Debian

為什麼找不到這個 Debian-ex-developer 公鑰?

  • February 26, 2017

我按照說明從 Debian、Ubuntu 或 Mint 安裝,使用命令行和 GnuPG製作Tails,基於 Debian、usb 棒。

所有步驟都在最後一行失敗的地方完成gpg: error reading key: public key not found,而預期輸出sig! 0x9C31503C6D866396 2015-02-03 Stefano Zacchiroli <zack@upsilon.cc>到命令gpg --keyid-format 0xlong --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F

masi@masi:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Debian
Description:    Debian GNU/Linux 8.7 (jessie)
Release:    8.7
Codename:   jessie

masi@masi:~$ wget https://tails.boum.org/tails-signing.key
--2017-02-26 08:47:14--  https://tails.boum.org/tails-signing.key
Resolving tails.boum.org (tails.boum.org)... 204.13.164.188
Connecting to tails.boum.org (tails.boum.org)|204.13.164.188|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 459593 (449K) [application/pgp-keys]
Saving to: ‘tails-signing.key’

tails-signing.key   100%[=====================>] 448.82K   351KB/s   in 1.3s   

2017-02-26 08:47:17 (351 KB/s) - ‘tails-signing.key’ saved [459593/459593]

masi@masi:~$ gpg --import < tails-signing.key
gpg: key 58ACD84F: public key "Tails developers (offline long-term identity key) <tails@boum.org>" imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
gpg: no ultimately trusted keys found

masi@masi:~$ su
Password: 

root@masi:/home/masi# apt-get install debian-keyring
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages were automatically installed and are no longer required:
 libx265-79 linux-image-4.6.0-0.bpo.1-amd64 linux-image-4.7.0-0.bpo.1-amd64
Use 'apt-get autoremove' to remove them.
The following NEW packages will be installed:
 debian-keyring
0 upgraded, 1 newly installed, 0 to remove and 0 not upgraded.
Need to get 52.4 MB of archives.
After this operation, 58.0 MB of additional disk space will be used.
Get:1 http://ftp.fi.debian.org/debian/ jessie/main debian-keyring all 2015.04.10 [52.4 MB]
Fetched 52.4 MB in 35s (1,458 kB/s)                                            
Selecting previously unselected package debian-keyring.
(Reading database ... 316032 files and directories currently installed.)
Preparing to unpack .../debian-keyring_2015.04.10_all.deb ...
Unpacking debian-keyring (2015.04.10) ...
Setting up debian-keyring (2015.04.10) ...
root@masi:/home/masi# gpg --keyring=/usr/share/keyrings/debian-keyring.gpg --export zack@upsilon.cc | gpg --import
gpg: key 6D866396: public key "Stefano Zacchiroli <zack@upsilon.cc>" imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
gpg: no ultimately trusted keys found

root@masi:/home/masi# gpg --keyid-format 0xlong --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F
gpg: error reading key: public key not found

作業系統:Debian 8.7

硬體:華碩 Zenbook UX303UB

您尚未導入您嘗試檢查簽名的 Tails 密鑰:

$ gpg --recv-key A490D0F4D311A4153E2BB7CADBB802B258ACD84F

$ gpg --check-sigs A490D0F4D311A4153E2BB7CADBB802B258ACD84F
pub   rsa4096 2015-01-18 [C] [expires: 2018-01-11]
     A490D0F4D311A4153E2BB7CADBB802B258ACD84F
uid           [ unknown] Tails developers (offline long-term identity key) <tails@boum.org>
sig!         9C31503C6D866396 2015-02-03  Stefano Zacchiroli <zack@upsilon.cc>
sig!3        DBB802B258ACD84F 2015-09-27  Tails developers (offline long-term identity key) <tails@boum.org>
sig!3        DBB802B258ACD84F 2016-08-30  Tails developers (offline long-term identity key) <tails@boum.org>
sig!3        DBB802B258ACD84F 2015-01-18  Tails developers (offline long-term identity key) <tails@boum.org>
uid           [ unknown] Tails developers <tails@boum.org>
sig!3        DBB802B258ACD84F 2015-09-27  Tails developers (offline long-term identity key) <tails@boum.org>
sig!3        DBB802B258ACD84F 2016-08-30  Tails developers (offline long-term identity key) <tails@boum.org>
sub   rsa4096 2015-01-18 [S] [expires: 2018-01-11]
sig!         DBB802B258ACD84F 2016-08-30  Tails developers (offline long-term identity key) <tails@bgpg: 9 good signatures
gpg: 1124 signatures not checked due to missing keys
oum.org>
sub   rsa4096 2015-01-18 [S] [expires: 2018-01-11]
sig!         DBB802B258ACD84F 2016-08-30  Tails developers (offline long-term identity key) <tails@boum.org>
sub   rsa4096 2016-08-30 [S] [expires: 2018-01-11]
sig!         DBB802B258ACD84F 2016-08-30  Tails developers (offline long-term identity key) <tails@boum.org>

好吧,您做到了,但是您是作為普通使用者進行的,同時嘗試以 root 身份檢查簽名。您現在有兩個密鑰環,一個在您的使用者帳戶中使用 Tails 密鑰,另一個在 root 帳戶中使用 Debian 開發人員的密鑰。

這是您應該使用sudo並且很少發現自己使用互動式 root shell 的原因之一。

引用自:https://unix.stackexchange.com/questions/347622