Originally Posted by
nrickert
If you don't have "gpg.conf" then it should use "options" (if that file exists). Otherwise there is supposed to be a default set of options that are used.
I'm seeing the same error. I happen to already have that key in my keyring, so it isn't causing problems here. Maybe you should file a bug report on this.
I think I don't have the options file, at least not in ~/.gnupg nor in /etc/gnupg. However, I've found out, that a fallback key server is used when none is specified: hkps.pool.sks-keyservers.net: https://office.tuxcon.com/Encryption...b4421a1813c827. It's also stated in the dirmngr man page, a component of GPG:
If no keyserver is explicitly configured, dirmngr will use the built-in default of hkps://hkps.pool.sks-key-servers.net.
This hkps.pool.sks-keyservers.net is rather a pool of servers as you can read on its website and keys.gnupg.net is its DNS alias. Unfortunatelly, hkps.pool.sks-keyservers.net works neither and is being deprecated as again, stated on its website:
This service is deprecated. This means it is no longer maintained, and new HKPS certificates will not be issued. Service reliability should not be expected.
I checked the GPG upsteam issue tracker and found out that keys.gnupg.net not working is already reported: https://dev.gnupg.org/T5527. In this report there's a link to the stackoverwflow.com site which provides a workaroud: Just a use another key server. For a novice like me, it turns out there are actually a lot of key servers with OpenPGP-compatible keys and to download the openSUSE project public key, it doesn't matter which key server to use since they all synchronize with each other as stated in both the dirmngr and pgp man pages.
So I checked the key servers suggested on the aforementioned stackoverflow.com site:
Code:
david@atronach-opensuse:~> LANG=c gpg --keyserver hkps://keys.openpgp.org --search-keys 22C07BA534178CD02EFE22AAB88B2FD43DBDC284
gpg: data source: https://keys.openpgp.org:443
(1) 2048 bit RSA key B88B2FD43DBDC284, created: 2008-11-07
Keys 1-1 of 1 for "22C07BA534178CD02EFE22AAB88B2FD43DBDC284". Enter number(s), N)ext, or Q)uit > n
david@atronach-opensuse:~> LANG=c gpg --keyserver hkps://keyserver.ubuntu.com --search-keys 22C07BA534178CD02EFE22AAB88B2FD43DBDC284
gpg: data source: https://162.213.33.9:443
(1) openSUSE Project Signing Key <opensuse@opensuse.org>
2048 bit RSA key B88B2FD43DBDC284, created: 2008-11-07
Keys 1-1 of 1 for "22C07BA534178CD02EFE22AAB88B2FD43DBDC284". Enter number(s), N)ext, or Q)uit > n
david@atronach-opensuse:~> LANG=c gpg --keyserver hkps://pgp.mit.edu --search-keys 22C07BA534178CD02EFE22AAB88B2FD43DBDC284
gpg: data source: https://pgp.mit.edu:443
(1) openSUSE Project Signing Key <opensuse@opensuse.org>
2048 bit RSA key B88B2FD43DBDC284, created: 2008-11-07, expires: 2024-05-02
Keys 1-1 of 1 for "22C07BA534178CD02EFE22AAB88B2FD43DBDC284". Enter number(s), N)ext, or Q)uit > n
The openSUSE project public key is available on all 3 keyservers. So I just chose keys.openpgp.org as my key server and put it into ~/.gnupg/dirmngr.conf:
Code:
keyserver hkps://keys.openpgp.org
... dirmngr.conf is the proper config file for keyservers according to the gpg man page
Then I tried to search the openSUSE project public key again but this time without --keyserver option:
Code:
david@atronach-opensuse:~> LANG=c gpg --search-keys 22C07BA534178CD02EFE22AAB88B2FD43DBDC284
gpg: error searching keyserver: No name
gpg: keyserver search failed: No name
That's actually another bug. I had to end the dirmngr process with gpgconf --kill dirmngr and rerun the command to properly reload the settings. This time it worked so I followed with importing the public key to my keyring:
Code:
david@atronach-opensuse:~> LANG=c gpg --receive-keys 22C07BA534178CD02EFE22AAB88B2FD43DBDC284
gpg: key B88B2FD43DBDC284: new key but contains no user ID - skipped
gpg: Total number processed: 1
gpg: w/o user IDs: 1
This time it complained about missing user ID so I tried to check if the key imported successfully but gpg --list-keys listed nothing. So I checked the output of --search-keys for all 3 key servers again and noticed that 1 line is missing when searching on keys.openpgp.org but is present when searching on the other two:
Code:
(1) openSUSE Project Signing Key <opensuse@opensuse.org>
A while later I found out it's actually discussed and resolver here too: https://www.reddit.com/r/openSUSE/co...ation/fxw5uqw/
So I've rewritten dirmngr.conf to contain pgp.mit.edu instead of keys.openpgp.org and tried to import the key again:
Code:
david@atronach-opensuse:~> gpgconf --kill dirmngr
david@atronach-opensuse:~> LANG=c gpg --receive-keys 22C07BA534178CD02EFE22AAB88B2FD43DBDC284gpg: key B88B2FD43DBDC284: public key "openSUSE Project Signing Key <opensuse@opensuse.org>" imported
gpg: Total number processed: 1
gpg: imported: 1
Finally this time it worked and since that moment I could successfully authenticate the openSUSE installation ISO's hash:
Code:
david@atronach-opensuse:/windows/Users/David/Downloads/GNU_Linux> LANG=c gpg --verify openSUSE-Leap-15.3-DVD-x86_64.iso.sha256.asc
gpg: assuming signed data in 'openSUSE-Leap-15.3-DVD-x86_64.iso.sha256'
gpg: Signature made Wed May 26 14:56:40 2021 CEST
gpg: using RSA key B88B2FD43DBDC284
gpg: Good signature from "openSUSE Project Signing Key <opensuse@opensuse.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 22C0 7BA5 3417 8CD0 2EFE 22AA B88B 2FD4 3DBD C284
