Arch Linux User Repository

From Jakub:

Older releases I've signed are with the older key (now expired), the newer with the newer key, both have correct fingerprints on that mirrors.html and both are uploaded to multiple key servers.

ftp://ftp.gnu.org/gnu/gcc/gcc-11.1.0/gcc-11.1.0.tar.gz.sig is signed with 6C35.

There are no separate 6C35 and D3A9 keys, that is a single key with D3A9 3CAD 751C 2AF4 F8C7 AD51 6C35 B993 09B5 FA62 fingerprint. http://keys.gnupg.net/pks/lookup?op=get&search=0x6C35B99309B5FA62 is the nwer one and http://keys.gnupg.net/pks/lookup?op=get&search=0xA328C3A2C3C45C06 is the older one.

It seems to have been a problem with my user keyring. Resolved.

https://aur.archlinux.org/packages/libgccjit/#comment-808549 suggests importing this key:

gpg --recv-keys 6C35B99309B5FA62

but frankly I don't understand why one do that, and why this signature should be trusted?

gpg: key 6C35B99309B5FA62: public key "Jakub Jelinek <jakub@redhat.com>" imported

Checked with Jakub to update their signature on GNU FTP mirrors page.

Anyway, after importing:

$ gpg --verify-files gcc-11.1.0.tar.gz.sig gcc-11.1.0.tar.gz
gpg: assuming signed data in 'gcc-11.1.0.tar.gz'
gpg: Signature made Tue 27 Apr 2021 01:39:54 PM +03
gpg:                using RSA key 6C35B99309B5FA62
gpg: BAD signature from "Jakub Jelinek <jakub@redhat.com>" [unknown]
gpg: no valid OpenPGP data found.
gpg: verify files failed: Unknown system error

Didn't work.

gpg: Signature made Tue 27 Apr 2021 01:39:54 PM +03
gpg:                using RSA key 6C35B99309B5FA62

It still fails the check even if I add this 6C35 key to validpgpkeys (desperate mode alert).

According to http://www.gnu.org/software/gcc/mirrors.html, there are more valid signing keys.

validpgpkeys=('B215C1633BCA0477615F1B35A5B3A004745C015A'
              'B3C42148A44E6983B3E4CC0793FA9B1AB75C61B8'
              '90AA470469D3965A87A5DCB494D03953902C9419'
              '80F98B2E0DAB6C8281BDF541A7C8C3B2F71EDF1C'
              '7F74F97C103468EE5D750B583AB00996FC26A641'
              '33C235A34C46AA3FFB293709A328C3A2C3C45C06'
              'D3A93CAD751C2AF4F8C7AD516C35B99309B5FA62')

should work.

==> Validating source files with md5sums...
    gcc-11.1.0.tar.gz ... Passed
    gcc-11.1.0.tar.gz.sig ... Skipped
==> Verifying source file signatures with gpg...
    gcc-11.1.0.tar.gz ... FAILED (unknown public key 6C35B99309B5FA62)
==> ERROR: One or more PGP signatures could not be verified!
warning: package cross-mips-elf-gcc failed to build, skipping

Is this intended as a bare-metal compiler? It seems incomplete for building binaries for openwrt... that's what I was hoping to use it for. Of course there are no headers included, and even if I work around that, I see that it's not able to link a "hello world" executable:

$ mips-elf-gcc -I/usr/include hello.c -o hello-mips
hello.c: In function 'main':
hello.c:6:5: warning: implicit declaration of function 'exit' [-Wimplicit-function-declaration]
     exit(42);
     ^
hello.c:6:5: warning: incompatible implicit declaration of built-in function 'exit'
hello.c:6:5: note: include '<stdlib.h>' or provide a declaration of 'exit'
/usr/lib/cross-mips-elf/lib/gcc/mips-elf/5.4.0/../../../../mips-elf/bin/ld: cannot find crti.o: No such file or directory
/usr/lib/cross-mips-elf/lib/gcc/mips-elf/5.4.0/../../../../mips-elf/bin/ld: cannot find crtbegin.o: No such file or directory
/usr/lib/cross-mips-elf/lib/gcc/mips-elf/5.4.0/../../../../mips-elf/bin/ld: cannot find -lgcc
/usr/lib/cross-mips-elf/lib/gcc/mips-elf/5.4.0/../../../../mips-elf/bin/ld: cannot find -lgcc
/usr/lib/cross-mips-elf/lib/gcc/mips-elf/5.4.0/../../../../mips-elf/bin/ld: cannot find crtend.o: No such file or directory
/usr/lib/cross-mips-elf/lib/gcc/mips-elf/5.4.0/../../../../mips-elf/bin/ld: cannot find crtn.o: No such file or directory
collect2: error: ld returned 1 exit status