Bug 29470

Summary:	Recommended keyserver seems to be down
Product:	Websites	Reporter:	papoteur <yvesbrungard>
Component:	www.mageia.org	Assignee:	Atelier Team <atelier-bugs>
Status:	RESOLVED FIXED	QA Contact:
Severity:	major
Priority:	Normal	CC:	davidwhodgins, sysadmin-bugs
Version:	trunk
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:
Source RPM:		CVE:
Status comment:

Description papoteur 2021-09-17 10:13:29 CEST

Description of problem:
In download links, we recommend to check signature using:
gpg --keyserver pool.sks-keyservers.net --recv-keys EDCA7A90
but:
gpg: échec de réception depuis le serveur de clefs : No name

I seems that the certificates of this server is out.
pgp.mit.edu is long to reply.
keyserver.ubuntu.com seems OK.

Now, I discover:
https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f
But, the server recommended in this article doesn't work for us.
LC_ALL=C gpg --keyserver keys.openpgp.org  --recv-keys EDCA7A90
gpg: keyserver receive failed: No data

Thus, should we download our key elsewhere?
Which server should we recommend as the one we recommend seems definitively out.

Comment 1 papoteur 2021-09-17 10:28:24 CEST

Isodumper and Mageiasync is also concerned because they have this server in the code.

Comment 2 Dave Hodgins 2021-09-17 17:19:08 CEST

https://www.rossde.com/PGP/pgp_keyserv.html#pubserv has a list of public key
servers.

The ubuntu key server is working ...
$ gpg --keyserver keyserver.ubuntu.com --recv-key EDCA7A90
gpg: key 835E41F4EDCA7A90: public key "Mageia Release <release@mageia.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1

For now, all occurrences of pool.sks-keyservers.net can be replaced with
keyserver.ubuntu.com

We should set up our own key server though. Adding the sysadmin team to cc list.

CC: (none) => davidwhodgins, sysadmin-bugs

Comment 3 papoteur 2022-11-28 19:46:41 CET

The old server is still referenced in this page:
https://www.mageia.org/fr/downloads/get/
It should be updated.

Comment 4 papoteur 2023-02-26 10:47:21 CET

I have updated the git repository.
However, the website still to be updated.

Comment 5 papoteur 2023-02-27 09:56:29 CET

Fixed with keyserver.ubuntu.com

Comment 6 papoteur 2023-02-27 09:56:47 CET

Thus closing

Status: NEW => RESOLVED
Resolution: (none) => FIXED