GPG密钥新建但未包含用户ID

5

我新增了一个源

deb http://httpredir.debian.org/debian buster-backports main contrib

我希望你能翻译我的树莓派源列表文件。当我更新sudo apt以确认更改时,我收到以下错误:

sudo apt update
Hit:1 http://raspbian.raspberrypi.org/raspbian buster InRelease
Get:2 http://httpredir.debian.org/debian buster-backports InRelease [46.7 kB]
Get:3 http://archive.raspberrypi.org/debian buster InRelease [32.6 kB]
Err:2 http://httpredir.debian.org/debian buster-backports InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 04EE7237B7D453EC NO_PUBKEY 648ACFD622F3D138
Get:4 http://archive.raspberrypi.org/debian buster/main armhf Packages [330 kB]
Reading package lists... Done
W: GPG error: http://httpredir.debian.org/debian buster-backports InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 04EE7237B7D453EC NO_PUBKEY 648ACFD622F3D138
E: The repository 'http://httpredir.debian.org/debian buster-backports InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

我收到了以下指示:

gpg --recv-keys 04EE7237B7D453EC
gpg --recv-keys 648ACFD622F3D138
gpg --export 04EE7237B7D453EC | sudo apt-key add -
gpg --export 648ACFD622F3D138 | sudo apt-key add -

但是当我执行这个命令时:
gpg --recv-keys 04EE7237B7D453EC

我遇到了这个错误:
gpg: key E0B11894F66AEC98: new key but contains no user ID - skipped
gpg: Total number processed: 1
gpg:           w/o user IDs: 1

这个输出是否应该出现?我按照说明操作,但仍然遇到之前的错误,public key is not available 意味着我的密钥存在问题。

1个回答

5
我找到了答案:
包管理器需要PGP密钥来验证新仓库中的软件包集。 首先,您需要从密钥服务器(例如SKS)获取密钥。
$ gpg --recv-keys --keyserver ipv4.pool.sks-keyservers.net 04EE7237B7D453EC
gpg: key E0B11894F66AEC98: public key "Debian Archive Automatic Signing Key (9/stretch) <ftpmaster@debian.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1
$ gpg --recv-keys --keyserver ipv4.pool.sks-keyservers.net 648ACFD622F3D138
gpg: key DC30D7C23CBBABEE: public key "Debian Archive Automatic Signing Key (10/buster) <ftpmaster@debian.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1

然后将它们导入到您的本地APT密钥库中:

$ gpg --export 04EE7237B7D453EC | sudo apt-key add -
OK
$ gpg --export 648ACFD622F3D138 | sudo apt-key add -
OK

那么您的 apt update 应该可以正常工作。


2
你之前并不是没有使用密钥服务器,只是默认的密钥服务器会从密钥中剥离用户ID。这个答案解释了原因。 - Neil Mayhew
是的,在Debian中默认的密钥服务器似乎是keys.openpgp.org,但它已经无法与gnupg一起使用了。因此,应该更改默认密钥服务器。我刚刚为此报告了bug 1009311 - vinc17

网页内容由stack overflow 提供, 点击上面的
可以查看英文原文,
原文链接