ALHP/ALHP.GO
7
44
Fork 8
Code Issues 31 Pull Requests Projects Releases Wiki Activity

PGP key expiration #290

New Issue
Open
opened 2026-04-26 12:36:58 +02:00 by Korialo · 2 comments
Korialo commented 2026-04-26 12:36:58 +02:00
Copy Link

Lately I've noticed some updated failures:

[2026-04-25T20:28:28.916Z] checking keyring...
[2026-04-25T20:28:28.921Z] downloading required keys...
[2026-04-25T20:28:28.925Z] :: Import PGP key E3D0D2CD3952E298, "ALHP x86-64-v3 <alhp@harting.dev>"? [Y/n]
[2026-04-25T20:28:28.930Z] Errors occurred, no packages were upgraded.

Looking at the key from the Ubuntu server shows [1]:

pub [(4)rsa4096/0d4d2fdaf45468f3ddf59bede3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x0d4d2fdaf45468f3ddf59bede3d0d2cd3952e298) 2020-08-12T07:32:12Z

uid Archlinux CIE Repos (Build 2020/2021) <cie@harting.dev>
sig cert  [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2024-04-24T23:43:00Z 2026-04-24T23:43:00Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298)
sig cert  [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2022-05-22T16:03:49Z 2024-05-21T16:03:49Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298)
sig cert  [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2021-07-09T22:48:27Z 2022-07-09T22:48:27Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298)
sig cert  [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2020-08-12T07:32:12Z 2021-08-12T07:32:12Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298)
sig cert  [48998b4039bed1ca](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x48998b4039bed1ca) 2021-11-25T15:11:59Z ____________________ ____________________ [48998b4039bed1ca](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x48998b4039bed1ca)
sig cert  [8ca32f8bf3bc8088](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x8ca32f8bf3bc8088) 2025-04-01T18:40:36Z ____________________ ____________________ [8ca32f8bf3bc8088](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x8ca32f8bf3bc8088)

And it looks like it expired or I'm missing something here.

Lately I've noticed some updated failures: ``` [2026-04-25T20:28:28.916Z] checking keyring... [2026-04-25T20:28:28.921Z] downloading required keys... [2026-04-25T20:28:28.925Z] :: Import PGP key E3D0D2CD3952E298, "ALHP x86-64-v3 <alhp@harting.dev>"? [Y/n] [2026-04-25T20:28:28.930Z] Errors occurred, no packages were upgraded. ``` Looking at the key from the Ubuntu server shows [[1]](https://keyserver.ubuntu.com/pks/lookup?search=E3D0D2CD3952E298&fingerprint=on&op=index): ``` pub [(4)rsa4096/0d4d2fdaf45468f3ddf59bede3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x0d4d2fdaf45468f3ddf59bede3d0d2cd3952e298) 2020-08-12T07:32:12Z uid Archlinux CIE Repos (Build 2020/2021) <cie@harting.dev> sig cert [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2024-04-24T23:43:00Z 2026-04-24T23:43:00Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298) sig cert [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2022-05-22T16:03:49Z 2024-05-21T16:03:49Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298) sig cert [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2021-07-09T22:48:27Z 2022-07-09T22:48:27Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298) sig cert [e3d0d2cd3952e298](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xe3d0d2cd3952e298) 2020-08-12T07:32:12Z 2021-08-12T07:32:12Z ____________________ [[selfsig]](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0xe3d0d2cd3952e298) sig cert [48998b4039bed1ca](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x48998b4039bed1ca) 2021-11-25T15:11:59Z ____________________ ____________________ [48998b4039bed1ca](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x48998b4039bed1ca) sig cert [8ca32f8bf3bc8088](https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x8ca32f8bf3bc8088) 2025-04-01T18:40:36Z ____________________ ____________________ [8ca32f8bf3bc8088](https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x8ca32f8bf3bc8088) ``` And it looks like it expired or I'm missing something here.
Korialo changed title from Repo GPG key expiration to PGP key expiration 2026-04-26 12:39:03 +02:00
anonfunc commented 2026-04-26 12:55:28 +02:00
Owner
Copy Link

You should not have any problems with the database signatures or trust, since master key and buildbot key should be valid and do not expire anytime soon, you can check that yourself:

pacman-key --list-keys 539@idlegandalf.com buildbot@alhp.dev

If you have issues with signatures on certain packages, thats related to ALHP/alhp-keyring#6.

You should not have any problems with the database signatures or trust, since master key and buildbot key should be valid and do not expire anytime soon, you can check that yourself: ``` pacman-key --list-keys 539@idlegandalf.com buildbot@alhp.dev ``` If you have issues with signatures on certain packages, thats related to https://somegit.dev/ALHP/alhp-keyring/issues/6.
Korialo commented 2026-04-26 13:17:06 +02:00
Author
Copy Link

Thanks for the quick reply, Sorry for reporting an issue while there is an existing report already. Again, thank you for the reply.

Thanks for the quick reply, Sorry for reporting an issue while there is an existing report already. Again, thank you for the reply.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
blocked upstream
bug
Something is not working
 build-failure
package build fails
 duplicate
This issue or pull request already exists
 enhancement
New feature
 help wanted
Need some help
 informational
Provides information about something
 invalid
Something is wrong
 invalid/corrupt package
Package needs to be rebuild
 packaging issue
priority: high
High priority
 question
More information is needed
 support
wontfix
This won't be fixed
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
anonfunc
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ALHP/ALHP.GO#290
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?