Text only | Text with Images

Artix Linux Forum

Artix Linux => Package management => Topic started by: aethelstan on 28 December 2022, 21:25:17

Title: [SOLVED] Unknown Trust error on signatures in pacman
Post by: aethelstan on 28 December 2022, 21:25:17
Just installed the community gtk openrc.

Tried a system upgrade and got a number of packages kicking back the 'signature from  "so-and-so <[email protected]>" is unknown trust. Tried gpg --refresh-keys, no luck.

Tried: sudo pacman-key --refresh-keys. This returns many instances of [  unknown] next to individuals names and many 'error retrieving ... via WKD: No data'. Some keys refresh, some do not, problem persists.

I had fixed this issue on a different system (base Artix openrc) some months ago, but forget how I did it, may have involved something with synching the system clock

any help is appreciated
Title: Re: Unknown Trust error on signatures in pacman
Post by: gavincc on 28 December 2022, 22:38:04
maybe:
sudo pacman-key --populate archlinux artix
Title: Re: Unknown Trust error on signatures in pacman
Post by: aethelstan on 28 December 2022, 23:27:00
Quote from: gavincc – on
maybe:
sudo pacman-key --populate archlinux artix


Interesting, I get:

Quote
gpg: key 14EA29932173D311 was created 5110 seconds in the future (time warp or clock problem)
==> Appending keys from archlinux.gpg...
==> Appending keys from artix.gpg...
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
gpg: key 14EA29932173D311 was created 5109 seconds in the future (time warp or clock problem)
==> Locally signing trusted keys in keyring...
==> ERROR: 75BD80E4D834509F6E740257B1B73B02CC52A02A could not be locally signed.
==> ERROR: 2AC0A42EFB0B5CBC7A0402ED4DC95B6D7BE9892E could not be locally signed.
==> ERROR: 0E8B644079F599DFC1DDC3973348882F6AC6A4C2 could not be locally signed.
==> ERROR: 69E6471E3AE065297529832E6BA0F5A2037F4F41 could not be locally signed.
==> ERROR: D8AFDDA07A5B6EDFA7D8CCDAD6D055F927843F1C could not be locally signed.
==> ERROR: 91FFE0700E80619CEB73235CA88E23E377514E00 could not be locally signed.

So this looks like it is consistent with my hazy memory of this being a system clock issue. My system somehow has an asynchronous clock, and that's making keys look like they are from the future, throwing an error
Title: Re: Unknown Trust error on signatures in pacman
Post by: aethelstan on 28 December 2022, 23:37:35
ok I fixed it. Followed instructions here: https://bbs.archlinux.org/viewtopic.php?id=201776 and here: https://wiki.gentoo.org/wiki/Ntp

Not sure if these steps aren't redundant but:

# sync time with a gentoo server
ntpdate -b -u 0.gentoo.pool.ntp.org

# start some time sync service, why not?
rc-service ntp-client start

# nuke pacman master key
rm -fr /etc/pacman.d/gnupg

# create pacman master key
pacman-key --init

# reload keys from keyring resources
pacman-key --populate


Title: Re: Unknown Trust error on signatures in pacman
Post by: nous on 31 December 2022, 18:05:43
Your hardware clock was off. Also, artix-keyring must be updated first and separately, not together with archlinux-keyring.
Text only | Text with Images