Launchpad itself

GPG error on intrepid

Bug #279261 reported by Celso Providelo
10
Affects Status Importance Assigned to Milestone
Launchpad itself
Fix Released
Medium
Celso Providelo
Launchpad itself 2.2.1

Bug Description

One of the signed uploads tested in nascentupload.txt fails when run in intrepid.

See https://pastebin.canonical.com/9971/

Tags: lp-soyuz
Celso Providelo (cprov)
Changed in soyuz:
milestone: none → pending
Revision history for this message
Celso Providelo (cprov) wrote :

Filed upstream, bug #306597.

Celso Providelo (cprov)
Changed in soyuz:
importance: Undecided → Medium
milestone: pending → 2.2.1
status: New → Triaged
Revision history for this message
Celso Providelo (cprov) wrote :

The signature verification error happens because the testing key for <email address hidden> is not 'cross-certified'. Cross-certification is required for verifying signatures on intrepid's `gnupg` (1.4.9-3ubuntu1). The fix consists of updating all testing keys, adding the required cross-certification.

Apparently, it's not possible to suppress this error via a configuration option, and this requires further investigation on the impacts it might cause when verifying signatures in production (a lot of users might not have cross-certification in place by the time we upgrade).

Changed in soyuz:
assignee: nobody → cprov
status: Triaged → In Progress
Revision history for this message
Celso Providelo (cprov) wrote :

See http://www.gnupg.org/faq/subkey-cross-certify.html for more information about cross-certification.

Revision history for this message
Celso Providelo (cprov) wrote :

RF 7507

Changed in soyuz:
status: In Progress → Fix Committed
Celso Providelo (cprov)
Changed in soyuz:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.