Yay: keyserver receive failed for valid key on aur/python2-nose

keepitsimpleengineer · 20 June 2022 17:08

$ yay -S python2-nose
:: Checking for conflicts...
:: Checking for inner conflicts...
[Aur:1]  python2-nose-1.3.7-13

  1 python2-nose                             (Build Files Exist)
==> Packages to cleanBuild?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==> a
:: Deleting (1/1): /home/ljohnson/.cache/yay/python2-nose
:: (1/1) Downloaded PKGBUILD: python2-nose
  1 python2-nose                             (Build Files Exist)
==> Diffs to show?
==> [N]one [A]ll [Ab]ort [I]nstalled [No]tInstalled or (1 2 3, 1-3, ^4)
==>
:: (1/1) Parsing SRCINFO: python2-nose

:: PGP keys need importing:
 -> 58B277C0D208F7AC460C07C84548B3A8C0D70C12, required by: python2-nose
==> Import? [Y/n]
:: Importing keys with gpg...
gpg: keyserver receive failed: Server indicated a failure
 -> problem importing keys

58B277C0D208F7AC460C07C84548B3A8C0D70C12 john@szakmeister.net is a valid key

https://aur.archlinux.org/packages/python2-nose

yay properly installs this package on archlinux

python2-nose is required for aur/python2-pyxdg

Yochanan · 20 June 2022 17:10

Pinned right at the top of #support:aur

keepitsimpleengineer · 20 June 2022 17:31

Entering $KEYID fails

$ gpg --recv-key 4548B3A8C0D70C12
gpg: keyserver receive failed: Server indicated a failure

$ gpg --receive-keys 58B277C0D208F7AC460C07C84548B3A8C0D70C12
gpg: keyserver receive failed: Server indicated a failure

pg --keyserver pgp.mit.edu --recv-key 4548B3A8C0D70C12
gpg: keyserver receive failed: Server indicated a failure

From archlinux:

gpg: key 4548B3A8C0D70C12: "John Szakmeister <john@szakmeister.net>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

Yochanan · 20 June 2022 17:33

What does your ~/.gnupg/gpg.conf look like?

cat ~/.gnupg/gpg.conf

keepitsimpleengineer · 20 June 2022 17:34

$ cat ~/.gnupg/gpg.conf
cat: /home/ljohnson/.gnupg/gpg.conf: No such file or directory

$ cat /etc/pacman.d/gnupg/gpg.conf
no-greeting
no-permission-warning
lock-never
keyserver-options timeout=10
keyserver-options import-clean
keyserver-options no-self-sigs-only

Yochanan · 20 June 2022 18:24

This is my ~/.gnupg/gpg.conf:

keyserver hkps://keyserver.ubuntu.com
keyserver-options timeout=10
with-fingerprint

keepitsimpleengineer · 20 June 2022 20:03

This is only happening on one manjaro system: kise-004

I have four manjaro systems, all show same for ~/.gnupg/gpg.conf

[ljohnson@KISE-055 ~]$ cat ~/.gnupg/gpg.conf
cat: /home/ljohnson/.gnupg/gpg.conf: No such file or directory
[ljohnson@KISE-009 ~]$ cat ~/.gnupg/gpg.conf
cat: /home/ljohnson/.gnupg/gpg.conf: No such file or directory
[ljohnson@kise-066 ~]$ cat ~/.gnupg/gpg.conf
cat: /home/ljohnson/.gnupg/gpg.conf: No such file or directory

From archlinux:

[--ljohnson{12:27:37}~]$  cat ~/.gnupg/gpg.conf
keyserver hkp://pgp.mit.edu:11371
keyring /etc/pacman.d/gnupg/pubring.gpg
keyserver-options auto-key-retrieve

python2-nose installs correctly on KISE-055 and kise-066

This is from KISE-009, a pure, unmodified manjaro install

[ljohnson@KISE-009 ~]$ sudo find / -name 'gpg.conf'
find: ‘/run/user/1000/doc’: Permission denied
find: ‘/run/user/1000/gvfs’: Permission denied
/etc/pacman.d/gnupg/gpg.conf
[ljohnson@KISE-009 ~]$ cat /etc/pacman.d/gnupg/gpg.conf
no-greeting
no-permission-warning
lock-never
keyserver-options timeout=10
keyserver-options import-clean
keyserver-options no-self-sigs-only

Also from archlinux

[--ljohnson{12:38:06}~]$ gpg --recv-key 4548B3A8C0D70C12
gpg: key 4548B3A8C0D70C12: "John Szakmeister <john@szakmeister.net>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

yet from kise-004

[ljohnson@KISE-004 ~]$ gpg --recv-key 4548B3A8C0D70C12
gpg: keyserver receive failed: Server indicated a failure

Yochanan · 20 June 2022 20:06

The key is available via both the Ubuntu and the MIT keyserver.

keepitsimpleengineer · 20 June 2022 20:07

kise-004 fails to get key from mit server

[ljohnson@KISE-004 ~]$ gpg --keyserver pgp.mit.edu --recv-key 4548B3A8C0D70C12
gpg: keyserver receive failed: Server indicated a failure

Yochanan · 20 June 2022 20:08

Well, you just pointed out the difference between your Manjaro installs and your Arch install. Your Arch install and my Manjaro install work.

keepitsimpleengineer · 20 June 2022 20:21

The install works as well on three other manjaro systems.

keepitsimpleengineer · 20 June 2022 20:45

keyserver.ubuntu.com fails as well

[ljohnson@KISE-004 ~]$ gpg --keyserver keyserver.ubuntu.com --recv-key 4548B3A8C0D70C12
gpg: keyserver receive failed: Server indicated a failure

Yochanan · 20 June 2022 20:46

Well, find out the difference between them and the install that isn’t working.

zbe · 20 June 2022 21:13

What about your internet connection? DNS working? Firewall?
Also, try gpg with --debug-level <level> where level=(basic advanced expert guru)

keepitsimpleengineer · 20 June 2022 22:21

I tried this:

[ljohnson@KISE-004 ~]$ gpg --debug-all --recv-key 4548B3A8C0D70C12
gpg: reading options from '[cmdline]'
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /home/ljohnson/.gnupg
gpg: DBG: chan_3 <- # Config: /home/ljohnson/.gnupg/dirmngr.conf
gpg: DBG: chan_3 <- OK Dirmngr 2.2.35 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.35
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_GET -- 0x4548B3A8C0D70C12
gpg: DBG: chan_3 <- ERR 219 Server indicated a failure <Unspecified source>
gpg: keyserver receive failed: Server indicated a failure
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks

??? DBG: chan_3 ← ERR 219 Server indicated a failure -Unspecified source-

Running on a different system where install works, i get

[ljohnson@KISE-055 ~]$ gpg --debug-all --recv-key 4548B3A8C0D70C12
gpg: reading options from '[cmdline]'
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /home/ljohnson/.gnupg
gpg: DBG: chan_3 <- # Config: /home/ljohnson/.gnupg/dirmngr.conf
gpg: DBG: chan_3 <- OK Dirmngr 2.2.35 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.35
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_GET -- 0x4548B3A8C0D70C12
gpg: DBG: chan_3 <- S PROGRESS tick ? 0 0
gpg: DBG: chan_3 <- S SOURCE https://162.213.33.8:443

zbe · 20 June 2022 22:34

Does it work with:
--keyserver http://162.213.33.9

keepitsimpleengineer · 20 June 2022 22:40

[ljohnson@KISE-004 ~]$  gpg --debug-all --keyserver http://162.213.33.9 --recv-key 4548B3A8C0D70C12
gpg: reading options from '[cmdline]'
gpg: enabled debug flags: packet mpi crypto filter iobuf memory cache memstat trust hashing ipc clock lookup extprog
gpg: DBG: [not enabled in the source] start
gpg: DBG: chan_3 <- # Home: /home/ljohnson/.gnupg
gpg: DBG: chan_3 <- # Config: /home/ljohnson/.gnupg/dirmngr.conf
gpg: DBG: chan_3 <- OK Dirmngr 2.2.35 at your service
gpg: DBG: connection to the dirmngr established
gpg: DBG: chan_3 -> GETINFO version
gpg: DBG: chan_3 <- D 2.2.35
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KEYSERVER --clear http://162.213.33.9
gpg: DBG: chan_3 <- OK
gpg: DBG: chan_3 -> KS_GET -- 0x4548B3A8C0D70C12
gpg: DBG: chan_3 <- S PROGRESS tick ? 0 0
gpg: DBG: chan_3 <- D <!DOCTYPE html>%0A<html lang="en">%0A  <head>%0A      <meta charset="utf-8">%0A      <meta name="viewport" content="width=device-width, initial-scale=1.0">%0A      <meta name="description" content="OpenPGP Keyserver">%0A%0A      <title>OpenPGP Keyserver</title>%0A      <link rel="icon" href="/favicon.ico" type="image/x-icon"/>%0A      <link href="assets/bootstrap/3.3.7/css/bootstrap.min.css" rel="stylesheet" type="text/css">%0A      <style type="text/css">%0A        html,body {%0A          height: 100%25;%0A        }%0A        #wrap {%0A          min-height: 100%25;%0A          height: auto !important;%0A          height: 100%25;%0A          margin: 0 auto -60px;%0A        }%0A        #push,#footer {%0A          height: 60px;%0A        }%0A        #footer {%0A          background-color: #f5f5f5;%0A        }%0A        .container .credit {%0A            margin: 20px 0;%0A        }%0A        .modal:target {%0A            display: block;%0A        }%0A    </style>%0A  </head>%0A  <body
gpg: DBG: chan_3 <- D >%0A    <div id="wrap">%0A      <div class="container">%0A        <div class="page-header" id="banner" style="border-bottom: 0px;">%0A          <div class="row">%0A            <div class="col-lg-12">%0A              <h1 class="text-center"><strong>Hockeypuck</strong> OpenPGP keyserver</h1>%0A            </div>%0A          </div>%0A        </div>%0A      </div><!--closing page header container-->%0A      <div class="container">%0A        <div class="row">%0A          <div class="col-lg-8 col-lg-offset-2">%0A            <form action="/pks/lookup" method="get" class="form" role="form">%0A              <div class="control-group">%0A                <div class="controls" style="max-width:30em; margin:0 auto;">%0A                  <input name="search" class="form-control" type="text" placeholder="Search for an OpenPGP Public Key, ie 0x..." style="font-size: 1.5em; line-height: 1.5em; height: 2em;" required autofocus />%0A                </div>%0A              </div>%0A              <div c
gpg: DBG: chan_3 <- D lass="control-group text-center" style="margin-top: 0.5em;">%0A                <div class="controls">%0A                  <button type="submit" class="btn btn-primary">%0A                    <span class="glyphicon glyphicon-search"></span>%0A                    Search Key%0A                  </button>%0A                  <a id="showSubmitFormBtn" type="button" class="btn btn-primary" data-toggle="modal" href="#submitKey">%0A                    <span class="glyphicon glyphicon-cloud-upload"></span>%0A                    Submit Key%0A                  </a>%0A                </div>%0A              </div>%0A              <details class="text-center" style="margin-top: 0.5em;">%0A                <summary>Advanced Options</summary>%0A                <div class="control-group col-md-4 col-md-offset-2">%0A                  <div class="controls">%0A                    Index Options:%0A                    <label class="checkbox" for="fingerprint">%0A                      <input id="fingerpri
gpg: DBG: chan_3 <- D nt" type="checkbox" name="fingerprint" checked="checked" />%0A                      Show OpenPGP fingerprints%0A                    </label>%0A                    <label class="checkbox" for="hash">%0A                      <input id="hash" type="checkbox" name="hash" />%0A                      Show full-key hashes%0A                    </label>%0A                    <label class="checkbox" for="exact">%0A                      <input id="exact" type="checkbox" name="exact" value="on" />%0A                      Only return exact matches%0A                    </label>%0A                    <label class="checkbox" for="mr">%0A                      <input id="mr" type="checkbox" name="options" value="mr" />%0A                      Machine readable%0A                    </label>%0A                  </div>%0A                </div>%0A                <div class="control-group col-md-offset-6">%0A                  <div class="controls">%0A                    Index type:%0A
gpg: DBG: chan_3 <- D  <label class="radio" for="radios-0">%0A                      <input name="op" id="radios-0" value="index" checked="checked" type="radio">%0A                      Get regular index of matching keys%0A                    </label>%0A                    <label class="radio" for="radios-1">%0A                      <input name="op" id="radios-1" value="vindex" type="radio">%0A                      Get <strong>verbose</strong> index of matching keys%0A                    </label>%0A                    <label class="radio" for="radios-2">%0A                      <input name="op" id="radios-2" value="get" type="radio">%0A                      Retrieve ASCII-armored keys%0A                    </label>%0A                    <label class="radio" for="radios-3">%0A                      <input name="op" id="radios-3" value="hget" type="radio">%0A                      Retrieve keys by full hash fingerprint%0A                    </label>%0A                  </div>%0A                </div>%0A
gpg: DBG: chan_3 <- D          </details>%0A            </form>%0A          </div>%0A        </div>%0A      </div>%0A      <div class="modal" id="submitKey" tabindex="-1" role="dialog" aria-labelledby="myModalLabel" aria-hidden="true">%0A        <div class="modal-dialog">%0A          <div class="modal-content">%0A            <div class="modal-header">%0A              <h4 class="modal-title" id="myModalLabel">Submit Your OpenPGP Public Key</h4>%0A            </div>%0A            <div class="modal-body">%0A              <form action="/pks/add" method="post" id="keySubmitForm">%0A                <div class="control-group">%0A                  <div class="controls">%0A                    <textarea id="textarea" name="keytext" rows="20" style="width: 100%25;font-family:Courier;font-size:12px;" placeholder="Enter your ASCII-armored OpenPGP public key here" required ></textarea>%0A                  </div>%0A                </div>%0A                <div class="modal-footer">%0A                  <a href="#" type
gpg: DBG: chan_3 <- D ="button" class="btn btn-default" data-dismiss="modal">Close</a>%0A                  <button type="submit" class="btn btn-primary">%0A                    <span class="glyphicon glyphicon-cloud-upload"></span>%0A                    Submit Public Key%0A                  </button>%0A                </div>%0A              </form>%0A            </div>%0A          </div>%0A        </div>%0A      </div>%0A      <div class="modal" id="about" tabindex="-1" role="dialog" aria-labelledby="AboutLabel" aria-hidden="true">%0A        <div class="modal-dialog">%0A          <div class="modal-content">%0A            <div class="modal-header">%0A              <a href="#" type="button" class="close" data-dismiss="modal" aria-hidden="true">&times;</a>%0A              <h4 class="modal-title" id="AboutLabel">About this Server</h4>%0A            </div>%0A            <div class="modal-body">%0A              <p><strong>OpenPGP</strong> is a method of encrypting and/or signing data (for example an email) in
gpg: DBG: chan_3 <- D a secure “<em>end to end</em>” way.%0A                This means, the message is encrypted on your computer, using the recipient’s public key,%0A                in a way that the e-mail server has no knowledge of the content of the message.%0A                The recipient of the message then decrypts the message on their own computer using their private key.</p>%0A              <hr />%0A              <h5>OpenPGP Resources</h5>%0A              <ul>%0A                <li><a href="https://github.com/hockeypuck/hockeypuck" target="_blank">Hockeypuck project on Github</a></li>%0A                <li><a href="https://gnupg.org/" target="_blank">GnuPG Homepage</a></li>%0A                <li><a href="https://emailselfdefense.fsf.org/en/" target="_blank">Email Self-defense</a></li>%0A                <li><a href="http://en.wikipedia.org/wiki/Pretty_Good_Privacy" target="_blank">Wikipedia - Pretty Good Privacy</a></li>%0A              </ul>%0A            </div>%0A          </div>%0A
gpg: DBG: chan_3 <- D    </div>%0A      </div>%0A    </div><!--Closing content wrap-->%0A    <div id="footer">%0A      <div class="container">%0A        <div style="max-width: 20em; float: left;" >%0A          <p class="muted credit small">%0A            <a href="#about">about</a> |%0A            <a href="/pks/lookup?op=stats">statistics</a>%0A          </p>%0A        </div>%0A      </div>%0A    </div>%0A  </body>%0A</html>%0A
gpg: DBG: chan_3 <- OK
gpg: DBG: iobuf-1.0: esopen_nc '[fd 0x563a03ccdbf0]'
gpg: DBG: armor-filter: control: 5
gpg: DBG: iobuf-1.1: push 'armor_filter'
gpg: DBG: armor-filter: control: 5
gpg: DBG: iobuf chain: 1.1 'armor_filter' filter_eof=0 start=0 len=0
gpg: DBG: iobuf chain: 1.0 'estream_filter' filter_eof=0 start=0 len=0
gpg: DBG: armor-filter: control: 1
gpg: DBG: iobuf-1.1: underflow: buffer size: 8192; still buffered: 0 => space for 8192 bytes
gpg: DBG: iobuf-1.1: underflow: A->FILTER (8192 bytes)
gpg: DBG: armor-filter: control: 3
gpg: DBG: iobuf-1.0: underflow: buffer size: 8192; still buffered: 0 => space for 8192 bytes
gpg: DBG: iobuf-1.0: underflow: A->FILTER (8192 bytes)
gpg: DBG: iobuf-1.0: A->FILTER() returned rc=0 (ok), read 8014 bytes
gpg: DBG: iobuf-1.0: underflow: buffer size: 8192; still buffered: 0 => space for 8192 bytes
gpg: DBG: iobuf-1.0: underflow: A->FILTER (8192 bytes)
gpg: DBG: iobuf-1.0: A->FILTER() returned rc=-1 (EOF), read 0 bytes
gpg: DBG: [fd 0x563a03ccdbf0]: es_fclose 0x0000563a03ccdbf0
gpg: DBG: iobuf-1.0: underflow: buffer size: 8192; still buffered: 0 => space for 8192 bytes
gpg: DBG: iobuf-1.0: underflow: eof (pending eof)
gpg: DBG: iobuf-1.1: A->FILTER() returned rc=-1 (EOF), read 0 bytes
gpg: DBG: armor-filter: control: 2
gpg: no valid OpenPGP data found.
gpg: DBG: iobuf-1.1: pop in underflow (nothing buffered, got EOF)
gpg: DBG: iobuf chain: 1.0 '?' filter_eof=0 start=0 len=0
gpg: DBG: iobuf-1.0: close '?'
gpg: Total number processed: 0
gpg: DBG: chan_3 -> BYE
gpg: DBG: [not enabled in the source] stop
gpg: keydb: handles=0 locks=0 parse=0 get=0
gpg:        build=0 update=0 insert=0 delete=0
gpg:        reset=0 found=0 not=0 cache=0 not=0
gpg: kid_not_found_cache: count=0 peak=0 flushes=0
gpg: sig_cache: total=0 cached=0 good=0 bad=0
gpg: random usage: poolsize=600 mixed=0 polls=0/0 added=0/0
              outmix=0 getlvl1=0/0 getlvl2=0/0
gpg: rndjent stat: collector=0x0000000000000000 calls=0 bytes=0
gpg: secmem usage: 0/32768 bytes in 0 blocks

zbe · 20 June 2022 22:53

Ok so this should work:

gpg --keyserver hkp://162.213.33.8 --recv-key 4548B3A8C0D70C12

Something off with your resolver. Check: [SOLVED] gpg ERR 219 / Newbie Corner / Arch Linux Forums

keepitsimpleengineer · 20 June 2022 22:57

[ljohnson@KISE-004 ~]$ gpg --keyserver hkp://162.213.33.8 --recv-key 4548B3A8C0D70C12
gpg: keyserver receive failed: No keyserver available

I checking my bastion firewall

keepitsimpleengineer · 21 June 2022 17:01

The solution from bbs.archlinuxorg post with solution

The forum topic with the solutiom

Thanks zbe !

The gpg error stems from using systemd-resolved since it doesn’t source resolv.conf. This matters because gpg uses resolv.conf instead of nsswitch and the libc functions that systemd-resolved uses.

To solve this, all you have to do is create a symbolic link to systemd’s autogenerated resolv.conf that reflects the current resolver settings:

# rm /etc/resolv.conf
# ln -s /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf