MSYS2 / Tickets / #87 Missing package signatures.

Alexx83 - 2014-10-02

Try remove /etc/pacman.d/gnupg folder and then run commands from ticket #85 again. Also show me your output from this commands.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Wayne Stambaugh - 2014-10-02
  
  Removed /etc/pacman.d/gnupg. It didn't work. Here are the commands and
  the outputs:
  
  $ pacman-key --init
  gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
  gpg: no ultimately trusted keys found
  gpg: Generating pacman keyring master key...
  ......+++++
  +++++
  gpg: key 6C7AEE45 marked as ultimately trusted
  gpg: Done
  ==> Updating trust database...
  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
  gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
  
  $ pacman-key --populate msys2
  ==> Appending keys from msys2.gpg...
  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
  gpg: depth: 0 valid: 1 signed: 0 trust: 0-, 0q, 0n, 0m, 0f, 1u
  ==> Locally signing trusted keys in keyring...
  -> Locally signing key D55E7A6D7CE9BA1587C0ACACF40D263ECA25678A...
  -> Locally signing key 123D4D51A1793859C2BE916BBBE514E53E0D0813...
  -> Locally signing key B91BCF3303284BF90CC043CA9F418C233E652008...
  ==> Importing owner trust values...
  gpg: setting ownertrust to 4
  gpg: setting ownertrust to 4
  gpg: inserting ownertrust of 4
  ==> Updating trust database...
  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
  gpg: depth: 0 valid: 1 signed: 3 trust: 0-, 0q, 0n, 0m, 0f, 1u
  gpg: depth: 1 valid: 3 signed: 1 trust: 0-, 0q, 0n, 3m, 0f, 0u
  gpg: depth: 2 valid: 1 signed: 0 trust: 1-, 0q, 0n, 0m, 0f, 0u
  
  $ pacman-key --refresh-keys
  gpg: refreshing 5 keys from hkp://pool.sks-keyservers.net
  gpg: requesting key 6C7AEE45 from hkp server pool.sks-keyservers.net
  gpg: requesting key CA25678A from hkp server pool.sks-keyservers.net
  gpg: requesting key 3E0D0813 from hkp server pool.sks-keyservers.net
  gpg: requesting key 3E652008 from hkp server pool.sks-keyservers.net
  gpg: requesting key A47D45A1 from hkp server pool.sks-keyservers.net
  gpgkeys: key 40B33075FFEF61F110923DDFD0E206D66C7AEE45 not found on keyserver
  gpg: key CA25678A: "Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com" 3
  new signatures
  gpg: key 3E0D0813: "Ray Donnelly (MSYS2 Developer - master key)
  mingw.android@gmail.com" 1 new signature
  gpg: key 3E652008: "Ignacio Casal Quinteiro icquinteiro@gmail.com" 2
  new signatures
  gpg: key A47D45A1: "Alexey Pavlov (Alexpux) alexpux@gmail.com" 1 new
  signature
  gpg: Total number processed: 4
  gpg: new signatures: 7
  gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
  gpg: depth: 0 valid: 1 signed: 3 trust: 0-, 0q, 0n, 0m, 0f, 1u
  gpg: depth: 1 valid: 3 signed: 1 trust: 0-, 0q, 0n, 3m, 0f, 0u
  gpg: depth: 2 valid: 1 signed: 0 trust: 1-, 0q, 0n, 0m, 0f, 0u
  
  $ pacman -Syu
  :: Synchronizing package databases...
  mingw32 177.0 KiB 293K/s 00:01
  [######################] 100%
  mingw32.sig 96.0 B 0.00B/s 00:00
  [######################] 100%
  mingw64 177.6 KiB 294K/s 00:01
  [######################] 100%
  mingw64.sig 96.0 B 0.00B/s 00:00
  [######################] 100%
  msys is up to date
  :: Starting full system upgrade...
  warning: mingw-w64-i686-gdb: local (7.8-1) is newer than mingw32 (7.6.2-1)
  warning: mingw-w64-x86_64-gdb: local (7.8-1) is newer than mingw64 (7.6.2-1)
  resolving dependencies...
  looking for conflicting packages...
  
  Packages (9) git-2.1.2-1 mingw-w64-i686-boost-1.56.0-2
  mingw-w64-i686-libidn-1.29-1 mingw-w64-i686-wxWidgets-3.0.1-3
  mingw-w64-x86_64-boost-1.56.0-2 mingw-w64-x86_64-libidn-1.29-1
  mingw-w64-x86_64-wineditline-2.101-2
  mingw-w64-x86_64-wxWidgets-3.0.1-3
  msys2-runtime-2.0.16224.6393980-3
  
  Total Download Size: 0.35 MiB
  Total Installed Size: 395.73 MiB
  Net Upgrade Size: -0.52 MiB
  
  :: Proceed with installation? [Y/n] y
  :: Retrieving packages ...
  mingw-w64-i686-libi... 163.3 KiB 269K/s 00:01
  [######################] 100%
  mingw-w64-x86_64-li... 162.8 KiB 275K/s 00:01
  [######################] 100%
  mingw-w64-x86_64-wi... 29.9 KiB 243K/s 00:00
  [######################] 100%
  (9/9) checking keys in keyring
  [######################] 100%
  (9/9) checking package integrity
  [######################] 100%
  error: msys2-runtime: missing required signature
  :: File
  /var/cache/pacman/pkg/msys2-runtime-2.0.16224.6393980-3-x86_64.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: git: missing required signature
  :: File /var/cache/pacman/pkg/git-2.1.2-1-x86_64.pkg.tar.xz is corrupted
  (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-i686-boost: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-i686-boost-1.56.0-2-any.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-i686-libidn: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-i686-libidn-1.29-1-any.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-i686-wxWidgets: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-i686-wxWidgets-3.0.1-3-any.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-x86_64-boost: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-x86_64-boost-1.56.0-2-any.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-x86_64-libidn: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-x86_64-libidn-1.29-1-any.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-x86_64-wineditline: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-x86_64-wineditline-2.101-2-any.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: mingw-w64-x86_64-wxWidgets: missing required signature
  :: File
  /var/cache/pacman/pkg/mingw-w64-x86_64-wxWidgets-3.0.1-3-any.pkg.tar.xz
  is corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] y
  error: failed to commit transaction (invalid or corrupted package (PGP
  signature))
  Errors occurred, no packages were upgraded.
  
  On 10/2/2014 10:53 AM, Alexx83 wrote:
  
  Try remove /etc/pacman.d/gnupg folder and then run commands from ticket
  
  85 again. Also show me your output from this commands.
  
  [tickets:#87] http://sourceforge.net/p/msys2/tickets/87 Missing
  package signatures.
  
  Status: open
  Milestone: 1.0
  Created: Thu Oct 02, 2014 12:49 PM UTC by Wayne Stambaugh
  Last Updated: Thu Oct 02, 2014 12:49 PM UTC
  Owner: nobody
  
  After a recent update, I get the following error for every new or
  updated package that pacman attempts to install:
  
  error: msys2-runtime: missing required signature
  :: File
  /var/cache/pacman/pkg/msys2-runtime-2.0.16224.6393980-3-x86_64.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] n
  
  I tried the steps for this ticket
  https://sourceforge.net/p/msys2/tickets/85/
  https://sourceforge.net/p/msys2/tickets/85 thinking it might resolve
  my issue but no luck. It doesn't make any difference if I reply yes or
  no to delete the package. The next time I run pacman, I still get the
  same error.
  
  Sent from sourceforge.net because you indicated interest in
  https://sourceforge.net/p/msys2/tickets/87/
  https://sourceforge.net/p/msys2/tickets/87
  
  To unsubscribe from further messages, please visit
  https://sourceforge.net/auth/subscriptions/
  https://sourceforge.net/auth/subscriptions
  
  Related
  
  Tickets: ~~#87~~
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexx83 - 2014-10-02

Also run pacdiff command to see if you have newly installed files that need to be reviewed

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Wayne Stambaugh - 2014-10-02
  
  I'm assuming there is no difference since pacdiff gave no output.
  
  On 10/2/2014 12:36 PM, Alexx83 wrote:
  
  Also run pacdiff command to see if you have newly installed files that
  need to be reviewed
  
  [tickets:#87] http://sourceforge.net/p/msys2/tickets/87 Missing
  package signatures.
  
  Status: open
  Milestone: 1.0
  Created: Thu Oct 02, 2014 12:49 PM UTC by Wayne Stambaugh
  Last Updated: Thu Oct 02, 2014 02:53 PM UTC
  Owner: nobody
  
  After a recent update, I get the following error for every new or
  updated package that pacman attempts to install:
  
  error: msys2-runtime: missing required signature
  :: File
  /var/cache/pacman/pkg/msys2-runtime-2.0.16224.6393980-3-x86_64.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] n
  
  I tried the steps for this ticket
  https://sourceforge.net/p/msys2/tickets/85/
  https://sourceforge.net/p/msys2/tickets/85 thinking it might resolve
  my issue but no luck. It doesn't make any difference if I reply yes or
  no to delete the package. The next time I run pacman, I still get the
  same error.
  
  Sent from sourceforge.net because you indicated interest in
  https://sourceforge.net/p/msys2/tickets/87/
  https://sourceforge.net/p/msys2/tickets/87
  
  To unsubscribe from further messages, please visit
  https://sourceforge.net/auth/subscriptions/
  https://sourceforge.net/auth/subscriptions
  
  Related
  
  Tickets: ~~#87~~
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexx83 - 2014-10-02

Ok. Go try to update with cache cleaning.
-- clear cache --
sudo pacman -Scc
-- force database update --
sudo pacman -Syy
-- upgrade/downgrade all packages --
sudo pacman -Suu

Also show output from "gpg --list-keys" and "pacman-key --list-keys"

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Wayne Stambaugh - 2014-10-02
  
  There are no keys from gpg --list-keys.
  
  $ pacman-key --list-keys
  /etc/pacman.d/gnupg/pubring.gpg
  
  pub 2048R/C3BAAA61 2014-10-02
  uid Pacman Keyring Master Key pacman@localhost
  
  pub 2048R/CA25678A 2014-09-28
  uid Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com
  sub 2048R/2BBF340E 2014-09-28
  
  pub 4096R/3E0D0813 2014-09-28
  uid Ray Donnelly (MSYS2 Developer - master key)
  mingw.android@gmail.com
  sub 4096R/8603AA9D 2014-09-28
  
  pub 2048R/3E652008 2014-09-29
  uid Ignacio Casal Quinteiro icquinteiro@gmail.com
  sub 2048R/64D62A76 2014-09-29
  
  pub 2048D/A47D45A1 2013-11-11
  uid Alexey Pavlov (Alexpux) alexpux@gmail.com
  sub 2048g/31CF7700 2013-11-11
  
  On 10/2/2014 2:06 PM, Alexx83 wrote:
  
  Ok. Go try to update with cache cleaning.
  -- clear cache --
  sudo pacman -Scc
  -- force database update --
  sudo pacman -Syy
  -- upgrade/downgrade all packages --
  sudo pacman -Suu
  
  Also show output from "gpg --list-keys" and "pacman-key --list-keys"
  
  [tickets:#87] http://sourceforge.net/p/msys2/tickets/87 Missing
  package signatures.
  
  Status: open
  Milestone: 1.0
  Created: Thu Oct 02, 2014 12:49 PM UTC by Wayne Stambaugh
  Last Updated: Thu Oct 02, 2014 04:36 PM UTC
  Owner: nobody
  
  After a recent update, I get the following error for every new or
  updated package that pacman attempts to install:
  
  error: msys2-runtime: missing required signature
  :: File
  /var/cache/pacman/pkg/msys2-runtime-2.0.16224.6393980-3-x86_64.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] n
  
  I tried the steps for this ticket
  https://sourceforge.net/p/msys2/tickets/85/
  https://sourceforge.net/p/msys2/tickets/85 thinking it might resolve
  my issue but no luck. It doesn't make any difference if I reply yes or
  no to delete the package. The next time I run pacman, I still get the
  same error.
  
  Sent from sourceforge.net because you indicated interest in
  https://sourceforge.net/p/msys2/tickets/87/
  https://sourceforge.net/p/msys2/tickets/87
  
  To unsubscribe from further messages, please visit
  https://sourceforge.net/auth/subscriptions/
  https://sourceforge.net/auth/subscriptions
  
  Related
  
  Tickets: ~~#87~~
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexx83 - 2014-10-03

Other user also have this problem and he find that pacman try to use system installed gpg4win instead msys-gpg.
Maybe you have installed some GPG software too?

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
- Wayne Stambaugh - 2014-10-03
  
  I just confirmed that this was my problem. What it interesting about
  this is that it worked fine up until a recent update. Here was my path
  before I removed the pgp4win path:
  
  $ echo $PATH
  /home/Wayne/bin:/mingw64/bin:/usr/local/bin:/usr/bin:/bin:/c/Program
  Files (x86)/Intel/iCLS Client:/c/Program Files/Intel/iCLS
  Client:/c/Program Files (x86)/NVIDIA
  Corporation/PhysX/Common:/c/windows/system32:/c/windows:/c/windows/System32/Wbem:/c/windows/System32/WindowsPowerShell/v1.0:/c/Program
  Files/Intel/Intel(R) Management Engine Components/DAL:/c/Program
  Files/Intel/Intel(R) Management Engine Components/IPT:/c/Program Files
  (x86)/Intel/Intel(R) Management Engine Components/DAL:/c/Program Files
  (x86)/Intel/Intel(R) Management Engine Components/IPT:/c/Program
  Files/Hewlett-Packard/SimplePass:/c/Program Files (x86)/Windows
  Live/Shared:/c/Program Files (x86)/Bazaar:/c/Program Files
  (x86)/GNU/GnuPG/pub:/c/Program Files (x86)/CMake 2.8/bin:/c/Program
  Files/doxygen/bin:/usr/bin/site_perl:/usr/bin/vendor_perl:/usr/bin/core_perl
  
  The /usr/bin path is before the pgp4win path so the msys version of gpg
  should have been used. Interestingly, which gpg gives me /usr/bin/gpg
  when the gpg4win path is set which makes me think something else changed
  recently. For now I can live without gpg4win in my PATH.
  
  On 10/3/2014 2:09 AM, Alexx83 wrote:
  
  Other user also have this problem and he find that pacman try to use
  system installed gpg4win instead msys-gpg.
  Maybe you have installed some GPG software too?
  
  [tickets:#87] http://sourceforge.net/p/msys2/tickets/87 Missing
  package signatures.
  
  Status: open
  Milestone: 1.0
  Created: Thu Oct 02, 2014 12:49 PM UTC by Wayne Stambaugh
  Last Updated: Thu Oct 02, 2014 06:06 PM UTC
  Owner: nobody
  
  After a recent update, I get the following error for every new or
  updated package that pacman attempts to install:
  
  error: msys2-runtime: missing required signature
  :: File
  /var/cache/pacman/pkg/msys2-runtime-2.0.16224.6393980-3-x86_64.pkg.tar.xz is
  corrupted (invalid or corrupted package (PGP signature)).
  Do you want to delete it? [Y/n] n
  
  I tried the steps for this ticket
  https://sourceforge.net/p/msys2/tickets/85/
  https://sourceforge.net/p/msys2/tickets/85 thinking it might resolve
  my issue but no luck. It doesn't make any difference if I reply yes or
  no to delete the package. The next time I run pacman, I still get the
  same error.
  
  Sent from sourceforge.net because you indicated interest in
  https://sourceforge.net/p/msys2/tickets/87/
  https://sourceforge.net/p/msys2/tickets/87
  
  To unsubscribe from further messages, please visit
  https://sourceforge.net/auth/subscriptions/
  https://sourceforge.net/auth/subscriptions
  
  Related
  
  Tickets: ~~#87~~
  
  If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexx83 - 2014-10-03

Problem is related to GPGME 1.5.x.
It first try to find gpgconf in the PATH.
Gpgconf present only for gnupg-2.x while msys have gnupg-1.x. That is why it get wrong gpg

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Wayne Stambaugh - 2014-10-04

I guess this ticket can be closed since my problem is resolved. Thanks for the help.

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Alexx83 - 2014-10-06

status: open --> closed

assigned_to: Alexx83
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

David Macek - 2015-11-24

Related: https://github.com/Alexpux/MSYS2-packages/issues/393

If you would like to refer to this comment somewhere else in this project, copy and paste the following link:

Missing package signatures.

Software Distribution and Building Platform for Windows

Milestone

Searches

Help

#87 Missing package signatures.

Related

Discussion

85 again. Also show me your output from this commands.

Related

Related

Related

Related