[opensuse-buildservice] Need help with signing error in priv obs installation
Hi all, I have a problem with my own installation of obs 2.10. Building works, but all builds are stuck in the "signing" phase. /srv/obs/log/signer.log shows lines like these: ====== gpg: decryption failed: No secret key sign failed: 256 - checking digest /srv/obs/jobs/x86_64/userweb::openSUSE_Leap_15.1::pure-ftpd-c0ae603b4c4953d7a0b214f7c15554b7:dir/pure-ftpd-1.0.47-lp151.95.1.src.rpm: digests OK sign failed: sign /srv/obs/jobs/x86_64/userweb::openSUSE_Leap_15.1::pure-ftpd-c0ae603b4c4953d7a0b214f7c15554b7:dir/pure-ftpd-1.0.47-lp151.95.1.src.rpm failed ==== All repositories are affected, the master GPG key is still valid until some time in 2021. Which key is at fault, how do I identify the cause? Thank you for pointers, Stefan -- Stefan Botter zu Hause Bremen
On Aug 05 2019, Stefan Botter <stefan@botter.cc> wrote:
I have a problem with my own installation of obs 2.10. Building works, but all builds are stuck in the "signing" phase. /srv/obs/log/signer.log shows lines like these: ====== gpg: decryption failed: No secret key sign failed: 256 - checking digest /srv/obs/jobs/x86_64/userweb::openSUSE_Leap_15.1::pure-ftpd-c0ae603b4c4953d7a0b214f7c15554b7:dir/pure-ftpd-1.0.47-lp151.95.1.src.rpm: digests OK sign failed: sign /srv/obs/jobs/x86_64/userweb::openSUSE_Leap_15.1::pure-ftpd-c0ae603b4c4953d7a0b214f7c15554b7:dir/pure-ftpd-1.0.47-lp151.95.1.src.rpm failed ====
I'm seeing that too. There seems to be a bug what causes a failure in providing the pass phrase to gpg. It works when the pass phrase is empty. Andreas. -- Andreas Schwab, SUSE Labs, schwab@suse.de GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE 1748 E4D4 88E3 0EEA B9D7 "And now for something completely different." -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Probably this PR should be backported to 2.10 branch https://github.com/openSUSE/obs-sign/pull/19 VP. On Mon, 05 Aug 2019 10:29:49 +0200 Andreas Schwab <schwab@suse.de> wrote:
On Aug 05 2019, Stefan Botter <stefan@botter.cc> wrote:
I have a problem with my own installation of obs 2.10. Building works, but all builds are stuck in the "signing" phase. /srv/obs/log/signer.log shows lines like these: ====== gpg: decryption failed: No secret key sign failed: 256 - checking digest /srv/obs/jobs/x86_64/userweb::openSUSE_Leap_15.1::pure-ftpd-c0ae603b4c4953d7a0b214f7c15554b7:dir/pure-ftpd-1.0.47-lp151.95.1.src.rpm: digests OK sign failed: sign /srv/obs/jobs/x86_64/userweb::openSUSE_Leap_15.1::pure-ftpd-c0ae603b4c4953d7a0b214f7c15554b7:dir/pure-ftpd-1.0.47-lp151.95.1.src.rpm failed ====
I'm seeing that too. There seems to be a bug what causes a failure in providing the pass phrase to gpg. It works when the pass phrase is empty.
Andreas.
-- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Andreas, Victor, thank you very much! On Monday, August 5, 2019 10:44:10 AM CEST Victor Pereira wrote:
Probably this PR should be backported to 2.10 branch https://github.com/openSUSE/obs-sign/pull/19
VP.
On Mon, 05 Aug 2019 10:29:49 +0200
Andreas Schwab <schwab@suse.de> wrote: :
I'm seeing that too. There seems to be a bug what causes a failure in providing the pass phrase to gpg. It works when the pass phrase is empty.
Andreas.
Indeed, my key has a passphrase, and manually adding the changes from the PR let the signer work again! Greetings, Stefan -- Stefan Botter zu Hause Bremen
But the patch only works with: obs-signd-2.5.3-lp151.2.1.x86_64 But not with: obs-signd-2.5.4-lp151.1.1.x86_64 which comes with the appliance or updates. running into the following signing error: gpg: skipped "rpm@scorpio-it.net": No secret key gpg: signing failed: No secret key sign failed: 512 - checking digest /srv/obs/jobs/x86_64/home:computersalat::openSUSE_Leap_15.1::iso-repo-0a72bb8dcb145347afa42a2942175996:dir/iso-repo-3.1.0-lp151.2.1.noarch.rpm: digests OK sign failed: sign /srv/obs/jobs/x86_64/home:computersalat::openSUSE_Leap_15.1::iso-repo-0a72bb8dcb145347afa42a2942175996:dir/iso-repo-3.1.0-lp151.2.1.noarch.rpm failed so what is the problem now ? any help is really appreciated. Thanks :-) Am 05.08.19 um 12:17 schrieb Stefan Botter:
Andreas, Victor,
thank you very much!
On Monday, August 5, 2019 10:44:10 AM CEST Victor Pereira wrote:
Probably this PR should be backported to 2.10 branch https://github.com/openSUSE/obs-sign/pull/19
VP.
On Mon, 05 Aug 2019 10:29:49 +0200
Andreas Schwab <schwab@suse.de> wrote: :
I'm seeing that too. There seems to be a bug what causes a failure in providing the pass phrase to gpg. It works when the pass phrase is empty.
Andreas.
Indeed, my key has a passphrase, and manually adding the changes from the PR let the signer work again!
Greetings,
Stefan
-- Christian ------------------------------------------------------------ https://join.worldcommunitygrid.org?recruiterId=177038 ------------------------------------------------------------ http://www.sc24.de - Sportbekleidung ------------------------------------------------------------
participants (4)
-
Andreas Schwab -
Christian -
Stefan Botter -
Victor Pereira