Bug ID 1184021
Summary OBS can not verify signed tar ball
Classification openSUSE
Product openSUSE.org
Version unspecified
Hardware All
OS SUSE Other
Status NEW
Severity Critical
Priority P5 - None
Component BuildService
Assignee screening-team-bugs@suse.de
Reporter werner@suse.com
QA Contact adrian.schroeter@suse.com
Found By ---
Blocker ---

Currently my SR#881350 gets declined with

```
Comment:
  Output of check script:
Source validator failed. Try "osc service runall source_validator"
  gpg: assuming signed data in 'emacs/emacs-27.2.tar.xz'
  gpg: Signature made Thu Mar 25 11:53:08 2021 UTC
  gpg:                using RSA key 91C1262F01EB8D39
  gpg: Can't check signature: No public key
  (E) signature emacs/emacs-27.2.tar.xz.sig does not validate
  - package has check-build.sh: (unchanged)
  - package has emacs-rpmlintrc: (unchanged)

```

but this is not true:

```
werner@boole:~> gpg --recv-keys 91C1262F01EB8D39
gpg: key 91C1262F01EB8D39: "Eli Zaretskii (eliz) <eliz@gnu.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
```


You are receiving this mail because: