GNU bug report logs - #75583
Can't retrieve key from keys.openpgp.org for release verification

Previous Next

To reply to this bug, email your comments to 75583 AT debbugs.gnu.org.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: fap <hello <at> fap.re>
To: bug-guile <at> gnu.org
Subject: Can't retrieve key from keys.openpgp.org for release verification
Date: Wed, 15 Jan 2025 13:46:07 +0100

[Message part 1 (text/plain, inline)]

Hello guile maintainers,

I just tried to install Guile via the asdf-guile plugin.
Sadly the automated verification fails with the following error:

|gpg: Signature made Sun 23 Jun 2024 11:52:58 PM CEST gpg: using RSA key 
4FD4D288D445934E0A14F9A5A8803732E4436885 gpg: requesting key 
A8803732E4436885 from hkp://keys.openpgp.org gpg: key A8803732E4436885: 
new key but contains no user ID - skipped gpg: Total number processed: 1 
gpg: w/o user IDs: 1 gpg: Can't check signature: No public key |

asdf-guile bug report: https://github.com/indiebrain/asdf-guile/issues/13

It looks like the keys.opengpg.org server now requires explicit consent
to publish a key, otherwise the user ID gets stripped when users request 
the key:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009311

> You are probably using the |keys.openpgp.org| keyserver, which has an 
owner approval system – it will strip all user IDs unless the owner of 
the corresponding email address has allowed them to be published.

Could you please allow keys.opengpg.org to distribute the key you're 
using to
sign the Guile releases?

Greetings, fap
||

[Message part 2 (text/html, inline)]

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.