[arch-general] Resetting pacman-key Still Asks to Import.

[Christian Hesse]

Ralph Corderoy <ralph at inputplus.co.uk> on Sun, 2019/10/27 11:14:
> Hi,
> 
> I have an Arch Linux laptop that hasn't been updated in a long time,
> mainly because it started to lock-up after a few minutes uptime,
> requiring a power cycle.  I'm now trying to update all its packages in
> the hope the lock-ups have gone, and if not to have a more modern base
> for diagnosis.
> 
> A ‘pacman -Syuw’ took a few goes but signature checking had problems, as
> did trying to update signatures.  I resorted to
> https://wiki.archlinux.org/index.php/Pacman/Package_signing#Resetting_all_the_keys
> that appeared to succeed.
> 
> The next attempt at ‘pacman -Syuw’ gets to
> 
>     Total Download Size:  0.00 MiB
> 
>     :: Proceed with download? [Y/n] 
>     (250/250) checking keys in keyring
> [#############################################################################]
> 100% downloading required keys... :: Import PGP key
> 2048R/02FD1C7A934E614545849F19A6234074498E9CEE, "Christian Hesse (Arch
> Linux Package Signing) <arch at eworm.de>", created: 2011-08-12? [Y/n]
> (250/250) checking package integrity
>                                                    [#############################################################################]
> 100% error: dav1d: signature from "Levente Polyak (anthraxx)
> <levente at leventepolyak.net>" is invalid :: File
> /var/cache/pacman/pkg/dav1d-0.4.0-1-x86_64.pkg.tar.xz is corrupted (invalid
> or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y
> error: libpulse: signature from "Jan Alexander Steffens (heftig)
> <jan.steffens at gmail.com>" is invalid :: File
> /var/cache/pacman/pkg/libpulse-13.0-2-x86_64.pkg.tar.xz is corrupted
> (invalid or corrupted package (PGP signature)). Do you want to delete it?
> [Y/n] 
> 
> This looks very similar to where I've been before.  The next attempt to
> download those, now deleted, packages does no better.  I'm going to
> https://wiki.archlinux.org/index.php/Pacman/Package_signing#Disabling_signature_checking
> but would still like to understand what I should attempt instead.

If the system is not too old just updating the package archlinux-keyring may
bring you back into business.
-- 
main(a){char*c=/*    Schoene Gruesse                         */"B?IJj;MEH"
"CX:;",b;for(a/*    Best regards             my address:    */=0;b=c[a++];)
putchar(b-1/(/*    Chris            cc -ox -xc - && ./x    */b/42*2-3)*42);}
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.archlinux.org/pipermail/arch-general/attachments/20191027/bcbbabed/attachment.sig>