bad signature on python-type-python-dateutil
```
a5% yay -S python-types-python-dateutil
Sync Explicit (1): python-types-python-dateutil-2.8.19.13-1
warning: python-types-python-dateutil-2.8.19.13-1 is up to date -- reinstalling
resolving dependencies...
looking for conflicting packages...
Package (1) Old Version New Version Net Change Download Size
alerque/python-types-python-dateutil 2.8.19.13-1 2.8.19.13-1 0.00 MiB 0.01 MiB
Total Download Size: 0.01 MiB
Total Installed Size: 0.02 MiB
Net Upgrade Size: 0.00 MiB
:: Proceed with installation? [Y/n]
:: Retrieving packages...
python-types-python-dateutil-2.8.19.13-1-any
python-types-python-dateutil-2.8.19.13-1-any 8.8 KiB 17.6 KiB/s 00:01 [##########################################################################################################] 100%
(1/1) checking keys in keyring [##########################################################################################################] 100%
(1/1) checking package integrity [##########################################################################################################] 100%
error: python-types-python-dateutil: signature from "Caleb Maclennan <alerque@archlinux.org>" is invalid
:: File /var/cache/pacman/pkg/python-types-python-dateutil-2.8.19.13-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)).
Do you want to delete it? [Y/n]
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.
-> error installing repo packages
```
the signature file:
```
a5% gpg --list-packets </var/cache/pacman/pkg/python-types-python-dateutil-2.8.19.13-1-any.pkg.tar.zst.sig
# off=0 ctb=89 tag=2 hlen=3 plen=586
:signature packet: algo 1, keyid A85E811EB4CA2E08
version 4, created 1688042009, md5len 0, sigclass 0x00
digest algo 8, begin of digest a5 49
hashed subpkt 33 len 21 (issuer fpr v4 B0D65295476606B71F0C6F82A85E811EB4CA2E08)
hashed subpkt 2 len 4 (sig created 2023-06-29)
hashed subpkt 28 len 21 (signer's user ID)
subpkt 16 len 8 (issuer key ID A85E811EB4CA2E08)
data: [4095 bits]
```
this key (`A85E811EB4CA2E08`) is different from the one in the README (`63CC496475267693`)
```
a5% gpg --list-keys A85E811EB4CA2E08
pub ed25519 2021-07-12 [SC] [expires: 2024-08-11]
CCB34EBBB9541EF3F7B366C1D4A753468A5A5B67
uid [ unknown] Caleb Maclennan <alerque@archlinux.org>
sub rsa4096 2021-07-12 [S] [expires: 2024-08-11]
sub cv25519 2021-07-12 [E] [expires: 2024-08-11]
a5% gpg --list-keys 63CC496475267693
pub rsa4096 2014-07-31 [SC] [expires: 2025-02-18]
9F377DDB6D3153A48EB3EB1E63CC496475267693
uid [ unknown] Caleb Maclennan <caleb@alerque.com>
sub rsa4096 2021-07-12 [E] [expires: 2025-02-18]
sub rsa4096 2021-07-12 [S] [expires: 2025-02-18]
```
关闭于 2024-05-02 10 条评论