| Git Clone URL: | https://aur.archlinux.org/palemoon.git (read-only, click to copy) |
|---|---|
| Package Base: | palemoon |
| Description: | Open source web browser based on Firefox focusing on efficiency. |
| Upstream URL: | https://www.palemoon.org/ |
| Keywords: | browser goanna web |
| Licenses: | GPL, MPL, LGPL |
| Submitter: | artiom |
| Maintainer: | WorMzy |
| Last Packager: | WorMzy |
| Votes: | 141 |
| Popularity: | 0.016996 |
| First Submitted: | 2014-06-05 10:54 (UTC) |
| Last Updated: | 2024-05-11 23:49 (UTC) |
Good point, I'll update the pinned comment since we can't use signed commits any more.
Also, to clear up any confusion about the discrepancy in key IDs -- 7C9EDC0F13A4F15D is a subkey of 40481E7B8FCF9CEC. You need to import the primary key, which is trusted by makepkg due to it's inclusion in the validpgpkeys array.
Read pinned comment. (but it needs to be updated a bit)
This package is failing install with the following error
==> Verifying source file signatures with gpg...
palemoon-29.4.3.source.tar.xz ... FAILED (unknown public key 7C9EDC0F13A4F15D)
==> ERROR: One or more PGP signatures could not be verified!
error: failed to download sources for 'palemoon-29.4.3-1':
Thanks for the heads up, seems they've also fixed https for the downloads. \o/
It seems like the signatures have been uploaded on http://archive.palemoon.org/source/
Just for those compiling on Arch32: add LDFLAGS+="${LDFLAGS} -fuse-ld=bfd -Wl,--no-keep-memory" to build().
Yup, looks like they figured out that they'd packaged the wrong source. Muppets.
Sums of source need update, seems like the tarball was changed.
Upstream appear to have thrown all their toys out of the pram (again), seemingly over some XP-supporting fork, and have taken their git development private. They now only offer unsigned source archives, the first of which, despite being called "palemoon-29.4.1-source.tar.xz" seems to contain the sources for v29.5.0a1. Use at your own risk.
Great, so the merge requests have been accepted (without a valid reason). Anyway, I reuploaded gtk3 packages. I don't think GTK2 being EOL is valid reason.
Pinned Comments
WorMzy commented on 2021-03-02 16:19 (UTC) (edited on 2022-08-03 21:12 (UTC) by WorMzy)
The following key is used to sign release commits:
40481E7B8FCF9CEC
Import it into your keyring however you want.
https://wiki.archlinux.org/index.php/GnuPG#Import_a_public_key