include 3.8.0rc1 in manylinux1

[mattip]

Repeat gh-344 for the manylinux1 branch

[mattip]

The gpg --recv-keys command is failing:

gpg: requesting key 10250568 from hkp server subkeys.pgp.net
gpg: keyserver timed out
gpg: keyserver receive failed: keyserver error

On gh-344 the same --recv-key command printed

gpg: requesting key 10250568 from hkp server keys.gnupg.net
gpg: key 10250568: public key ... imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)

How do I change the keyserver to keys.gnupg.net?

[mattip]

using the full key worked

[trishankatdatadog]

@mattip Good, full key IDs protect us from collisions attacks, too

Please add the --no-auto-key-locate option to gpg verify here: this should prevent GPG from "helpfully" downloading public keys we did not specifically download

[mattip]

added requested flag

[mattip]

why does this sometimes succeed, sometimes fail?

gpg --keyserver keys.gnupg.net --recv-keys \
E3FF2839C048B25C084DEBE9B26995E310250568

[mattip]

That time it worked. Should we reopen again to make sure it was a once-off fluke?

[auvipy]

now its passing