ITADN

bad signature on python-type-python-dateutil

#82Closedskwerlman 创建于 2024-04-30
S
skwerlmancommented
``` a5% yay -S python-types-python-dateutil Sync Explicit (1): python-types-python-dateutil-2.8.19.13-1 warning: python-types-python-dateutil-2.8.19.13-1 is up to date -- reinstalling resolving dependencies... looking for conflicting packages... Package (1) Old Version New Version Net Change Download Size alerque/python-types-python-dateutil 2.8.19.13-1 2.8.19.13-1 0.00 MiB 0.01 MiB Total Download Size: 0.01 MiB Total Installed Size: 0.02 MiB Net Upgrade Size: 0.00 MiB :: Proceed with installation? [Y/n] :: Retrieving packages... python-types-python-dateutil-2.8.19.13-1-any python-types-python-dateutil-2.8.19.13-1-any 8.8 KiB 17.6 KiB/s 00:01 [##########################################################################################################] 100% (1/1) checking keys in keyring [##########################################################################################################] 100% (1/1) checking package integrity [##########################################################################################################] 100% error: python-types-python-dateutil: signature from "Caleb Maclennan <alerque@archlinux.org>" is invalid :: File /var/cache/pacman/pkg/python-types-python-dateutil-2.8.19.13-1-any.pkg.tar.zst is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. -> error installing repo packages ``` the signature file: ``` a5% gpg --list-packets </var/cache/pacman/pkg/python-types-python-dateutil-2.8.19.13-1-any.pkg.tar.zst.sig # off=0 ctb=89 tag=2 hlen=3 plen=586 :signature packet: algo 1, keyid A85E811EB4CA2E08 version 4, created 1688042009, md5len 0, sigclass 0x00 digest algo 8, begin of digest a5 49 hashed subpkt 33 len 21 (issuer fpr v4 B0D65295476606B71F0C6F82A85E811EB4CA2E08) hashed subpkt 2 len 4 (sig created 2023-06-29) hashed subpkt 28 len 21 (signer's user ID) subpkt 16 len 8 (issuer key ID A85E811EB4CA2E08) data: [4095 bits] ``` this key (`A85E811EB4CA2E08`) is different from the one in the README (`63CC496475267693`) ``` a5% gpg --list-keys A85E811EB4CA2E08 pub ed25519 2021-07-12 [SC] [expires: 2024-08-11] CCB34EBBB9541EF3F7B366C1D4A753468A5A5B67 uid [ unknown] Caleb Maclennan <alerque@archlinux.org> sub rsa4096 2021-07-12 [S] [expires: 2024-08-11] sub cv25519 2021-07-12 [E] [expires: 2024-08-11] a5% gpg --list-keys 63CC496475267693 pub rsa4096 2014-07-31 [SC] [expires: 2025-02-18] 9F377DDB6D3153A48EB3EB1E63CC496475267693 uid [ unknown] Caleb Maclennan <caleb@alerque.com> sub rsa4096 2021-07-12 [E] [expires: 2025-02-18] sub rsa4096 2021-07-12 [S] [expires: 2025-02-18] ```
关闭于 2024-05-02 10 条评论