GPG Public Key expired?

Seb seb at wilzba.ch
Fri May 22 11:56:57 UTC 2020


On Thursday, 21 May 2020 at 18:14:19 UTC, divi wrote:
> $ curl -fsS https://dlang.org/install.sh | bash -s dmd
> Downloading and unpacking 
> http://downloads.dlang.org/releases/2.x/2.092.0/dmd.2.092.0.linux.tar.xz
> ######################################################################## 100.0%
> gpg: checking the trustdb
> gpg: marginals needed: 3  completes needed: 1  trust model: pgp
> gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 
> 0f, 1u
> gpg: next trustdb check due at 2022-03-12
> gpg: Signature made Mon 11 May 2020 16:54:29 BST
> gpg:                using RSA key 
> 3AAF1A18E61F6FAA3B7193E4DB8C5218B9329CF8
> gpg: Can't check signature: No public key
> Invalid signature 
> http://downloads.dlang.org/releases/2.x/2.092.0/dmd.2.092.0.linux.tar.xz.sig

I think what's happening is that your local keyring is outdated. 
The install script doesn't automatically update the keyring (nor 
warns you about the keyring being outdated). Unfortunately a 
well-known bug/problem/limitation.

You probably ran the install script at some point in the past and 
it created ~/dlang/d-keyring.gpg.
The fix should be to run this:

$ ~/dlang/install.sh update

This will result in the script updating itself and the keyring.

(The install script from prior runs gets installed at 
~/dlang/install.sh)


More information about the Digitalmars-d mailing list