X2Go Bug report logs - #1556
GPG key error: public key E1F958385BFE2B6E is not available

Package: x2goserver; Maintainer for x2goserver is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goserver is src:x2goserver.

Reported by: "Chatterjee, Saion" <saion.chatterjee@siemens.com>

Date: Wed, 28 Jul 2021 16:30:02 UTC

Severity: critical

Reply or subscribe to this bug.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Wed, 28 Jul 2021 16:30:02 GMT) (full text, mbox, link).


Acknowledgement sent to "Chatterjee, Saion" <saion.chatterjee@siemens.com>:
New Bug report received and forwarded. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Wed, 28 Jul 2021 16:30:02 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

From: "Chatterjee, Saion" <saion.chatterjee@siemens.com>
To: "'submit@bugs.x2go.org'" <submit@bugs.x2go.org>
Subject: GPG key error: public key E1F958385BFE2B6E is not available
Date: Wed, 28 Jul 2021 16:27:50 +0000
[Message part 1 (text/plain, inline)]
Package: x2goserver
Severity: critical

Unable to install x2Go packages for Debian because the repository archive key is not available.

When I try to bootstrap the repository GPG keys using the docs:  https://wiki.x2go.org/doku.php/wiki:repositories:debian
with this command:
apt-key adv --recv-keys --keyserver keys.gnupg.net E1F958385BFE2B6E

Then I receive the following error message:


GPG error: http://packages.x2go.org/debian stretch InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY E1F958385BFE2B6E
gpg: keyserver receive failed: No name


It was working fine till last month. Please check if the public key has changed.

I mark this ticket as critical because at the moment we are unable to even install x2Go for new users.

Regards,
Saion
[Message part 2 (text/html, inline)]

Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Wed, 28 Jul 2021 19:45:02 GMT) (full text, mbox, link).


Acknowledgement sent to Juri Grabowski <x2go-dev@jugra.de>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Wed, 28 Jul 2021 19:45:02 GMT) (full text, mbox, link).


Message #10 received at 1556@bugs.x2go.org (full text, mbox, reply):

From: Juri Grabowski <x2go-dev@jugra.de>
To: "Chatterjee, Saion" <saion.chatterjee@siemens.com>, 1556@bugs.x2go.org
Subject: Re: [X2Go-Dev] Bug#1556: GPG key error: public key E1F958385BFE2B6E is not available
Date: Wed, 28 Jul 2021 21:40:49 +0200
Hello Saion,

as a quickfix you can use another gpg server:
apt-key adv --recv-keys --keyserver keyserver.ubuntu.com E1F958385BFE2B6E

On debian buster-backports and newer systems you can use extrepo:
apt install extrepo && extrepo enable x2go && apt-get update && apt-get install x2goserver

I have changed this in wiki.

Best Regards,
Juri Grabowski


Information forwarded to x2go-dev@lists.x2go.org, X2Go Developers <x2go-dev@lists.x2go.org>:
Bug#1556; Package x2goserver. (Thu, 29 Jul 2021 16:20:02 GMT) (full text, mbox, link).


Acknowledgement sent to "Chatterjee, Saion" <saion.chatterjee@siemens.com>:
Extra info received and forwarded to list. Copy sent to X2Go Developers <x2go-dev@lists.x2go.org>. (Thu, 29 Jul 2021 16:20:02 GMT) (full text, mbox, link).


Message #15 received at 1556@bugs.x2go.org (full text, mbox, reply):

From: "Chatterjee, Saion" <saion.chatterjee@siemens.com>
To: "1556@bugs.x2go.org" <1556@bugs.x2go.org>
Subject: Re: [X2Go-Dev] Bug#1556: GPG key error: public key E1F958385BFE2B6E is not available
Date: Thu, 29 Jul 2021 16:17:15 +0000
[Message part 1 (text/plain, inline)]
Many Thanks Juri,

The quickfix works although it could not verify 2 signatures:

gpg: key E1F958385BFE2B6E: 2 signatures not checked due to missing keys

gpg: key E1F958385BFE2B6E: public key "X2go Debian/Ubuntu Packaging debian@x2go.org<mailto:debian@x2go.org>" imported

gpg: Total number processed: 1

gpg:               imported: 1



Do you think this can lead to a security issue due to the 2 signatures not checked?

Best Regards, Saion



On Wed, 28 Jul 2021 21:40:49 +0200 Juri Grabowski <x2go-dev@jugra.de> wrote:
> Hello Saion,
>
> as a quickfix you can use another gpg server:
> apt-key adv --recv-keys --keyserver keyserver.ubuntu.com E1F958385BFE2B6E
>
> On debian buster-backports and newer systems you can use extrepo:
> apt install extrepo && extrepo enable x2go && apt-get update && apt-get install x2goserver
>
> I have changed this in wiki.
>
> Best Regards,
> Juri Grabowski
>
[Message part 2 (text/html, inline)]

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Sat Sep 18 05:01:27 2021; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.