# t7004-tag.sh fails (old gpg?) 10 messages from 2007-07-01 to 2007-07-01. Participants: Sven Verdoolaege, Johannes Schindelin, Carlos Rica. Thread: https://gitlist.dev/t/8793 ## Sven Verdoolaege, 2007-07-01 12:49 Subject: t7004-tag.sh fails (old gpg?) Message-ID: <20070701124953.GH7969MdfPADPa@greensroom.kotnet.org> URL: https://gitlist.dev/e/20070701124953.GH7969MdfPADPa%40greensroom.kotnet.org ``` t7004-tag.sh fails for me: * expecting success: git-tag -s -m "A signed tag message" signed-tag && get_tag_msg signed-tag >actual && git-diff expect actual gpg: Warning: using insecure memory! gpg: [don't know]: invalid packet (ctb=00) gpg: read_keyblock: read error: invalid packet gpg: enum_keyblocks failed: invalid keyring gpg: skipped `C O Mitter ': invalid keyring gpg: signing failed: invalid keyring failed to sign the tag with GPG. * FAIL 49: creating a signed tag with -m message should succeed git-tag -s -m "A signed tag message" signed-tag && get_tag_msg signed-tag >actual && git-diff expect actual I see that you alread check for presence of gpg, but maybe you should also check that it is recent enough. This is the version I have: bash-3.00$ gpg --version gpg (GnuPG) 1.0.6 Copyright (C) 2001 Free Software Foundation, Inc. This program comes with ABSOLUTELY NO WARRANTY. This is free software, and you are welcome to redistribute it under certain conditions. See the file COPYING for details. Home: ~/.gnupg Supported algorithms: Cipher: 3DES, CAST5, BLOWFISH, RIJNDAEL, RIJNDAEL192, RIJNDAEL256, TWOFISH Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA, ELG Hash: MD5, SHA1, RIPEMD160 skimo ``` ## Johannes Schindelin, 2007-07-01 14:09 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: URL: https://gitlist.dev/e/Pine.LNX.4.64.0707011507310.4438%40racer.site In-Reply-To: <20070701124953.GH7969MdfPADPa@greensroom.kotnet.org> ``` Hi, On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > gpg: Warning: using insecure memory! > gpg: [don't know]: invalid packet (ctb=00) > gpg: read_keyblock: read error: invalid packet > gpg: enum_keyblocks failed: invalid keyring > gpg: skipped `C O Mitter ': invalid keyring > gpg: signing failed: invalid keyring That means that gpg somehow barfs on the keyring. I somehow had the impression that the keyrings were binary compatible on different systems... What system do you have? > bash-3.00$ gpg --version > gpg (GnuPG) 1.0.6 It is 1.4.5 here. > Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA, ELG AFAIK DSA should suffice. Ciao, Dscho ``` ## Sven Verdoolaege, 2007-07-01 15:34 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: <20070701153443.GI7969MdfPADPa@greensroom.kotnet.org> URL: https://gitlist.dev/e/20070701153443.GI7969MdfPADPa%40greensroom.kotnet.org In-Reply-To: ``` On Sun, Jul 01, 2007 at 03:09:06PM +0100, Johannes Schindelin wrote: > Hi, > > On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > > > gpg: Warning: using insecure memory! > > gpg: [don't know]: invalid packet (ctb=00) > > gpg: read_keyblock: read error: invalid packet > > gpg: enum_keyblocks failed: invalid keyring > > gpg: skipped `C O Mitter ': invalid keyring > > gpg: signing failed: invalid keyring > > That means that gpg somehow barfs on the keyring. I somehow had the > impression that the keyrings were binary compatible on different > systems... What system do you have? A regular (old) Linux system: Linux greensroom 2.4.23 #3 SMP Mon Jan 5 14:14:32 CET 2004 i686 unknown unknown GNU/Linux skimo ``` ## Carlos Rica, 2007-07-01 15:45 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: <1b46aba20707010845s69fd3915p8460392ad92bba4b@mail.gmail.com> URL: https://gitlist.dev/e/1b46aba20707010845s69fd3915p8460392ad92bba4b%40mail.gmail.com In-Reply-To: ``` 2007/7/1, Johannes Schindelin : > On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > > > gpg: Warning: using insecure memory! > > gpg: [don't know]: invalid packet (ctb=00) > > gpg: read_keyblock: read error: invalid packet > > gpg: enum_keyblocks failed: invalid keyring > > gpg: skipped `C O Mitter ': invalid keyring > > gpg: signing failed: invalid keyring > > That means that gpg somehow barfs on the keyring. I somehow had the > impression that the keyrings were binary compatible on different > systems... What system do you have? > > > bash-3.00$ gpg --version > > gpg (GnuPG) 1.0.6 > > It is 1.4.5 here. I have gpg (GnuPG) 1.4.1 here, in the system I used to generate the key. ``` ## Carlos Rica, 2007-07-01 16:06 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: <1b46aba20707010906s5b515419q48247801efe80515@mail.gmail.com> URL: https://gitlist.dev/e/1b46aba20707010906s5b515419q48247801efe80515%40mail.gmail.com In-Reply-To: <20070701153443.GI7969MdfPADPa@greensroom.kotnet.org> ``` > > On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > > > > > gpg: Warning: using insecure memory! > > > gpg: [don't know]: invalid packet (ctb=00) > > > gpg: read_keyblock: read error: invalid packet > > > gpg: enum_keyblocks failed: invalid keyring > > > gpg: skipped `C O Mitter ': invalid keyring > > > gpg: signing failed: invalid keyring I don't know if it could be due to the deleted t/t7004/trustdb.gpg file, you can check the same including it (if you didn't get it already): http://article.gmane.org/gmane.comp.version-control.git/51271 Can you verify the other tags, like those from Junio on each version? ``` ## Sven Verdoolaege, 2007-07-01 16:53 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: <20070701165301.GJ7969MdfPADPa@greensroom.kotnet.org> URL: https://gitlist.dev/e/20070701165301.GJ7969MdfPADPa%40greensroom.kotnet.org In-Reply-To: <1b46aba20707010906s5b515419q48247801efe80515@mail.gmail.com> ``` On Sun, Jul 01, 2007 at 06:06:06PM +0200, Carlos Rica wrote: > >> On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > >> > >> > gpg: Warning: using insecure memory! > >> > gpg: [don't know]: invalid packet (ctb=00) > >> > gpg: read_keyblock: read error: invalid packet > >> > gpg: enum_keyblocks failed: invalid keyring > >> > gpg: skipped `C O Mitter ': invalid keyring > >> > gpg: signing failed: invalid keyring > > I don't know if it could be due to the deleted t/t7004/trustdb.gpg file, > you can check the same including it (if you didn't get it already): > http://article.gmane.org/gmane.comp.version-control.git/51271 Doesn't seem to have any effect. > Can you verify the other tags, like those from Junio on each version? Apparently... bash-3.00$ git-cat-file blob junio-gpg-pub | gpg --import gpg: Warning: using insecure memory! gpg: key F3119B9A: public key imported gpg: Total number processed: 1 gpg: imported: 1 bash-3.00$ git-verify-tag v1.5.2-rc2 gpg: Warning: using insecure memory! gpg: Signature made Sun 06 May 2007 10:08:26 AM CEST using DSA key ID F3119B9A gpg: Good signature from "[image of size 1532]" gpg: aka "Junio C Hamano " Could not find a valid trust path to the key. Let's see whether we can assign some missing owner trust values. No path leading to one of our keys found. gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. gpg: Fingerprint: 3565 2A26 2040 E066 C9A7 4A7D C0C6 D9A4 F311 9B9A bash-3.00$ skimo ``` ## Johannes Schindelin, 2007-07-01 18:06 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: URL: https://gitlist.dev/e/Pine.LNX.4.64.0707011903200.4438%40racer.site In-Reply-To: <20070701165301.GJ7969MdfPADPa@greensroom.kotnet.org> ``` Hi, On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > On Sun, Jul 01, 2007 at 06:06:06PM +0200, Carlos Rica wrote: > > > Can you verify the other tags, like those from Junio on each version? > > Apparently... Could you please try to import the attached keys into a new keyring? IOW $ mkdir test-gpg $ chown go-rwx test-gpg $ export GNUPGHOME=$(pwd)/test-gpg $ gpg --import pubkeys.asc And send me the resulting pubring.gpg and secring.gpg? If you have a little more time, you could also put them in t/t7004/, and check t7004-tag.sh... Ciao, Dscho -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.5 (GNU/Linux) mQGiBEZnyykRBACzCPjIpTYNL7Y2tQqlEGTTDlvZcWNLjF5f7ZzuyOqNOidLUgFD 36qch1LZLSZkShdR3Gae+bsolyjxrlFuFP0eXRPMtqK20aLw7WZvPFpEV1ThMne+ PRJjYrvghWw3L0VVIAIZ8GXwrVBuU99uEjHEI0ojYloOvFc2jVPgSaoBvwCg48Tj fol2foSoJa7XUu9yAL8szg8D/RUsTzNF+I9hSRHl7MYKFMYoKEY9BDgrgAujp7YY 8qdGsiUb0Ggyzp2kRjZFt4lpcvKhGfHn5GEjmtk+fRbD5qPfMqKFW+T0NPfYlYmL JJ4fs4qZ8Lx7x6iG6X51u+YNwsQuIGjMCC3CeNi3F7or651kkNYASbaQ1NROkCIN NudyA/0aasvoZUoNJAc2cP5Ifs6WhXMWLfMR2p2XbfKwKNYneec60usnSComcKqh sJVk0Gytvr3FOYVhRkXnKAbx+0W2urFP8OFVBTEKO6Ts2VygWGgneQYoHnqzwlUE yjOjlr+lyf7u2s/KAxpKA6jnttEdRZAmzWkhuox1wwAUkr27/bQiQyBPIE1pdHRl ciA8Y29tbWl0dGVyQGV4YW1wbGUuY29tPoheBBMRAgAeBQJGZ8spAhsDBgsJCAcD AgMVAgMDFgIBAh4BAheAAAoJEBO29R7N3kMNdB0An0npiVm5p1HoQjKV4PrHPbrp b0ahAKC/3JbGwl1vs0Wdno7vY+KBKDaUYLkCDQRGZ8tOEAgAzrl5P1Pr6CDR8mf5 DGGzcUUM+PEroA4FLdKJ5ZaZc7qy1lmmW9vuvb6xdinwcwee2c5fdNE+iUjHV2x2 S/dbfDzJTN/0uajZcw+xnf+KxZ0Rs4gDSs7cHXHBtA7u8ShYd4Hu7JggXpiwgfSk yrGQiZyLAHW2ck8H07Go8eUP8fLIeva+iPqeYQZo9BaPz92R/J6debpeY1lRkv+y WTq1GE3C/hxbdBAuHf2duLP2uq9kwoVdfzCRjgV1CQmMIbCrMb7vIlzIe96bb3+K r/+NEtmB2I3wHBXcwJMnIOnz9Zv933KNlxSbVF23BGLB+F9D7OanKymbs7Eg18fr mt/t/wAEDQgAtGIxGz944Pn2OtheY9JlBRuIAuVskm24/Zz03dZnk6CuEOIBb5IM g36GAPKcn1vsLZ0TfE1q53jNpcAAXjgngnRsCjZm1mglqPD4ZfBpl+Hhnuc80fAR xsUPj+5c8KP2M+Rws4moaZRjVpd3KCi3ceflT/OjwnE9DzdhslCGTMA5n8cajAs2 oqAaQssefVf2prLQLGV9NB4Q3lFnKXdvipHMaAYAsW+iF7JkhTDVNuNGlufeSqUm igRBjTZXBcVd8sj8vDOCWKUfqxJyS+zRYcotn7QvpvcKAkc3ZGxntDHAIGLVp6ay +vrkV4Ren8BjFobl25Ruy6Abw+CgnTpuwYhJBBgRAgAJBQJGZ8tOAhsMAAoJEBO2 9R7N3kMNwewAoJoZ/yJWSrCXX08A/q8KSX4ZfoBDAJ0Yxei/DHK9m5lXc2MPkMoK glpIKw== =XD5b -----END PGP PUBLIC KEY BLOCK----- ``` ## Sven Verdoolaege, 2007-07-01 18:26 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: <20070701182637.GL7969MdfPADPa@greensroom.kotnet.org> URL: https://gitlist.dev/e/20070701182637.GL7969MdfPADPa%40greensroom.kotnet.org In-Reply-To: ``` On Sun, Jul 01, 2007 at 07:06:43PM +0100, Johannes Schindelin wrote: > And send me the resulting pubring.gpg and secring.gpg? Attached. > If you have a little more time, you could also put them in t/t7004/, and > check t7004-tag.sh... Different... (assuming I understand your request correctly) * expecting success: git-tag -s -m "A signed tag message" signed-tag && get_tag_msg signed-tag >actual && git-diff expect actual gpg: Warning: using insecure memory! gpg: skipped `C O Mitter ': secret key not available gpg: signing failed: secret key not available failed to sign the tag with GPG. * FAIL 49: creating a signed tag with -m message should succeed git-tag -s -m "A signed tag message" signed-tag && get_tag_msg signed-tag >actual && git-diff expect actual bash-3.00$ git diff diff --git a/t/t7004/pubring.gpg b/t/t7004/pubring.gpg index 83855fa..20e89c6 100644 Binary files a/t/t7004/pubring.gpg and b/t/t7004/pubring.gpg differ diff --git a/t/t7004/secring.gpg b/t/t7004/secring.gpg index d831cd9..e69de29 100644 Binary files a/t/t7004/secring.gpg and b/t/t7004/secring.gpg differ skimo ``` ## Johannes Schindelin, 2007-07-01 18:30 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: URL: https://gitlist.dev/e/Pine.LNX.4.64.0707011929200.4438%40racer.site In-Reply-To: <20070701182637.GL7969MdfPADPa@greensroom.kotnet.org> ``` Hi, On Sun, 1 Jul 2007, Sven Verdoolaege wrote: > On Sun, Jul 01, 2007 at 07:06:43PM +0100, Johannes Schindelin wrote: > > And send me the resulting pubring.gpg and secring.gpg? > > Attached. Thanks. > > If you have a little more time, you could also put them in t/t7004/, and > > check t7004-tag.sh... > > Different... (assuming I understand your request correctly) > > * expecting success: > git-tag -s -m "A signed tag message" signed-tag && > get_tag_msg signed-tag >actual && > git-diff expect actual > > gpg: Warning: using insecure memory! > gpg: skipped `C O Mitter ': secret key not available > gpg: signing failed: secret key not available Aargh! I am a complete moron. Attached also the private key now. Ciao, Dscho ��Fg�)��ȥ6 /�6� �d�[�qcK�^_����:'KRCߪ��R�-&dJQ�f���(�(�Qn�]̶��Ѣ��fo}���2��[��4�ؕ��$�����{Ǩ��~u�� ��. h�-�xط�+�d��I����N�" 6�r�j��eJ $6p�H~Ζ�s-�ڝ�m�(�'y�:��'H*&p����d�l����9�aFE�(��E���O��U1 ;���\�Xh'y(z��U�3����������J���E�&�i!��u������t�̤u�Q���i�wڴ� ��"C O Mitter �^Fg�) � ����C t�����:��nc�뾨ƿ�qC�C]�%p���L�Hة�כX�y�=Fg�Nιy?S�� ��g� a�qE ��+�-҉喙s���Y�[��v)�s���_t�>�H�WlvK�[|<�L�����s����ŝ��J��q����(Xw��� ^�����ʱ����u�rOӱ������z�����ah���ݑ���y�^cYQ���Y:�M��[t.�������d…]0��u �!��1��"\�{ޛo����ف؍����' ������r���T]�b��_C��+)��� ������ �b1?x���:�^c�e��l�m������g����o� �~��[�-�|Mj�xͥ�^8'�tl 6f�h%���e�i����<������\��3�p���i�cV�w((�q��O��q=7a�P�L�9��� 6��B�}W����,e}4�Qg)wo���h�o��d�0�6�F���J�&�A�6W�]����3�X��rK��a�-��/�� G7dlg�1� bէ�����W�^��c��۔nˠ�ࠝ:n�T @��]jn���4��Z���R[��_�`���Ei�7!���L���I Fg�N ����C ����r�- bE��Q�W� ��� ��� Ͽ.�<-�a 휾���|� ``` ## Sven Verdoolaege, 2007-07-01 19:10 Subject: Re: t7004-tag.sh fails (old gpg?) Message-ID: <20070701191018.GM7969MdfPADPa@greensroom.kotnet.org> URL: https://gitlist.dev/e/20070701191018.GM7969MdfPADPa%40greensroom.kotnet.org In-Reply-To: ``` On Sun, Jul 01, 2007 at 07:30:09PM +0100, Johannes Schindelin wrote: > Aargh! I am a complete moron. Attached also the private key now. Ok... some progress... * expecting success: git-tag -v signed-tag object 86e17e4ed4cddf9a4f960da789f8378f6ea1ff2b type commit tag signed-tag tagger C O Mitter Thu Apr 7 15:13:13 2005 -0700 A signed tag message gpg: Warning: using insecure memory! gpg: Signature made Sun Jul 1 19:08:37 2007 UTC using DSA key ID CDDE430D gpg: Good signature from "C O Mitter " gpg: NOTE: secret key CDDE430D is NOT protected. gpg: /home/skimo/src/git/t/trash/gpghome/trustdb.gpg: invalid file version 3 gpg: fatal: /home/skimo/src/git/t/trash/gpghome/trustdb.gpg: invalid trustdb secmem usage: 1408/1408 bytes in 2/2 blocks of pool 1408/16384 * FAIL 50: verifying a signed tag should succeed git-tag -v signed-tag skimo ```