projg2 / gemato Goto Github PK

Gentoo Manifest Tool — a stand-alone utility to verify & update Manifests

License: BSD 2-Clause "Simplified" License

Python 99.66% Shell 0.34%

gemato's Introduction

gemato -- Gentoo Manifest Tool

Author:	Michał Górny
License:	2-clause BSD license

Introduction

gemato provides a reference implementation of the full-tree Manifest checks as specified in GLEP 74 [1]. Originally focused on verifying the integrity and authenticity of the Gentoo ebuild repository, the tool can be used as a generic checksumming tool for any directory trees.

Usage

Verification

The basic purpose of gemato is to verify a directory tree against Manifest files. In order to do that, run the gemato verify tool against the requested directory:

gemato verify /var/db/repos/gentoo

The tool will automatically locate the top-level Manifest (if any) and check the specified directory recursively. If a subdirectory of the Manifest tree is specified, only the specified leaf is checked.

Creating new Manifest tree

Creating a new Manifest tree can be accomplished using the gemato create command against the top directory of the new Manifest tree:

gemato create -p ebuild /var/db/repos/gentoo

Note that for the create command you always need to specify either a profile (via -p) or at least a hash set (via -H).

Updating existing Manifests

The gemato update command is provided to update an existing Manifest tree:

gemato update -p ebuild /var/db/repos/gentoo

Alike create, update also requires specifying a profile (-p) or a hash set (-H). The command locates the appropriate top-level Manifest and updates the specified directory recursively. If a subdirectory of the Manifest tree is specified, the entries for the specified leaf and respective Manifest files are updated.

Utility commands

gemato provides a few other utility commands that provide access to its crypto backend. These are:

gemato hash -H <hashes> [<path>...]: Print hashes of the specified files in Manifest-like format.
gemato openpgp-verify [-K <key>] [<path>...]: Check OpenPGP cleartext signatures embedded in the specified files.
gemato openpgp-verify-detached [-K <key>] <sig-file> <data-file>: Verify the specified data file against a detached OpenPGP signature.

Requirements

gemato is written in Python and compatible with implementations of Python 3.9+. gemato is currently tested against CPython 3.9 through 3.11 and PyPy3. gemato core depends only on standard Python library modules.

Additionally, OpenPGP requires system install of GnuPG 2.2+ and requests Python module. Tests require pytest, and responses for mocking.

References and footnotes

[1]	GLEP 74: Full-tree verification using Manifest files (https://www.gentoo.org/glep/glep-0074.html)

gemato's People

Contributors

Stargazers

Watchers

Forkers

robbat2 zmedico minabarret fepitre pombredanne antarus12345 thesamesam

gemato's Issues

Implement stdin support for openpgp-verify-detached

We need stdin support for verify-sig.eclass.

Enable debugging through environment variable

From time to time user are complaining that they cannot synchronize repository using emerge --sync and that even emerge-webrsync don't work. We tell them to patch openpgp.py like

--- old/openpgp.py	2019-12-12 20:38:19.401168253 +0100
+++ new/openpgp.py	2019-12-12 20:38:05.286041621 +0100
@@ -196,6 +196,13 @@
 
         with open(os.path.join(self._home, 'dirmngr.conf'), 'w') as f:
             f.write('''# autogenerated by gemato
+# enable logging
+verbose
+debug 4096
+debug-level 4096
+debug-all
+log-file /tmp/gemato-dirmngr.log
+
 # honor user's http_proxy setting
 honor-http-proxy

Which will reveal problems like

2019-10-31 17:06:31 dirmngr[3940] listening on socket '/run/user/0/gnupg/d.by71bxxbxp5ryij99tihh51b/S.dirmngr'
2019-10-31 17:06:31 dirmngr[3941.0] permanently loaded certificates: 141
2019-10-31 17:06:31 dirmngr[3941.0]     runtime cached certificates: 0
2019-10-31 17:06:31 dirmngr[3941.0]            trusted certificates: 141 (140,0,0,1)
2019-10-31 17:06:31 dirmngr[3941.0] failed to open cache dir file '/tmp/tmpvswjdoya/crls.d/DIR.txt': No such file or directory
2019-10-31 17:06:31 dirmngr[3941.0] creating directory '/tmp/tmpvswjdoya/crls.d'
2019-10-31 17:06:31 dirmngr[3941.0] new cache dir file '/tmp/tmpvswjdoya/crls.d/DIR.txt' created
2019-10-31 17:06:31 dirmngr[3941.6] handler for fd 6 started
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> # Home: /tmp/tmpvswjdoya
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> # Config: /tmp/tmpvswjdoya/dirmngr.conf
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> OK Dirmngr 2.2.17 at your service
2019-10-31 17:06:31 dirmngr[3941.6] connection from process 3938 (0:0)
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 <- GETINFO version
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> D 2.2.17
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER --clear hkps://keys.gentoo.org
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> S KEYSERVER hkps://keys.gentoo.org
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:31 dirmngr[3941.6] DBG: chan_6 <- KS_GET -- 0xDCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D 0xD99EAC7379A850BCE47DA5F29E6438C817072058 0x13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 0xEF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: libdns initialized
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: getsrv(_pgpkey-https._tcp.keys.gentoo.org) -> 0 records
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: resolve_dns_name(keys.gentoo.org): Success
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: resolve_dns_addr(): Success
2019-10-31 17:06:31 dirmngr[3941.6] resolve_dns_addr for 'keys.gentoo.org': '[2001:470:ea4a:1:230:48ff:fef8:9fdc]'
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: resolve_dns_addr(): Success
2019-10-31 17:06:31 dirmngr[3941.6] resolve_dns_addr for 'keys.gentoo.org': '[2001:470:1f06:a91::2]'
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: resolve_dns_addr(): Success
2019-10-31 17:06:31 dirmngr[3941.6] resolve_dns_addr for 'keys.gentoo.org': '208.116.51.2'
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: resolve_dns_addr(): Success
2019-10-31 17:06:31 dirmngr[3941.6] resolve_dns_addr for 'keys.gentoo.org': '140.211.166.190'
2019-10-31 17:06:31 dirmngr[3941.6] number of system provided CAs: 140
2019-10-31 17:06:31 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:31 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:31 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:31 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f0400dcd0 for fd 8 created
2019-10-31 17:06:32 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:32 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:32 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:32 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:32 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:32 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:32 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:32 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:32 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:32 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:32 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:32 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:32 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:32 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:32 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:32 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:32 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f040e1fc0 for fd 8 created
2019-10-31 17:06:32 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:32 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:32 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:32 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:32 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:32 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:32 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:32 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:32 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:32 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:32 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:32 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:32 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:32 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:32 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:32 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:32 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f041d49b0 for fd 8 created
2019-10-31 17:06:32 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:32 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:32 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:32 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:32 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:32 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:32 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:32 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:32 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:32 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:32 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:32 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:32 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:32 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:32 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:32 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:32 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:32 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:32 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04077370 for fd 8 created
2019-10-31 17:06:33 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:33 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:33 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:33 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:33 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:33 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:33 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:33 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:33 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:33 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:33 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:33 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:33 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:33 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:33 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:33 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:33 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:33 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:33 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:33 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:33 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:33 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:33 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:33 dirmngr[3941.6] command 'KS_GET' failed: General error <Unspecified source>
2019-10-31 17:06:33 dirmngr[3941.6] DBG: chan_6 -> ERR 1 General error <Unspecified source>
2019-10-31 17:06:33 dirmngr[3941.6] DBG: chan_6 <- BYE
2019-10-31 17:06:33 dirmngr[3941.6] DBG: chan_6 -> OK closing connection
2019-10-31 17:06:33 dirmngr[3941.6] handler for fd 6 terminated
2019-10-31 17:06:39 dirmngr[3941.6] handler for fd 6 started
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> # Home: /tmp/tmpvswjdoya
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> # Config: /tmp/tmpvswjdoya/dirmngr.conf
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> OK Dirmngr 2.2.17 at your service
2019-10-31 17:06:39 dirmngr[3941.6] connection from process 3951 (0:0)
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 <- GETINFO version
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> D 2.2.17
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER --clear hkps://keys.gentoo.org
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> S KEYSERVER hkps://keys.gentoo.org
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:39 dirmngr[3941.6] DBG: chan_6 <- KS_GET -- 0xDCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D 0xD99EAC7379A850BCE47DA5F29E6438C817072058 0x13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 0xEF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
2019-10-31 17:06:39 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:39 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:39 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:39 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04004350 for fd 8 created
2019-10-31 17:06:39 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:39 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:39 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:39 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:39 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:39 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:39 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:39 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:39 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:39 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:39 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:39 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:39 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:39 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:39 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:39 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:39 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04079420 for fd 8 created
2019-10-31 17:06:39 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:39 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:39 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:39 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:39 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:39 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:39 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:39 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:39 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:39 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:39 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:39 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:39 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:39 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:39 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:39 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:39 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:39 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:40 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04076d30 for fd 8 created
2019-10-31 17:06:40 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:40 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:40 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:40 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:40 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:40 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:40 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:40 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:40 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:40 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:40 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:40 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:40 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:40 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:40 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:40 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:40 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04180100 for fd 8 created
2019-10-31 17:06:40 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:40 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:40 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:40 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:40 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:40 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:40 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:40 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:40 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:40 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:40 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:40 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:40 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:40 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:40 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:40 dirmngr[3941.6] command 'KS_GET' failed: General error <Unspecified source>
2019-10-31 17:06:40 dirmngr[3941.6] DBG: chan_6 -> ERR 1 General error <Unspecified source>
2019-10-31 17:06:40 dirmngr[3941.6] DBG: chan_6 <- BYE
2019-10-31 17:06:40 dirmngr[3941.6] DBG: chan_6 -> OK closing connection
2019-10-31 17:06:40 dirmngr[3941.6] handler for fd 6 terminated
2019-10-31 17:06:53 dirmngr[3941.6] handler for fd 6 started
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> # Home: /tmp/tmpvswjdoya
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> # Config: /tmp/tmpvswjdoya/dirmngr.conf
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> OK Dirmngr 2.2.17 at your service
2019-10-31 17:06:53 dirmngr[3941.6] connection from process 3973 (0:0)
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 <- GETINFO version
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> D 2.2.17
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER --clear hkps://keys.gentoo.org
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> S KEYSERVER hkps://keys.gentoo.org
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:06:53 dirmngr[3941.6] DBG: chan_6 <- KS_GET -- 0xDCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D 0xD99EAC7379A850BCE47DA5F29E6438C817072058 0x13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 0xEF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
2019-10-31 17:06:53 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:53 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:53 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:53 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04316c90 for fd 8 created
2019-10-31 17:06:54 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:54 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:54 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:54 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:54 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:54 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:54 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:54 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:54 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:54 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:54 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:54 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:54 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:54 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:54 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:54 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:54 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f040e1180 for fd 8 created
2019-10-31 17:06:54 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:54 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:54 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:54 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:54 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:54 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:54 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:54 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:54 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:54 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:54 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:54 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:54 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:54 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:54 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:54 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:54 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:54 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:54 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f040adc90 for fd 8 created
2019-10-31 17:06:55 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:55 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:55 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:55 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:55 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:55 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:55 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:55 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:55 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:55 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:55 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:55 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:55 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:55 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:06:55 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:06:55 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:06:55 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f042cebf0 for fd 8 created
2019-10-31 17:06:55 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:06:55 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:06:55 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:06:55 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:06:55 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:55 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:06:55 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:55 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:06:55 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:06:55 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:06:55 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:06:55 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:06:55 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:06:55 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:06:55 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:06:55 dirmngr[3941.6] command 'KS_GET' failed: General error <Unspecified source>
2019-10-31 17:06:55 dirmngr[3941.6] DBG: chan_6 -> ERR 1 General error <Unspecified source>
2019-10-31 17:06:55 dirmngr[3941.6] DBG: chan_6 <- BYE
2019-10-31 17:06:55 dirmngr[3941.6] DBG: chan_6 -> OK closing connection
2019-10-31 17:06:55 dirmngr[3941.6] handler for fd 6 terminated
2019-10-31 17:07:18 dirmngr[3941.6] handler for fd 6 started
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> # Home: /tmp/tmpvswjdoya
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> # Config: /tmp/tmpvswjdoya/dirmngr.conf
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> OK Dirmngr 2.2.17 at your service
2019-10-31 17:07:18 dirmngr[3941.6] connection from process 4013 (0:0)
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 <- GETINFO version
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> D 2.2.17
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER --clear hkps://keys.gentoo.org
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 <- KEYSERVER
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> S KEYSERVER hkps://keys.gentoo.org
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 -> OK
2019-10-31 17:07:18 dirmngr[3941.6] DBG: chan_6 <- KS_GET -- 0xDCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D 0xD99EAC7379A850BCE47DA5F29E6438C817072058 0x13EBBDBEDE7A12775DFDB1BABB572E0E2D182910 0xEF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
2019-10-31 17:07:18 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:07:18 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:07:18 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:07:18 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f042cc110 for fd 8 created
2019-10-31 17:07:18 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:07:18 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:07:18 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:07:18 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:07:18 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:07:18 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:07:18 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:07:18 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:18 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:07:18 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:18 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:07:18 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:18 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:07:18 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:07:18 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:07:18 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:07:18 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:07:18 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:18 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:18 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:07:18 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:18 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:07:18 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:07:18 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:07:18 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:07:18 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:07:19 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f042ce0c0 for fd 8 created
2019-10-31 17:07:19 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:07:19 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:07:19 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:07:19 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:07:19 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:19 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:07:19 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:19 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:07:19 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:07:19 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:07:19 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:19 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:07:19 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:07:19 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:07:19 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:07:19 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:07:19 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f04262100 for fd 8 created
2019-10-31 17:07:19 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:07:19 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:07:19 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:07:19 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:07:19 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:19 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:07:19 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:19 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:07:19 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:07:19 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:07:19 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:19 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:07:19 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:19 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:07:19 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:07:19 dirmngr[3941.6] DBG: Using TLS library: GNUTLS 3.6.10
2019-10-31 17:07:19 dirmngr[3941.6] DBG: http.c:connect_server: trying name='140.211.166.190' port=443
2019-10-31 17:07:19 dirmngr[3941.6] DBG: dns: resolve_dns_name(140.211.166.190): Success
2019-10-31 17:07:19 dirmngr[3941.6] DBG: http.c:1899:socket_new: object 0x00007f9f042d09e0 for fd 8 created
2019-10-31 17:07:20 dirmngr[3941.6] TLS verification of peer failed: status=0x0202
2019-10-31 17:07:20 dirmngr[3941.6] TLS verification of peer failed: The certificate is NOT trusted. The certificate chain uses not yet valid certificate. 
2019-10-31 17:07:20 dirmngr[3941.6] DBG: expected hostname: keys.gentoo.org
2019-10-31 17:07:20 dirmngr[3941.6] DBG: BEGIN Certificate 'server[0]':
2019-10-31 17:07:20 dirmngr[3941.6] DBG:      serial: 031856E215168C36BEDA72DDA642254F063E
2019-10-31 17:07:20 dirmngr[3941.6] DBG:   notBefore: 2019-12-05 05:33:33
2019-10-31 17:07:20 dirmngr[3941.6] DBG:    notAfter: 2020-03-04 05:33:33
2019-10-31 17:07:20 dirmngr[3941.6] DBG:      issuer: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:20 dirmngr[3941.6] DBG:     subject: CN=keys.gentoo.org
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name15:keys.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name31:keys.geodns-americas.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name27:keys.geodns-asia.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-europe.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name29:keys.geodns-global.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name22:keys.geodns.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name26:kookaburra.keys.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name22:martin.keys.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name22:motmot.keys.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:         aka: (8:dns-name22:trogan.keys.gentoo.org)
2019-10-31 17:07:20 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:20 dirmngr[3941.6] DBG:   SHA1 fingerprint: 3B9ABB692BC0C883CDCC7B12ADC64083915DC0AD
2019-10-31 17:07:20 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:20 dirmngr[3941.6] DBG: BEGIN Certificate 'server[1]':
2019-10-31 17:07:20 dirmngr[3941.6] DBG:      serial: 0A0141420000015385736A0B85ECA708
2019-10-31 17:07:20 dirmngr[3941.6] DBG:   notBefore: 2016-03-17 16:40:46
2019-10-31 17:07:20 dirmngr[3941.6] DBG:    notAfter: 2021-03-17 16:40:46
2019-10-31 17:07:20 dirmngr[3941.6] DBG:      issuer: CN=DST Root CA X3,O=Digital Signature Trust Co.
2019-10-31 17:07:20 dirmngr[3941.6] DBG:     subject: CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US
2019-10-31 17:07:20 dirmngr[3941.6] DBG:   hash algo: 1.2.840.113549.1.1.11
2019-10-31 17:07:20 dirmngr[3941.6] DBG:   SHA1 fingerprint: E6A3B45B062D509B3382282D196EFE97D5956CCB
2019-10-31 17:07:20 dirmngr[3941.6] DBG: END Certificate
2019-10-31 17:07:20 dirmngr[3941.6] TLS connection authentication failed: General error
2019-10-31 17:07:20 dirmngr[3941.6] error connecting to 'https://140.211.166.190:443': General error
2019-10-31 17:07:20 dirmngr[3941.6] command 'KS_GET' failed: General error <Unspecified source>
2019-10-31 17:07:20 dirmngr[3941.6] DBG: chan_6 -> ERR 1 General error <Unspecified source>
2019-10-31 17:07:20 dirmngr[3941.6] DBG: chan_6 <- BYE
2019-10-31 17:07:20 dirmngr[3941.6] DBG: chan_6 -> OK closing connection
2019-10-31 17:07:20 dirmngr[3941.6] handler for fd 6 terminated

Because patching is a pain (and you have to explain user to patch correct file from currently used Python version) I am wondering if we could extend gemato to enable debugging like that when custom environment variable is set. I am thinking about something like

# GEMATO_DEBUG=yes emerge --sync

in which case debugging will be enabled and log file will be written to /tmp.

Running in debug mode will only preserve last HOME

While trying to debug a WKD issue I noticed that dirmngr.log did only contain debug information showing key fetch from keyserver -- nothing about WKD at all.

I logged OpenPGPEnvironment::_init__ calls and noticed that each gemato run will create and use multiple HOMEs but only the last one will be preserved.

Changing debug_file value to a fixed value in mentioned constructor allowed me to get dirmngr logs showing WKD operations.

Add more tests to cover forged PGP keys

Since I'm looking to replace the underlying PGP implementation, it is important that we verify that more security-related conditions are handled properly. In particular, this includes:

verifying that forged self-signatures on keys are detected correctly,
verifying that WKD update can't plant another, untrusted key.

cannot refresh wkd behing a proxy

gpg is failing to locate keys behing proxy. For example, in case of Gentoo, it fails to locate keys with mail: [email protected], [email protected] and [email protected].

Maybe it's worth it to add a fallback implementation than gpg? Maybe using requests on a keyserver?

Related gpg: https://dev.gnupg.org/T3065#111023
Related gentoo work: gentoo/portage#607

HOW to change default key retrieving method?

Based on https://www.gentoo.org/news/2019/07/03/sks-key-poisoning.html
I know the gemato uses WKD by default to check Gentoo repository.
However, I have tried gpg --locate-keys [email protected] and sadly found it now work due to network error. As to mention, ping also give no response, I wonder if the site is not working?

In the other hand, gpg --search-keys [email protected] works well.
So I want to change the WKD way to this, how could I do it?

gemato verify - "No public key" issue

root@host1 /tmp # gemato verify /usr/portage
ERROR:root:OpenPGP verification failed:
gpg: Signature made Thu 01 Feb 2018 01:08:17 PM UTC
gpg: using RSA key E1D6ABB63BFCFB4BA02FDF1CEC590EEAC9189250
gpg: Can't check signature: No public key

Could anyone please help?

Implement fallback to IPv4 if IPv6 times out

We get a fair amount of users who find emerge --sync hangs when refreshing keys. Often, it's the case that their network has broken IPv6 connectivity.

We should fall back to IPv4 if IPv6 times out, given how common this is.

Add timeout option

Use PGPy to handle keys & signatures

https://github.com/SecurityInnovation/PGPy

The number of bugs popping up due to GnuPG usage is too large. While its design is good for end-user program, it's not very nice for use as a library. Let's switch to something pure-ish Python-ish.

Further debugging support

Following on from #7, I think we still need to do a bit more for debugging.

In https://forums.gentoo.org/viewtopic-p-8804931.html, I've been trying to help a user debug their stuck sync, but the current --debug output gives:

$ emerge --sync --debug
myopts {'--debug': True, '--regex-search-auto': 'y'}
[DEBUG] Using selector: EpollSelector
>>> Syncing repository 'gentoo' into '/var/db/repos/gentoo'...
[DEBUG] Using selector: EpollSelector
 * Using keys from /usr/share/openpgp-keys/gentoo-release.asc
 * Refreshing keys via WKD ...[DEBUG] list_keys(): keyid: A13D0EF1914E7A72
[DEBUG] list_keys(): fingerprint: EF9538C9E8E64311A52CDEDFA13D0EF1914E7A72
[DEBUG] list_keys(): UID: [[email protected]](mailto:[email protected])
[DEBUG] list_keys(): keyid: DB6B8C1F96D8BF6D
[DEBUG] list_keys(): fingerprint: DCD05B71EAB94199527F44ACDB6B8C1F96D8BF6D
[DEBUG] list_keys(): UID: [[email protected]](mailto:[email protected])
[DEBUG] list_keys(): ignoring UID without mail: b'Gentoo Portage Snapshot Signing Key (Automated Signing Key)'
[DEBUG] list_keys(): keyid: 9E6438C817072058
[DEBUG] list_keys(): fingerprint: D99EAC7379A850BCE47DA5F29E6438C817072058
[DEBUG] list_keys(): UID: [[email protected]](mailto:[email protected])
[DEBUG] list_keys(): keyid: BB572E0E2D182910
[DEBUG] list_keys(): fingerprint: 13EBBDBEDE7A12775DFDB1BABB572E0E2D182910
[DEBUG] list_keys(): UID: [[email protected]](mailto:[email protected])
[DEBUG] Starting new HTTPS connection (1): gentoo.org:443 # <-- hangs here

I think we really need some way to easily get that dirmngr output as mentioned in #7 (comment).

Interestingly, in the past, we used to do some of this unconditionally but it was removed in 2f8b327 but the commit message isn't clear as to why.

portage/emerge proxies settings

In a closed environment with only proxy allowed, there is issue for retrieving keys as all the gpg processes run by portage/emerge thanks to gemato does not have proxy variables in their env. After few tests, I was thinking of a way for providing custom env (proxy variables) here https://github.com/mgorny/gemato/blob/20350ab1c1f7536ffed08ba2d96020e54a3e4ef9/gemato/openpgp.py#L177, for example self._env. This would be used for updating current override env in https://github.com/mgorny/gemato/blob/20350ab1c1f7536ffed08ba2d96020e54a3e4ef9/gemato/openpgp.py#L386. Then, we could specify proxy variables by feeding openpgp_env._env (not necesasry directly but with some sanitizing set function) at https://github.com/gentoo/portage/blob/602d2cd487bb48788e9654a7b7fd5a3be34150d9/lib/portage/sync/syncbase.py#L254 by getting self.options['emerge_config'].running_config.settings.get('http_proxy') and also https_proxy, RSYNC_PROXY. Any comment/idea on such approach? Thank you.

Related issue: https://bugs.gentoo.org/691434

gemato fails to find top level Manifest

after emerge --sync or by calling gemato directly (gemato verify /usr/portage/) I get:
ERROR:root:Top-level Manifest not found in /usr/portage/
I skimmed though find_top_level.py but didn't get the logic how it is supposed to work. My suspicion is, it is because /usr/portage/ is a overlayfs:

$ mount
overlay on /usr/portage type overlay (rw,relatime,lowerdir=./portree_ro,upperdir=./portree_tmpfs/upper,workdir=./portree_tmpfs/work)

and therefor
stat /usr/portage and stat /usr/portage/Manifest return a different device

Warn about symbolic links when reporting checksum failures

Technically, symbolic links can be used to process arbitrary files on the filesystem, including files with potentially sensitive content. While this isn't a big deal per se, the user reporting the problem could be tricked into revealing the sensitive content. We could at least warn when the realpath() of a file we're reporting the failure for doesn't match the apparent path.

get_file_metadata() doesn't handle opened=False for regular files

The code in get_file_metadata() currently assumes that opened = False only if case of non-regular files. Given this can only happen on ENXIO or EOPNOTSUPP, it's unlikely that this will realistically happen but we should also explicitly cover the possibility that it will be False for a regular file (perhaps FUSE could trigger it?).

Support for verifying detached signatures

For the purpose of verify-sig.eclass, we need to replace direct gpg calls with something that can control multisig mode, see #23.

Support for multiple signatures

cover multisig scenarios in tests (notably, good + bad, good + unknown)
add an option to control if we want "1 out of n" or "n out of n" verification

gemato fails on systems which have no ipv6 support

This happens on one of my systems that has no ipv6 support during emerge --sync:

sent 31.81K bytes  received 6.82M bytes  1.25M bytes/sec
total size is 224.29M  speedup is 32.71
INFO:root:Refreshing keys from keyserver...
Traceback (most recent call last):
  File "/usr/lib/python-exec/python3.5/gemato", line 11, in <module>
    load_entry_point('gemato==10.3', 'console_scripts', 'gemato')()
  File "/usr/lib64/python3.5/site-packages/gemato/cli.py", line 403, in setuptools_main
    sys.exit(main(sys.argv))
  File "/usr/lib64/python3.5/site-packages/gemato/cli.py", line 398, in main
    return vals.func(vals, argp)
  File "/usr/lib64/python3.5/site-packages/gemato/cli.py", line 62, in do_verify
    env.refresh_keys()
  File "/usr/lib64/python3.5/site-packages/gemato/openpgp.py", line 219, in refresh_keys
    raise RuntimeError('Unable to refresh keys: {}'.format(err.decode('utf8')))
RuntimeError: Unable to refresh keys: gpg: refreshing 4 keys from hkps://hkps.pool.sks-keyservers.net
gpg: keyserver refresh failed: Address family not supported by protocol
 
q: Updating ebuild cache in /var/portage ...
q: Finished 37364 entries in 0.362387 seconds
 
Action: sync for repo: gentoo, returned code = 1

And indeed, running gpg --refresh-keys --keyserver hkps://ipv6.pool.sks-keyservers.net manually yields to the same error message.
[Arfrever] suggested to ask for custom keyserver support in gemato. Is this a reasonable request?

OpenPGPSystemEnvironment needs to check trust of keys

Right now the verification code for system environment does not account for key trust. This should be fixed so that signatures with untrusted keys are rejected.

Add wrap-gpg command

Add a command that creates gemato's GNUPGHOME and runs specified command in it.

hkps on port 80

Great step forward, but even better if you allowed the use of a conventional port for hkps://hkps.pool.sks-keyservers.net. 443 or even 80. Should be a simple change? Currently I am disabling it because I don't really like opening ports for things that are not even in /etc/services.

Print top-level Manifest location along with verification results

Right now it's possible to create a Manifest file in parent directory to override hashes from a sub-Manifest. This is generally not a big deal since ::gentoo Manifests are PGP-signed but it wouldn't harm to actually print which Manifest file is being used as top-level Manifest.

gemato needs to handle unknown hashes gracefully

To prepare for future hash changes, we need to handle unknown hash names gracefully, i.e. ignore them (warn?) and be happy if at least one hash is supported.

INFO:root:Verifying ....
Traceback (most recent call last):
  File "/usr/lib/python-exec/python3.11/gemato", line 33, in <module>
    sys.exit(load_entry_point('gemato==16.2', 'console_scripts', 'gemato')())
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/cli.py", line 639, in setuptools_main
    sys.exit(main(sys.argv))
             ^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/cli.py", line 629, in main
    return vals.cmd()
           ^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/cli.py", line 267, in __call__
    ret &= m.assert_directory_verifies(relpath, **self.kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/recursiveloader.py", line 694, in assert_directory_verifies
    ret = all(pool.imap_unordered(
          ^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/recursiveloader.py", line 159, in __call__
    ret &= self._verify_one_file(os.path.join(dirpath, f),
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/recursiveloader.py", line 118, in _verify_one_file
    ret, diff = verify_path(path, e,
                ^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/verify.py", line 200, in verify_path
    checksums = next(g)
                ^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/verify.py", line 115, in get_file_metadata
    hashes = list(manifest_hashes_to_hashlib(e_hashes))
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/site-packages/gemato/manifest.py", line 559, in manifest_hashes_to_hashlib
    yield MANIFEST_HASH_MAPPING[h]
          ~~~~~~~~~~~~~~~~~~~~~^^^
KeyError: 'FROBNICATE'

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.