X2Go Bug report logs - #1556
GPG key error: public key E1F958385BFE2B6E is not available

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: "Chatterjee, Saion" <saion.chatterjee@siemens.com>

Date: Wed, 28 Jul 2021 16:30:02 UTC

Severity: critical

Done: Juri Grabowski <x2go@jugra.de>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Wed, 28 Jul 2021 16:30:02 GMT) (full text, mbox, link).


Acknowledgement sent to "Chatterjee, Saion" <saion.chatterjee@siemens.com>:
New Bug report received and forwarded. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Wed, 28 Jul 2021 16:30:02 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: "Chatterjee, Saion" <saion.chatterjee@siemens.com>
To: "'submit@bugs.x2go.org'" <submit@bugs.x2go.org>
Subject: GPG key error: public key E1F958385BFE2B6E is not available
Date: Wed, 28 Jul 2021 16:27:50 +0000
[Message part 1 (text/plain, inline)]
Package: x2goserver
Severity: critical

Unable to install x2Go packages for Debian because the repository archive key is not available.

When I try to bootstrap the repository GPG keys using the docs:  https://wiki.x2go.org/doku.php/wiki:repositories:debian
with this command:
apt-key adv --recv-keys --keyserver keys.gnupg.net E1F958385BFE2B6E

Then I receive the following error message:


GPG error: http://packages.x2go.org/debian stretch InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY E1F958385BFE2B6E
gpg: keyserver receive failed: No name


It was working fine till last month. Please check if the public key has changed.

I mark this ticket as critical because at the moment we are unable to even install x2Go for new users.

Regards,
Saion
[Message part 2 (text/html, inline)]

Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Wed, 28 Jul 2021 19:45:02 GMT) (full text, mbox, link).


Acknowledgement sent to Juri Grabowski <x2go-dev@jugra.de>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Wed, 28 Jul 2021 19:45:02 GMT) (full text, mbox, link).


Message #10 received at 1556@bugs.x2go.org (full text, mbox, reply):

From: Juri Grabowski <x2go-dev@jugra.de>
To: "Chatterjee, Saion" <saion.chatterjee@siemens.com>, 1556@bugs.x2go.org
Subject: Re: [X2Go-Dev] Bug#1556: GPG key error: public key E1F958385BFE2B6E is not available
Date: Wed, 28 Jul 2021 21:40:49 +0200
Hello Saion,

as a quickfix you can use another gpg server:
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com E1F958385BFE2B6E

On debian buster-backports and newer systems you can use extrepo:
apt install extrepo && extrepo enable x2go && apt-get update && apt-get install x2goserver

I have changed this in wiki.

Best Regards,
Juri Grabowski


Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Thu, 29 Jul 2021 16:20:02 GMT) (full text, mbox, link).


Acknowledgement sent to "Chatterjee, Saion" <saion.chatterjee@siemens.com>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Thu, 29 Jul 2021 16:20:02 GMT) (full text, mbox, link).


Message #15 received at 1556@bugs.x2go.org (full text, mbox, reply):

From: "Chatterjee, Saion" <saion.chatterjee@siemens.com>
To: "1556@bugs.x2go.org" <1556@bugs.x2go.org>
Subject: Re: [X2Go-Dev] Bug#1556: GPG key error: public key E1F958385BFE2B6E is not available
Date: Thu, 29 Jul 2021 16:17:15 +0000
[Message part 1 (text/plain, inline)]
Many Thanks Juri,

The quickfix works although it could not verify 2 signatures:

gpg: key E1F958385BFE2B6E: 2 signatures not checked due to missing keys

gpg: key E1F958385BFE2B6E: public key "X2go Debian/Ubuntu Packaging debian@x2go.org<mailto:debian@x2go.org>" imported

gpg: Total number processed: 1

gpg:               imported: 1



Do you think this can lead to a security issue due to the 2 signatures not checked?

Best Regards, Saion



On Wed, 28 Jul 2021 21:40:49 +0200 Juri Grabowski <x2go-dev@jugra.de> wrote:
> Hello Saion,
>
> as a quickfix you can use another gpg server:
> apt-key adv --recv-keys --keyserver keyserver.ubuntu.com E1F958385BFE2B6E
>
> On debian buster-backports and newer systems you can use extrepo:
> apt install extrepo && extrepo enable x2go && apt-get update && apt-get install x2goserver
>
> I have changed this in wiki.
>
> Best Regards,
> Juri Grabowski
>
[Message part 2 (text/html, inline)]

Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Mon, 15 Nov 2021 23:50:03 GMT) (full text, mbox, link).


Acknowledgement sent to Juri Grabowski <x2go-dev@jugra.de>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Mon, 15 Nov 2021 23:50:03 GMT) (full text, mbox, link).


Message #20 received at 1556@bugs.x2go.org (full text, mbox, reply):

From: Juri Grabowski <x2go-dev@jugra.de>
To: "Chatterjee, Saion" <saion.chatterjee@siemens.com>, 1556@bugs.x2go.org
Cc: "Heinz-M. Graesing" <heinz-m.graesing@obviously-nice.de>
Subject: Re: [X2Go-Dev] Bug#1556: Bug#1556: GPG key error: public key E1F958385BFE2B6E is not available
Date: Tue, 16 Nov 2021 00:48:18 +0100
Hello together,

On 2021-07-29 16:17 4, Chatterjee, Saion wrote:
>Do you think this can lead to a security issue due to the 2 signatures not checked?
Sorry for long delay. It's OK, right now.

@Heinz:
Default gpg2 setting is to load keys from WebKeyDirectory
I mean it would be nice, if you can create DNS-Entries (A and AAAA) for
openpgpkey.x2go.org like for x2go.org.
On my side I can configure WKD on japsand with: 

1. Add apache vhost
mkdir .well-known/openpgpkey/x2go.org/
cd .well-known/openpgpkey/x2go.org/
apt-get install python3-gnupg
touch policy
wget --content-disposition 'https://gitlab.com/Martin_/generate-openpgpkey-hu-3/-/raw/master/generate-openpgpkey-hu-3?inline=false'
gpg --keyserver keyserver.ubuntu.com --search-keys debian@x2go.org
python3 generate-openpgpkey-hu-3 -a debian@x2go.org

Best Regards,
Juri Grabowski

P.S.: wiki.x2go.org don't have AAAA DNS entry. Do you know why? Maybe
can you set it as well.


Marked Bug as done Request was from Juri Grabowski <x2go@jugra.de> to control@bugs.x2go.org. (Wed, 20 Dec 2023 01:15:02 GMT) (full text, mbox, link).


Notification sent to "Chatterjee, Saion" <saion.chatterjee@siemens.com>:
Bug acknowledged by developer. (Wed, 20 Dec 2023 01:15:02 GMT) (full text, mbox, link).


Bug archived. Request was from Juri Grabowski <x2go@jugra.de> to control@bugs.x2go.org. (Wed, 20 Dec 2023 01:15:02 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Mar 28 22:56:17 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.