter number(s), N)ext, or Q)uit > 2
gpg: requesting key A47D45A1 from hkp server keys.gnupg.net
gpg: key A47D45A1: public key "Alexey Pavlov (Alexpux) alexpux@gmail.com" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg: imported: 1

How did I know to select the 2nd key of alexpux@gmail.com? You match the DSA key (or email-address if you want to risk it) from:

$ pacman-key --refresh-keys
gpg: refreshing 8 keys from hkp://pool.sks-keyservers.net
gpg: requesting key 43B6CE4F from hkp server pool.sks-keyservers.net
gpg: requesting key CA25678A from hkp server pool.sks-keyservers.net
gpg: requesting key AEEA755C from hkp server pool.sks-keyservers.net
gpg: requesting key 3E0D0813 from hkp server pool.sks-keyservers.net
gpg: requesting key 3E652008 from hkp server pool.sks-keyservers.net
gpg: requesting key A47D45A1 from hkp server pool.sks-keyservers.net
gpg: requesting key 2C51581E from hkp server pool.sks-keyservers.net
gpg: requesting key 4CA56930 from hkp server pool.sks-keyservers.net
gpgkeys: key 46316C7650498B2F94CD9D627D0C43A843B6CE4F not found on keyserver
gpg: key CA25678A: "Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com" 4 new signatures
gpg: key AEEA755C: "Martell Malone (martell) martellmalone@gmail.com" 3 new signatures
gpg: key 3E0D0813: "Ray Donnelly (MSYS2 Developer - master key) mingw.android@gmail.com" 2 new signatures
gpg: key 3E652008: "Ignacio Casal Quinteiro icquinteiro@gmail.com" 2 new signatures
gpg: key A47D45A1: "Alexey Pavlov (Alexpux) alexpux@gmail.com" 1 new signature
gpg: key 2C51581E: "Martell Malone (MSYS2 Developer) martellmalone@gmail.com" not changed
gpg: key 4CA56930: "Ray Donnelly (MSYS2 Developer) mingw.android@gmail.com" 2 new signatures
gpg: Total number processed: 7
gpg: unchanged: 1
gpg: new signatures: 14
gpg: keyserver communications error: key not found
gpg: keyserver communications error: bad public key
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0 valid: 1 signed: 4 trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1 valid: 4 signed: 3 trust: 0-, 0q, 0n, 4m, 0f, 0u
gpg: depth: 2 valid: 3 signed: 0 trust: 3-, 0q, 0n, 0m, 0f, 0u
gpg: keyserver refresh failed: bad public key
==> ERROR: A specified local key could not be updated from a keyserver.