unknown public key 72A321BAC245F175 One or more PGP signatures could not be verified!
Means you need to import the GPG key into your keyring. Eg, search for it on keyservers and verify the fingerprint with the owner of the file.
Git Clone URL: | https://aur.archlinux.org/php-pear.git (read-only, click to copy) |
---|---|
Package Base: | php-pear |
Description: | PHP Extension and Application Repository |
Upstream URL: | https://pear.php.net/package/pearweb_phars/ |
Licenses: | PHP |
Submitter: | Pierre |
Maintainer: | amish |
Last Packager: | amish |
Votes: | 42 |
Popularity: | 0.000000 |
First Submitted: | 2016-01-03 12:32 (UTC) |
Last Updated: | 2024-12-01 14:17 (UTC) |
unknown public key 72A321BAC245F175 One or more PGP signatures could not be verified!
Means you need to import the GPG key into your keyring. Eg, search for it on keyservers and verify the fingerprint with the owner of the file.
Hello,
==> Making package: php-pear 1:1.10.12-2 (Wed Mar 20 09:04:44 2019)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Downloading install-pear-nozlib-1.10.12.phar... ... -> Downloading install-pear-nozlib-1.10.12.phar.sig... ...
==> Validating source files with sha256sums...
install-pear-nozlib-1.10.12.phar ... Passed
install-pear-nozlib-1.10.12.phar.sig ... Skipped
==> Verifying source file signatures with gpg...
install-pear-nozlib-1.10.12.phar ... FAILED (unknown public key 72A321BAC245F175)
==> ERROR: One or more PGP signatures could not be verified!
==> ERROR: Makepkg was unable to build php-pear.
Same again
Verion 1:1.10.12-1 fails to build. Incorrect SHASUM of "install-pear-nozlib.phar"?
Erstelle php-pear... ==> Erstelle Paket: php-pear 1:1.10.12-1 (Do 14 Feb 2019 13:34:01 CET) ==> Prüfe Laufzeit-Abhängigkeiten... ==> Prüfe Buildtime-Abhängigkeiten... ==> Empfange Quellen... -> install-pear-nozlib.phar gefunden -> install-pear-nozlib.phar.sig gefunden ==> Überprüfe source Dateien mit sha256sums... install-pear-nozlib.phar ... FEHLGESCHLAGEN install-pear-nozlib.phar.sig ... Übersprungen ==> FEHLER: Eine oder mehrere Dateien überstanden nicht die Gültigkeits-Prüfung!
Good news, I just got confirmation that the AUR package did not fetch the tainted PEAR installer. See https://mobile.twitter.com/pear/status/1088484966898585601
according to the wiki this package should provide pecl as well, it doesn't though.
Cloning php-pear build files... Failed to prepare transaction: target not found: php-pear
Pinned Comments