***ERROR: Importing public key failed. Verification aborted.

[peter-sylvester]

Description

SInce a day or two when I checked to upgrade zopen tools with success, I now get
1 the message in the title
2 and the upgrade tries to basically try all packages that we have without luck.

Severity

Sev 3 - Medium

Expected Behavior

It should work, if not give a hint about what to do to remedy

Actual Behavior

No response

z/OS Version

No response

zopen package manager version

0.8.3

Additional Information (Optional)

No response

Network or Security Configuration (Optional)

Why is SSL_CERT_FILE set to cacert.pem in gitcli? some where in config.

[IgorTodorovskiIBM]

@HarithaIBM FYI
We may need to check if gpg is present and if not, perform a zopen install gpg --skip-verify

[peter-sylvester]

I had t gpg the latest, but reinstall told me that two files in my .gnupg could not be updated. Wrong rights. But this still doesn't sold after reinstalling meta I get no such file /usr/local/zopen/usr/local/bin Is this the value of the env variable OLDPWD?

[HarithaIBM]

Hi @peter-sylvester,
Thank you for reporting the issue.
Can you please help us with snapshot the command which is run and the error you got? Also, please share the permissions of .gnupg directory

[mgrossmann]

Hi ...

I facing the same problem. Can't update some tools.

VERBOSE: Installing less-heads.v667.20241028_123530.zos.pax.Z
- Processing less-heads.v667.20241028_123530.zos.pax.Z...
VERBOSE: Non-local install, extracting with '-s %[^/]*/%/u/zopen/usr/local/zopen/less/less-heads.v667.20241028_123530.zos/%'
After this operation, 0.85 MB of additional disk space will be used.
Do you want to continue? [y/n]
y
VERBOSE: Check for existing directory for version 'less/less-heads.v667.20241028_123530.zos'
VERBOSE: Importing public key...
***ERROR: Importing public key failed. Verification aborted.

Best, Mike

[mgrossmann]

Trying to import a public key by hand:

gpg --import scriptpubkey.MYUSER.83886723.asc
gpg: can't mmap pool of 32768 bytes: EDC5128I No such device. - using malloc
gpg: Please note that you don't have secure memory on this system
gpg: key 6EBA60492F343463: public key "zosopentoolsmain <[email protected]>" imported
gpg: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg-agent': probably not installed
gpg: failed to start gpg-agent '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg-agent': Configuration error
gpg: can't connect to the gpg-agent: Configuration error
gpg: Total number processed: 1
gpg:               imported: 1 

Where is the path /data/zopen... was derived from?

[IgorTodorovskiIBM]

I'm not sure why it's unable to find gpg-agent on some systems, but a temporary solution is to launch the gpg-agent manually.

gpg-agent --daemon

[IgorTodorovskiIBM]

On one system I am getting this:

 gpgconf --check-programs
gpgconf: error running '/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/kbx/keyboxd': probably not installed

gpgconf: error running '/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/scd/scdaemon': probably not installed
gpg:OpenPGP:/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/bin/gpg:1:1:
gpgsm:S/MIME:/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/bin/gpgsm:1:1:
keyboxd:Public Keys:/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/kbx/keyboxd:0:0:
gpg-agent:Private Keys:/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/bin/gpg-agent:1:1:
scdaemon:Smartcards:/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/scd/scdaemon:0:0:
dirmngr:Network:/home/itodoro/zopen/usr/local/zopen/gnupg/gnupg-2.4.3/bigpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/pinentry': probably not installed
n/dirmngr:1:1:
pinentry:Passphrase Entry:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/pinentry:0:0:

Which is ok

But on another system, I am getting this:

gpgconf --check-programs
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg': probably not installed
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpgsm': probably not installed
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/keyboxd': probably not installed
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg-agent': probably not installed
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/scdaemon': probably not installed
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/dirmngr': probably not installed
gpgconf: error running '/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/pinentry': probably not installed
gpg:OpenPGP:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg:0:0:
gpgsm:S/MIME:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpgsm:0:0:
keyboxd:Public Keys:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/keyboxd:0:0:
gpg-agent:Private Keys:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg-agent:0:0:
scdaemon:Smartcards:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/scdaemon:0:0:
dirmngr:Network:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/dirmngr:0:0:
pinentry:Passphrase Entry:/jenkins/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/pinentry:0:0:

[mgrossmann]

HI..

as written in my last comment, the path is wrong:

MIKEG1@prod:~$ gpgconf --check-programs
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg': probably not installed
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpgsm': probably not installed
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/keyboxd': probably not installed
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg-agent': probably not installed
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/scdaemon': probably not installed
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/dirmngr': probably not installed
gpgconf: error running '/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/pinentry': probably not installed
gpg:OpenPGP:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg:0:0:
gpgsm:S/MIME:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpgsm:0:0:
keyboxd:Public Keys:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/keyboxd:0:0:
gpg-agent:Private Keys:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/gpg-agent:0:0:
scdaemon:Smartcards:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/libexec/scdaemon:0:0:
dirmngr:Network:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/dirmngr:0:0:
pinentry:Passphrase Entry:/data/zopen/usr/local/zopen/gnupg/gnupg-2.4.4/bin/pinentry:0:0:

ZOT isn't installed to /data/zopen ... This path do not exist on our system.

Best, Mike

[HarithaIBM]

Hi Mike, @mgrossmann , Am trying to reproduce this PATH issue for the gpg programs, but am unable to reproduce it. Igor was able to reproduce it once. We are still working on this. I will update the progress here. Thank you.

[mgrossmann]

any news here?