Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

openhab-3.4.4-2.noarch.rpm - Error: GPG check FAILED #220

Open
dwrobel opened this issue Jul 19, 2023 · 8 comments
Open

openhab-3.4.4-2.noarch.rpm - Error: GPG check FAILED #220

dwrobel opened this issue Jul 19, 2023 · 8 comments

Comments

@dwrobel
Copy link

dwrobel commented Jul 19, 2023

I'm trying to install openhab-3.4.4-2.noarch.rpm on Fedora38 Server aarch64 platform.

I have the .repo file:

# cat /etc/yum.repos.d/openhab-stable.repo 
[openHAB-Stable]
name=openHAB Stable
baseurl=https://openhab.jfrog.io/artifactory/openhab-linuxpkg-rpm/stable
gpgcheck=1
gpgkey="https://openhab.jfrog.io/artifactory/api/gpg/key/public"
enabled=1

Installation fails as follows:

# dnf install -y openhab
Last metadata expiration check: 0:43:20 ago on Wed 19 Jul 2023 11:17:24 AM EDT.
Dependencies resolved.
==============================================================================================================================================================================================================================================
 Package                                                 Architecture                                           Version                                                  Repository                                                      Size
==============================================================================================================================================================================================================================================
Installing:
 openhab                                                 noarch                                                 3.4.4-2                                                  openHAB-Stable                                                  99 M

Transaction Summary
==============================================================================================================================================================================================================================================
Install  1 Package

Total size: 99 M
Installed size: 110 M
Downloading Packages:
[SKIPPED] openhab-3.4.4-2.noarch.rpm: Already downloaded                                                                                                                                                                                     
Problem opening package openhab-3.4.4-2.noarch.rpm
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

Output from rpmkeys:

# dnf download openhab
Last metadata expiration check: 0:54:29 ago on Wed 19 Jul 2023 11:17:24 AM EDT.
openhab-3.4.4-2.noarch.rpm                                                                                                                                                                                    8.5 MB/s |  99 MB     00:11    
# rpmkeys --checksig --root / --verbose --define="_pkgverify_level signature" --define="_pkgverify_flags 0x0" openhab-3.4.4-2.noarch.rpm 
openhab-3.4.4-2.noarch.rpm:
    Header V4 RSA/SHA256 Signature, key ID a224060a: BAD
    Header DSA signature: NOTFOUND
    Header SHA256 digest: OK
    Header SHA1 digest: OK
    Payload SHA256 ALT digest: OK
    Payload SHA256 digest: OK
    V4 RSA/SHA256 Signature, key ID a224060a: BAD
    DSA signature: NOTFOUND
    MD5 digest: OK

Key info:

# rpm -qi gpg-pubkey-a224060a-55b3f8e6
Name        : gpg-pubkey
Version     : a224060a
Release     : 55b3f8e6
Architecture: (none)
Install Date: Wed 19 Jul 2023 11:08:07 AM EDT
Group       : Public Keys
Size        : 0
License     : pubkey
Signature   : (none)
Source RPM  : (none)
Build Date  : Sat 25 Jul 2015 05:00:22 PM EDT
Build Host  : localhost
Packager    : openHAB Bintray Repositories <[email protected]>
Summary     : openHAB Bintray Repositories <[email protected]> public key
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=n/gx
-----END PGP PUBLIC KEY BLOCK-----

FYI, I have two other machines where I have exactly the same package installed without any problems. The only difference is that I don't remember when the RPM keys got installed on those machines.

Here is the key info on machine on which I have the package already installed:

# rpm -qi gpg-pubkey-a224060a-55b3f8e6
Name        : gpg-pubkey
Version     : a224060a
Release     : 55b3f8e6
Architecture: (none)
Install Date: Sat 06 May 2023 08:08:38 PM CEST
Group       : Public Keys
Size        : 0
License     : pubkey
Signature   : (none)
Source RPM  : (none)
Build Date  : Sat 25 Jul 2015 11:00:22 PM CEST
Build Host  : localhost
Packager    : openHAB Bintray Repositories <[email protected]>
Summary     : openHAB Bintray Repositories <[email protected]> public key
Description :
-----BEGIN PGP PUBLIC KEY BLOCK-----
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=r37a
-----END PGP PUBLIC KEY BLOCK-----

Comparing the content (within BEGIN and END lines) returns the following (where the old-key is from the machine which
already has the package installed):

# diff -u old-key new-key 
--- old-key	2023-07-19 12:04:02.002989089 -0400
+++ new-key	2023-07-19 12:04:13.538785903 -0400
@@ -11,18 +11,18 @@
 rTzIUAeB4dmu1k8Quqy/nYhYMokB9w5hiPwmGutjbpOntnrfqxvYy1EL1wARAQAB
 tDBvcGVuSEFCIEJpbnRyYXkgUmVwb3NpdG9yaWVzIDxvd25lckBvcGVuaGFiLm9y
 Zz6JAlQEEwEKAD4CGwMFCwkIBwMFFQoJCAsFFgIDAQACHgECF4AWIQTtt9AwTi/K
-9infEWMHVyH2oiQGCgUCXTjCTAUJDwsFBgAKCRAHVyH2oiQGCmfMD/sGZickeBlA
-+x8XxfzvwxTnW/8MCvFBa4l/GoK9bALylvekP4adk/aaySMk/zjk231mwmMuttnP
-VDg6TwhxhthveAFdbJEkTNhWUqH0FzyN9QwEGfIodjkQSYWwosY+55V0uYp2zfo9
-iHOtxzXjuLnkpZZPyY33qqGruqhnbyo2J09oLNw4MIwOepNMihP5u0nudTXiDivg
-eg8lx/4WIIfwDwCe1gSBnU/731B0TIruxz3cQabLgeTuKB13+ajtJGuH1qrHxMVx
-CFhD8wCugNj0qcI6NS06SXwLSAFr+xIeFXWVum2okWt2nzPpn7ll/FUG+qRECipt
-m1IaEbelUrcuk7dUY75Fz5Fx8S0HtYAcCYYBDnhcaSSq7sK0NklrVz+bQZsJx4hY
-ebkiNI/xFM3slOYoRzGWawuVpG/y1/VM/QRPS4uUS5rnvbGLVpn3bR+03FQwZWeb
-yfMNke74TlM9+aEJZb1uxYQGLDFNDVNyALtGhDDp0R/FuDR0my3va3GJnZrtUGVg
-M5Xfs/ebsKZ+CuLKqlbdZ0zjLUCJoT+tGGT1VPpi83jc+4wZXynj9b9/CWHoDfaN
-VKTj95R7c7IOMRH5srpHX3qSzIF2Yav395SxJNuTTxcPCZ+n2M8jhvVnn4x8sWn5
-Ms0cN2tKVmfIbLF/1JempVsifJmRkbqN+rkCDQRVs/jmARAAxrYK7y1WW/szELpQ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 guGSJGIjLt3tNGHGLP3lX4G1DlbziysTx3fY+c+hzGAM8WInsABq5fOWqkiLfx3f
 wlHdo7bxv3U+xWq+xV9OOx+tjJn2xI3EtZ632pOQtxj/+6Tdcf3tIwOSMKK5kpGw
 DU1VoLkWMfJeq0md6TDRB49p82Q1UGTaVCCfHYpvwCyuv1FWhSQuPJJLdP0YRX2i
@@ -34,16 +34,16 @@
 jDGLZ0g4xU0GYi22eAWPL0dpQpA8t5Ja7W+x+VASOtbpnMAJO94YZ4yXlDcDeNJD
 uo2y0z+xjuloPrGK+AssCpOBxpBlcrAFRMx5+rpkHSlLtkQNPeBPwXlryafDZ2PA
 QsLBxUmFphyBraakmdGP3mR9ThUAEQEAAYkCPAQYAQoAJgIbDBYhBO230DBOL8r2
-Kd8RYwdXIfaiJAYKBQJdOMOgBQkPDFfaAAoJEAdXIfaiJAYKDLgP/iuh/Kppaem/
-wsRs6ehuCyEVz7ZJsKeq9ZL3d0jQy0CaFQRSICucptBeb14rTvf/i5+eEQI7E/bJ
-9dLm1mepVS8M3wyn9+pP+Loa7bajEAD5ap08F88q56s+U70HO30qRHxp2yD9ZU0A
-joX8pAIS/YaMicm1EFYajpyls/Jcyp2JG2AavRsrQ3iHvGv5Fc2/09E76lwje/Yh
-royPhCrVm0adk6sxLfmKNiXBpLb5gzHR81oo20zk0+qYg2pRcVvfd6PvOcsrO4tl
-K8kUMyfYixVKJu59xtMdg5ff6qlBrmTXkxyGb0t7VlhnX4UKcVU//+6b0TnBmUaG
-61CZ4CGD2VvUMXcM0ihYl85g7+O9u/P2u3mhLX3xEa+rM4XpzqajL+jpt3CGQLkp
-TnKZ8g1k9l7UkrHvVs/tBTCPvOEstzMwq2tWNuCbJ7Y9oB6FDPZGM3oFe2ubu2OH
-MFT3KmOhD2jhWCXyB1hK/LOmINGfdfulBsK2KLKtKoJMWu2QLyMLa91l3AhzbH+s
-7gQY6iC9rTy9qfHGOLTPjrHfkmrBky+KiDx1KVOnQvPqloLbKhkq1KHv8TAonqGK
-THbU4Eod0DmWw80Z2zX7jV3BJs9VmDhr5NzpaZCVlrKrL+vIXzFClCYWQQMwfHpO
-Yyq3xLVDG/Zs7LmgSAiEITxRFTR4qg7k
-=r37a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+=n/gx

If I copy the key from machine where the package is installed (using rpm -qi gpg-pubkey-a224060a-55b3f8e6)
then erase and import it on the new machine then I can successfully install the package:

# rpm --import old.gpg 
# rpm -qi gpg-pubkey-a224060a-55b3f8e6 | tail -n 3
=r37a
-----END PGP PUBLIC KEY BLOCK-----

# dnf install -y openhab
Last metadata expiration check: 1:08:55 ago on Wed 19 Jul 2023 11:17:24 AM EDT.
Dependencies resolved.
==============================================================================================================================================================================================================================================
 Package                                                 Architecture                                           Version                                                  Repository                                                      Size
==============================================================================================================================================================================================================================================
Installing:
 openhab                                                 noarch                                                 3.4.4-2                                                  openHAB-Stable                                                  99 M

Transaction Summary
==============================================================================================================================================================================================================================================
Install  1 Package

Total size: 99 M
Installed size: 110 M
Downloading Packages:
[SKIPPED] openhab-3.4.4-2.noarch.rpm: Already downloaded                                                                                                                                                                                     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                                                                                      1/1 
  Running scriptlet: openhab-3.4.4-2.noarch                                                                                                                                                                                               1/1 
  Installing       : openhab-3.4.4-2.noarch                                                                                                                                                                                               1/1 
  Running scriptlet: openhab-3.4.4-2.noarch                                                                                                                                                                                               1/1 
[openHAB] Please use the following commands to launch openHAB on a system restart.
            sudo /bin/systemctl daemon-reload
            sudo /bin/systemctl enable openhab.service

[openHAB] You can start openHAB manually by executing the command:
            sudo /bin/systemctl start openhab.service


  Verifying        : openhab-3.4.4-2.noarch                                                                                                                                                                                               1/1 

Installed:
  openhab-3.4.4-2.noarch                                                                                                                                                                                                                      

Complete!
@dwrobel
Copy link
Author

dwrobel commented Jul 19, 2023

One addition which might shed some light:

# cat old.gpg | sq packet dump >dump.old
# wget -q -O - https://openhab.jfrog.io/artifactory/api/gpg/key/public | sq packet dump >dump.new
# diff -u dump.old dump.new
--- dump.old	2023-07-19 15:33:58.584109235 -0400
+++ dump.new	2023-07-19 15:34:02.996026883 -0400
@@ -22,11 +22,11 @@
       Features: MDC
       Keyserver preferences: no modify
       Issuer Fingerprint: EDB7D0304E2FCAF629DF1163075721F6A224060A
-      Signature creation time: 2019-07-24 20:40:44 UTC
-      Key expiration time: P2921DT6022S
+      Signature creation time: 2023-07-02 14:30:08 UTC
+      Key expiration time: P5524DT62971S
     Unhashed area:
       Issuer: 075721F6A224060A
-    Digest prefix: 67CC
+    Digest prefix: E246
     Level: 0 (signature over data)
   
 Public-Subkey Packet, old CTB, 525 bytes
@@ -45,10 +45,10 @@
     Hashed area:
       Key flags: EtEr
       Issuer Fingerprint: EDB7D0304E2FCAF629DF1163075721F6A224060A
-      Signature creation time: 2019-07-24 20:46:24 UTC
-      Key expiration time: P2922DT6362S
+      Signature creation time: 2023-07-02 19:19:02 UTC
+      Key expiration time: P5524DT80312S
     Unhashed area:
       Issuer: 075721F6A224060A
-    Digest prefix: 0CB8
+    Digest prefix: EB75
     Level: 0 (signature over data)

Were there any changes with the key on: 2023-07-02 14:30:08 UTC?

@BClark09
Copy link
Member

Hi @dwrobel, thanks for letting us know!

The public key was expiring so was updated on the 2023-07-02. There was no change to the private key used to sign the package so I am a little unsure what would be causing the issue.

I'll try to recreate the problem and advise.

@BClark09
Copy link
Member

BClark09 commented Jul 21, 2023 •
edited
Loading

@dwrobel, I couldn't replicate the issue but in each test the DNF install had to install the new key.

# rpmkeys --checksig --root / --verbose --define="_pkgverify_level signature" --define="_pkgverify_flags 0x0" openhab-3.4.4-2.noarch.rpm
openhab-3.4.4-2.noarch.rpm:
    Header V4 RSA/SHA256 Signature, key ID a224060a: OK
    [...]

Does dnf clean all and dnf install openhab --refresh solve the issue?

@dwrobel
Copy link
Author

dwrobel commented Jul 21, 2023

I couldn't replicate the issue but in each test the DNF install had to install the new key.

I can reproduce it without any problem. It's just enough for me to remove the good GPG key (the one which content ends up with '=r37a' string):

# rpm -qi gpg-pubkey-a224060a-55b3f8e6 | tail -n3
=r37a
-----END PGP PUBLIC KEY BLOCK-----

# rpm -e gpg-pubkey-a224060a-55b3f8e6 
# rpm -qv openhab
openhab-3.4.4-2.noarch
# dnf install openhab --refresh
Copr repo for bcm283x-firmware-rpi owned by dwrobel                                                                                                                             5.7 kB/s | 1.8 kB     00:00    
Copr repo for bcm434xx-firmware-rpi owned by dwrobel                                                                                                                            6.4 kB/s | 1.8 kB     00:00    
Copr repo for kernel-rpi owned by dwrobel                                                                                                                                       3.4 kB/s | 1.8 kB     00:00    
Copr repo for livecd-tools owned by dwrobel                                                                                                                                     5.1 kB/s | 3.0 kB     00:00    
Copr repo for pykickstart owned by dwrobel                                                                                                                                       10 kB/s | 3.0 kB     00:00    
Copr repo for golang-github-influxdata-influxdb owned by dwrobel                                                                                                                 12 kB/s | 3.3 kB     00:00    
Copr repo for mqtt-mysensors owned by dwrobel                                                                                                                                   3.3 kB/s | 1.8 kB     00:00    
Fedora 38 - aarch64                                                                                                                                                              17 kB/s |  14 kB     00:00    
Fedora 38 openh264 (From Cisco) - aarch64                                                                                                                                       1.5 kB/s | 990  B     00:00    
Fedora Modular 38 - aarch64                                                                                                                                                      21 kB/s |  14 kB     00:00    
Fedora 38 - aarch64 - Updates                                                                                                                                                    18 kB/s |  13 kB     00:00    
Fedora Modular 38 - aarch64 - Updates                                                                                                                                            19 kB/s |  13 kB     00:00    
openHAB Stable                                                                                                                                                                  2.3 kB/s | 1.4 kB     00:00    
Package openhab-3.4.4-2.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
# dnf reinstall openhab
Last metadata expiration check: 0:01:12 ago on Fri 21 Jul 2023 02:48:07 PM CEST.
Dependencies resolved.
================================================================================================================================================================================================================
 Package                                         Architecture                                   Version                                            Repository                                              Size
================================================================================================================================================================================================================
Reinstalling:
 openhab                                         noarch                                         3.4.4-2                                            openHAB-Stable                                          99 M

Transaction Summary
================================================================================================================================================================================================================

Total size: 99 M
Installed size: 110 M
Is this ok [y/N]: y
Downloading Packages:
[SKIPPED] openhab-3.4.4-2.noarch.rpm: Already downloaded                                                                                                                                                       
openHAB Stable                                                                                                                                                                  5.0 kB/s | 3.1 kB     00:00    
Importing GPG key 0xA224060A:
 Userid     : "openHAB Bintray Repositories <[email protected]>"
 Fingerprint: EDB7 D030 4E2F CAF6 29DF 1163 0757 21F6 A224 060A
 From       : https://openhab.jfrog.io/artifactory/api/gpg/key/public
Is this ok [y/N]: y
Key imported successfully
error: Verifying a signature using certificate EDB7D0304E2FCAF629DF1163075721F6A224060A (openHAB Bintray Repositories <[email protected]>):
  1. Certificate 075721F6A224060A invalid: policy violation
      because: No binding signature at time 2023-05-07T20:56:18Z
  2. Certificate has no valid binding signature as of the signature's creation time, but is valid now.  The certificate has probably been stripped or minimized.
error: Verifying a signature using certificate EDB7D0304E2FCAF629DF1163075721F6A224060A (openHAB Bintray Repositories <[email protected]>):
  1. Certificate 075721F6A224060A invalid: policy violation
      because: No binding signature at time 2023-05-07T20:56:29Z
  2. Certificate has no valid binding signature as of the signature's creation time, but is valid now.  The certificate has probably been stripped or minimized.
Import of key(s) didn't help, wrong key(s)?
Public key for openhab-3.4.4-2.noarch.rpm is not trusted. Failing package is: openhab-3.4.4-2.noarch
 GPG Keys are configured as: https://openhab.jfrog.io/artifactory/api/gpg/key/public
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
# echo $?
1
#  rpm -qv rpm dnf
rpm-4.18.1-3.fc38.aarch64
dnf-4.16.1-1.fc38.noarch

@BClark09
Copy link
Member

Thanks again @dwrobel, I can now replicate using the same steps. This isn't happening with the latest milestone or any of the current snapshots for openHAB 4.

@kaikreuzer fyi.

I think the best thing to do is to try and release a 3.4.4-3 (assuming it will work as the other new packages are) so that a working openHAB 3 package exists. I can then find what maybe causing it.

@kaikreuzer
Copy link
Member

I think the best thing to do is to try and release a 3.4.4-3

@BClark09 Here you go: https://ci.openhab.org/view/Release%20Jobs/job/openhab-linuxpkg-release/24/

@BClark09
Copy link
Member

I built https://ci.openhab.org/view/Release%20Jobs/job/openhab-linuxpkg-patch-release/4/console instead because I think that one tracks the main branch rather than the 3.x branch therefore requiring Java 17.

I think I'll rename this now that openHAB 4 is out.

openhab-linuxpkg-patch-release -> openhab-linuxpkg-3-release

@kaikreuzer
Copy link
Member

Ah, you're right, I used the wrong build plan... 🙄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@dwrobel @kaikreuzer @BClark09