threads / discuss / 8793

t7004-tag.sh fails (old gpg?)

Subject: t7004-tag.sh fails (old gpg?)

## tl;dr

10 messages between Jul 1, 2007 and Jul 1, 2007.

replies: 9people: 3as markdown or json

Sven Verdoolaege· Jul 1, 2007, 12:49 UTC · lore
t7004-tag.sh fails for me:
* expecting success: 
        git-tag -s -m "A signed tag message" signed-tag &&
        get_tag_msg signed-tag >actual &&
        git-diff expect actual
gpg: Warning: using insecure memory!
gpg: [don't know]: invalid packet (ctb=00)
gpg: read_keyblock: read error: invalid packet
gpg: enum_keyblocks failed: invalid keyring
gpg: skipped `C O Mitter <committer@example.com>': invalid keyring
gpg: signing failed: invalid keyring
failed to sign the tag with GPG.
* FAIL 49: creating a signed tag with -m message should succeed
                git-tag -s -m "A signed tag message" signed-tag &&
                get_tag_msg signed-tag >actual &&
                git-diff expect actual

I see that you alread check for presence of gpg, but maybe you should also check that it is recent enough. This is the version I have:

bash-3.00$ gpg --version gpg (GnuPG) 1.0.6 Copyright (C) 2001 Free Software Foundation, Inc. This program comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Cipher: 3DES, CAST5, BLOWFISH, RIJNDAEL, RIJNDAEL192, RIJNDAEL256, TWOFISH
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA, ELG
Hash: MD5, SHA1, RIPEMD160
skimo
Johannes Schindelin· Jul 1, 2007, 14:09 UTC · re: Sven Verdoolaege · lore

Re: t7004-tag.sh fails (old gpg?)

Hi,
On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
Show 6 quoted lines
> gpg: Warning: using insecure memory!
> gpg: [don't know]: invalid packet (ctb=00)
> gpg: read_keyblock: read error: invalid packet
> gpg: enum_keyblocks failed: invalid keyring
> gpg: skipped `C O Mitter <committer@example.com>': invalid keyring
> gpg: signing failed: invalid keyring

That means that gpg somehow barfs on the keyring. I somehow had the impression that the keyrings were binary compatible on different systems... What system do you have?

> bash-3.00$ gpg --version
> gpg (GnuPG) 1.0.6
It is 1.4.5 here.
> Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA, ELG
AFAIK DSA should suffice.

Ciao, Dscho

Sven Verdoolaege· Jul 1, 2007, 15:34 UTC · re: Johannes Schindelin · lore

Re: t7004-tag.sh fails (old gpg?)

On Sun, Jul 01, 2007 at 03:09:06PM +0100, Johannes Schindelin wrote:
Show 14 quoted lines
> Hi,
> 
> On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
> 
> > gpg: Warning: using insecure memory!
> > gpg: [don't know]: invalid packet (ctb=00)
> > gpg: read_keyblock: read error: invalid packet
> > gpg: enum_keyblocks failed: invalid keyring
> > gpg: skipped `C O Mitter <committer@example.com>': invalid keyring
> > gpg: signing failed: invalid keyring
> 
> That means that gpg somehow barfs on the keyring. I somehow had the 
> impression that the keyrings were binary compatible on different 
> systems... What system do you have?
A regular (old) Linux system:
Linux greensroom 2.4.23 #3 SMP Mon Jan 5 14:14:32 CET 2004 i686 unknown unknown GNU/Linux
skimo
Carlos Rica· Jul 1, 2007, 16:06 UTC · re: Sven Verdoolaege · lore

Re: t7004-tag.sh fails (old gpg?)

Show 8 quoted lines
> > On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
> >
> > > gpg: Warning: using insecure memory!
> > > gpg: [don't know]: invalid packet (ctb=00)
> > > gpg: read_keyblock: read error: invalid packet
> > > gpg: enum_keyblocks failed: invalid keyring
> > > gpg: skipped `C O Mitter <committer@example.com>': invalid keyring
> > > gpg: signing failed: invalid keyring

I don't know if it could be due to the deleted t/t7004/trustdb.gpg file, you can check the same including it (if you didn't get it already): http://article.gmane.org/gmane.comp.version-control.git/51271

Can you verify the other tags, like those from Junio on each version?
Sven Verdoolaege· Jul 1, 2007, 16:53 UTC · re: Carlos Rica · lore

Re: t7004-tag.sh fails (old gpg?)

On Sun, Jul 01, 2007 at 06:06:06PM +0200, Carlos Rica wrote:
Show 12 quoted lines
> >> On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
> >>
> >> > gpg: Warning: using insecure memory!
> >> > gpg: [don't know]: invalid packet (ctb=00)
> >> > gpg: read_keyblock: read error: invalid packet
> >> > gpg: enum_keyblocks failed: invalid keyring
> >> > gpg: skipped `C O Mitter <committer@example.com>': invalid keyring
> >> > gpg: signing failed: invalid keyring
> 
> I don't know if it could be due to the deleted t/t7004/trustdb.gpg file,
> you can check the same including it (if you didn't get it already):
> http://article.gmane.org/gmane.comp.version-control.git/51271
Doesn't seem to have any effect.
> Can you verify the other tags, like those from Junio on each version?
Apparently...

bash-3.00$ git-cat-file blob junio-gpg-pub | gpg --import gpg: Warning: using insecure memory! gpg: key F3119B9A: public key imported gpg: Total number processed: 1 gpg: imported: 1 bash-3.00$ git-verify-tag v1.5.2-rc2 gpg: Warning: using insecure memory! gpg: Signature made Sun 06 May 2007 10:08:26 AM CEST using DSA key ID F3119B9A gpg: Good signature from "[image of size 1532]" gpg: aka "Junio C Hamano <junkio@cox.net>" Could not find a valid trust path to the key. Let's see whether we can assign some missing owner trust values.

No path leading to one of our keys found.

gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. gpg: Fingerprint: 3565 2A26 2040 E066 C9A7 4A7D C0C6 D9A4 F311 9B9A bash-3.00$ 

skimo
Johannes Schindelin· Jul 1, 2007, 18:06 UTC · re: Sven Verdoolaege · lore

Re: t7004-tag.sh fails (old gpg?)

Hi,
On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
Show 5 quoted lines
> On Sun, Jul 01, 2007 at 06:06:06PM +0200, Carlos Rica wrote:
>
> > Can you verify the other tags, like those from Junio on each version?
> 
> Apparently...
Could you please try to import the attached keys into a new keyring? IOW
	$ mkdir test-gpg
	$ chown go-rwx test-gpg
	$ export GNUPGHOME=$(pwd)/test-gpg
	$ gpg --import pubkeys.asc
And send me the resulting pubring.gpg and secring.gpg?

If you have a little more time, you could also put them in t/t7004/, and check t7004-tag.sh...

Ciao, Dscho

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.5 (GNU/Linux)

mQGiBEZnyykRBACzCPjIpTYNL7Y2tQqlEGTTDlvZcWNLjF5f7ZzuyOqNOidLUgFD 36qch1LZLSZkShdR3Gae+bsolyjxrlFuFP0eXRPMtqK20aLw7WZvPFpEV1ThMne+ PRJjYrvghWw3L0VVIAIZ8GXwrVBuU99uEjHEI0ojYloOvFc2jVPgSaoBvwCg48Tj fol2foSoJa7XUu9yAL8szg8D/RUsTzNF+I9hSRHl7MYKFMYoKEY9BDgrgAujp7YY 8qdGsiUb0Ggyzp2kRjZFt4lpcvKhGfHn5GEjmtk+fRbD5qPfMqKFW+T0NPfYlYmL JJ4fs4qZ8Lx7x6iG6X51u+YNwsQuIGjMCC3CeNi3F7or651kkNYASbaQ1NROkCIN NudyA/0aasvoZUoNJAc2cP5Ifs6WhXMWLfMR2p2XbfKwKNYneec60usnSComcKqh sJVk0Gytvr3FOYVhRkXnKAbx+0W2urFP8OFVBTEKO6Ts2VygWGgneQYoHnqzwlUE yjOjlr+lyf7u2s/KAxpKA6jnttEdRZAmzWkhuox1wwAUkr27/bQiQyBPIE1pdHRl ciA8Y29tbWl0dGVyQGV4YW1wbGUuY29tPoheBBMRAgAeBQJGZ8spAhsDBgsJCAcD AgMVAgMDFgIBAh4BAheAAAoJEBO29R7N3kMNdB0An0npiVm5p1HoQjKV4PrHPbrp b0ahAKC/3JbGwl1vs0Wdno7vY+KBKDaUYLkCDQRGZ8tOEAgAzrl5P1Pr6CDR8mf5 DGGzcUUM+PEroA4FLdKJ5ZaZc7qy1lmmW9vuvb6xdinwcwee2c5fdNE+iUjHV2x2 S/dbfDzJTN/0uajZcw+xnf+KxZ0Rs4gDSs7cHXHBtA7u8ShYd4Hu7JggXpiwgfSk yrGQiZyLAHW2ck8H07Go8eUP8fLIeva+iPqeYQZo9BaPz92R/J6debpeY1lRkv+y WTq1GE3C/hxbdBAuHf2duLP2uq9kwoVdfzCRjgV1CQmMIbCrMb7vIlzIe96bb3+K r/+NEtmB2I3wHBXcwJMnIOnz9Zv933KNlxSbVF23BGLB+F9D7OanKymbs7Eg18fr mt/t/wAEDQgAtGIxGz944Pn2OtheY9JlBRuIAuVskm24/Zz03dZnk6CuEOIBb5IM g36GAPKcn1vsLZ0TfE1q53jNpcAAXjgngnRsCjZm1mglqPD4ZfBpl+Hhnuc80fAR xsUPj+5c8KP2M+Rws4moaZRjVpd3KCi3ceflT/OjwnE9DzdhslCGTMA5n8cajAs2 oqAaQssefVf2prLQLGV9NB4Q3lFnKXdvipHMaAYAsW+iF7JkhTDVNuNGlufeSqUm igRBjTZXBcVd8sj8vDOCWKUfqxJyS+zRYcotn7QvpvcKAkc3ZGxntDHAIGLVp6ay +vrkV4Ren8BjFobl25Ruy6Abw+CgnTpuwYhJBBgRAgAJBQJGZ8tOAhsMAAoJEBO2 9R7N3kMNwewAoJoZ/yJWSrCXX08A/q8KSX4ZfoBDAJ0Yxei/DHK9m5lXc2MPkMoK glpIKw== =XD5b -----END PGP PUBLIC KEY BLOCK-----

Sven Verdoolaege· Jul 1, 2007, 18:26 UTC · re: Johannes Schindelin · lore

Re: t7004-tag.sh fails (old gpg?)

On Sun, Jul 01, 2007 at 07:06:43PM +0100, Johannes Schindelin wrote:
> And send me the resulting pubring.gpg and secring.gpg?
Attached.
> If you have a little more time, you could also put them in t/t7004/, and 
> check t7004-tag.sh...
Different...  (assuming I understand your request correctly)
* expecting success: 
        git-tag -s -m "A signed tag message" signed-tag &&
        get_tag_msg signed-tag >actual &&
        git-diff expect actual
gpg: Warning: using insecure memory!
gpg: skipped `C O Mitter <committer@example.com>': secret key not available
gpg: signing failed: secret key not available
failed to sign the tag with GPG.
* FAIL 49: creating a signed tag with -m message should succeed
                git-tag -s -m "A signed tag message" signed-tag &&
                get_tag_msg signed-tag >actual &&
                git-diff expect actual
bash-3.00$ git diff
diff --git a/t/t7004/pubring.gpg b/t/t7004/pubring.gpg
index 83855fa..20e89c6 100644
Binary files a/t/t7004/pubring.gpg and b/t/t7004/pubring.gpg differ
diff --git a/t/t7004/secring.gpg b/t/t7004/secring.gpg
index d831cd9..e69de29 100644
Binary files a/t/t7004/secring.gpg and b/t/t7004/secring.gpg differ

skimo
Johannes Schindelin· Jul 1, 2007, 18:30 UTC · re: Sven Verdoolaege · lore

Re: t7004-tag.sh fails (old gpg?)

Hi,
On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
> On Sun, Jul 01, 2007 at 07:06:43PM +0100, Johannes Schindelin wrote:
> > And send me the resulting pubring.gpg and secring.gpg?
> 
> Attached.
Thanks.
Show 13 quoted lines
> > If you have a little more time, you could also put them in t/t7004/, and 
> > check t7004-tag.sh...
> 
> Different...  (assuming I understand your request correctly)
> 
> * expecting success: 
>         git-tag -s -m "A signed tag message" signed-tag &&
>         get_tag_msg signed-tag >actual &&
>         git-diff expect actual
> 
> gpg: Warning: using insecure memory!
> gpg: skipped `C O Mitter <committer@example.com>': secret key not available
> gpg: signing failed: secret key not available
Aargh! I am a complete moron. Attached also the private key now.

Ciao, Dscho

��Fg�)��ȥ6
/�6�
�d�[�qcK�^_����:'KRCߪ��R�-&dJQ�f���(�(�Qn�]̶��Ѣ��fo<ZDWT�2w�=cb���l7/EU �e�PnS�n1�#J#bZ�W6�S�I������~�v~��%��R�r�,��,O3E��aI���
�((F=8+�����F�%�h2Ν�F6E��ir����a#��>}���2��[��4�ؕ��$�����{Ǩ��~u��
��. h�-�xط�+�d��I����N�"
6�r�j��eJ
$6p�H~Ζ�s-�ڝ�m�(�'y�:��'H*&p����d�l����9�aFE�(��E���O��U1
;���\�Xh'y(z��U�3����������J���E�&�i!��u������t�̤u�Q���i�wڴ���"C O Mitter <committer@example.com>�^Fg�)	�
	����C
t�����:��nc�뾨ƿ�qC�C]�%p���L�Hة�כX�y�=Fg�Nιy?S�� ��g�a�qE��+�-҉喙s���Y�[��v)�s���_t�>�H�WlvK�[|<�L�����s����ŝ��J��q����(Xw��� ^�����ʱ����u�rOӱ������z�����ah���ݑ���y�^cYQ���Y:�M��[t.�������d…]0��u		�!��1��"\�{ޛo����ف؍����' ������r���T]�b��_C��+)��� ������
�b1?x���:�^c�e��l�m������g����o��~��[�-�|Mj�xͥ�^8'�tl
6f�h%���e�i����<������\��3�p���i�cV�w((�q��O��q=7a�P�L�9���6��B�}W����,e}4�Qg)wo���h�o��d�0�6�F���J�&�A�6W�]����3�X��rK��a�-��/��
G7dlg�1� bէ�����W�^��c��۔nˠ�ࠝ:n�T
@��]jn���4��Z���R[��_�`���Ei�7!���L���I	Fg�N
	����C
����r�-
bE��Q�W�	���
���
Ͽ.�<-�a휾���|�
Sven Verdoolaege· Jul 1, 2007, 19:10 UTC · re: Johannes Schindelin · lore

Re: t7004-tag.sh fails (old gpg?)

On Sun, Jul 01, 2007 at 07:30:09PM +0100, Johannes Schindelin wrote:
> Aargh! I am a complete moron. Attached also the private key now.
Ok... some progress...
* expecting success: git-tag -v signed-tag
object 86e17e4ed4cddf9a4f960da789f8378f6ea1ff2b
type commit
tag signed-tag
tagger C O Mitter <committer@example.com> Thu Apr 7 15:13:13 2005 -0700
A signed tag message
gpg: Warning: using insecure memory!
gpg: Signature made Sun Jul  1 19:08:37 2007 UTC using DSA key ID CDDE430D
gpg: Good signature from "C O Mitter <committer@example.com>"
gpg: NOTE: secret key CDDE430D is NOT protected.
gpg: /home/skimo/src/git/t/trash/gpghome/trustdb.gpg: invalid file version 3
gpg: fatal: /home/skimo/src/git/t/trash/gpghome/trustdb.gpg: invalid trustdb
secmem usage: 1408/1408 bytes in 2/2 blocks of pool 1408/16384
* FAIL 50: verifying a signed tag should succeed
        git-tag -v signed-tag
skimo
Carlos Rica· Jul 1, 2007, 15:45 UTC · re: Johannes Schindelin · lore

Re: t7004-tag.sh fails (old gpg?)

2007/7/1, Johannes Schindelin <Johannes.Schindelin@gmx.de>:
Show 17 quoted lines
> On Sun, 1 Jul 2007, Sven Verdoolaege wrote:
>
> > gpg: Warning: using insecure memory!
> > gpg: [don't know]: invalid packet (ctb=00)
> > gpg: read_keyblock: read error: invalid packet
> > gpg: enum_keyblocks failed: invalid keyring
> > gpg: skipped `C O Mitter <committer@example.com>': invalid keyring
> > gpg: signing failed: invalid keyring
>
> That means that gpg somehow barfs on the keyring. I somehow had the
> impression that the keyrings were binary compatible on different
> systems... What system do you have?
>
> > bash-3.00$ gpg --version
> > gpg (GnuPG) 1.0.6
>
> It is 1.4.5 here.
I have gpg (GnuPG) 1.4.1 here, in the system I used to generate the key.

← back to recent threads