Bug 29470 - Recommended keyserver seems to be down
Summary: Recommended keyserver seems to be down
Status: RESOLVED FIXED
Alias: None
Product: Websites
Classification: Unclassified
Component: www.mageia.org (show other bugs)
Version: trunk
Hardware: All Linux
Priority: Normal major
Target Milestone: ---
Assignee: Atelier Team
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-09-17 10:13 CEST by papoteur
Modified: 2023-02-27 09:56 CET (History)
2 users (show)

See Also:
Source RPM:
CVE:
Status comment:


Attachments

Description papoteur 2021-09-17 10:13:29 CEST
Description of problem:
In download links, we recommend to check signature using:
gpg --keyserver pool.sks-keyservers.net --recv-keys EDCA7A90
but:
gpg: échec de réception depuis le serveur de clefs : No name

I seems that the certificates of this server is out.
pgp.mit.edu is long to reply.
keyserver.ubuntu.com seems OK.

Now, I discover:
https://gist.github.com/rjhansen/67ab921ffb4084c865b3618d6955275f
But, the server recommended in this article doesn't work for us.
LC_ALL=C gpg --keyserver keys.openpgp.org  --recv-keys EDCA7A90
gpg: keyserver receive failed: No data

Thus, should we download our key elsewhere?
Which server should we recommend as the one we recommend seems definitively out.
Comment 1 papoteur 2021-09-17 10:28:24 CEST
Isodumper and Mageiasync is also concerned because they have this server in the code.
Comment 2 Dave Hodgins 2021-09-17 17:19:08 CEST
https://www.rossde.com/PGP/pgp_keyserv.html#pubserv has a list of public key
servers.

The ubuntu key server is working ...
$ gpg --keyserver keyserver.ubuntu.com --recv-key EDCA7A90
gpg: key 835E41F4EDCA7A90: public key "Mageia Release <release@mageia.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1

For now, all occurrences of pool.sks-keyservers.net can be replaced with
keyserver.ubuntu.com

We should set up our own key server though. Adding the sysadmin team to cc list.

CC: (none) => davidwhodgins, sysadmin-bugs

Comment 3 papoteur 2022-11-28 19:46:41 CET
The old server is still referenced in this page:
https://www.mageia.org/fr/downloads/get/
It should be updated.
Comment 4 papoteur 2023-02-26 10:47:21 CET
I have updated the git repository.
However, the website still to be updated.
Comment 5 papoteur 2023-02-27 09:56:29 CET
Fixed with keyserver.ubuntu.com
Comment 6 papoteur 2023-02-27 09:56:47 CET
Thus closing

Status: NEW => RESOLVED
Resolution: (none) => FIXED


Note You need to log in before you can comment on or make changes to this bug.