Debian-Squeeze

dget 抱怨找不到公鑰

  • April 22, 2014

我正在嘗試反向移植一個包,但dget( dscverify) 表示由於找不到公鑰,它無法檢查簽名:

[root ~/build/openssl] dget -x http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_0[72/753]
queeze14.dsc
dget: retrieving http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_0.9.8o-4squeeze14.dsc
 % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                Dload  Upload   Total   Spent    Left  Speed
100  2003  100  2003    0     0  27106      0 --:--:-- --:--:-- --:--:-- 47690
dget: retrieving http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_0.9.8o.orig.tar.gz
 % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                Dload  Upload   Total   Spent    Left  Speed
100 3684k  100 3684k    0     0  3507k      0  0:00:01  0:00:01 --:--:-- 3615k
dget: retrieving http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_0.9.8o-4squeeze14.debia
n.tar.gz
 % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                Dload  Upload   Total   Spent    Left  Speed
100 94425  100 94425    0     0   371k      0 --:--:-- --:--:-- --:--:--  422k
openssl_0.9.8o-4squeeze14.dsc:
dscverify: openssl_0.9.8o-4squeeze14.dsc failed signature check:
gpg: keyblock resource `/root/.gnupg/secring.gpg': file open error
gpg: Signature made Mon 11 Feb 2013 11:04:16 PM EET using RSA key ID 1A5522DD
gpg: Can't check signature: public key not found
Validation FAILED!!

我嘗試過更新debian-keyring包,指定dsc來自不同版本的debian. 無濟於事。為什麼無法驗證簽名?我可以忽略這個消息嗎?或者我該怎麼辦?

執行以下命令可以解決問題。

$ gpg -k

據我所知,問題在於gpg抱怨沒有配置。最後執行以下命令:

cat openssl_0.9.8o-4squeeze14.dsc | gpg --batch --no-options --no-default-keyring \
   --always-trust --keyring /usr/share/keyrings/debian-keyring.gpg \
   --keyring /usr/share/keyrings/debian-maintainers.gpg

UPD這是一個錯誤報告

UPD連結到郵件列表討論

引用自:https://serverfault.com/questions/587486