Package Details: php-box 2.7.5-1

Git Clone URL: https://aur.archlinux.org/php-box.git (read-only)
Package Base: php-box
Description: An application for building and managing Phars
Upstream URL: https://github.com/box-project/box2
Licenses: MIT
Submitter: jojosch
Maintainer: jojosch
Last Packager: jojosch
Votes: 35
Popularity: 1.074709
First Submitted: 2013-07-29 14:12
Last Updated: 2016-12-13 08:11

Pinned Comments

jojosch commented on 2016-12-12 11:57

If makepkg fails with a message similar to "FAILED (unknown public key 293D771241515FE8)" or "One or more PGP signatures could not be verified!":

Please import the GPG Key of the developer of php-box with the fingerprint listed on https://github.com/box-project/box2#gpg-signature.

gpg --keyserver hkp://pgp.mit.edu --recv-keys 32E4B74757B1D65234FC389F293D771241515FE8

Also note: https://wiki.archlinux.org/index.php/Makepkg#Signature_checking

Latest Comments

pgoetz commented on 2017-04-08 19:34

This appears to be a known bug:

https://bbs.archlinux.org/viewtopic.php?id=220996

pgoetz commented on 2017-04-08 18:53

@jojosch Thanks for that tip. Unforunately, I can't get even this to work:

pgoetz@www:php-box$ gpg --keyserver hkp://pgp.mit.edu --recv-keys 32E4B74757B1D65234FC389F293D771241515FE8
gpg: keyserver receive failed: Server indicated a failure

jojosch commented on 2017-04-05 14:38

@pgoetz thanks for the note. The instructions on the php-box repository were removed with commit https://github.com/box-project/box2/commit/6640e38a4d9c8809e4db9174d2e6ba52092a2292.

I've updated the pinned comment on this aur package with the "old" instructions.

pgoetz commented on 2017-04-05 14:23

"Please import the GPG Key of the developer of php-box by following the instructions on https://github.com/box-project/box2#gpg-signature."

Unfortunately there are no instructions here for importing the GPG key.

pgoetz commented on 2017-04-05 13:51

I flagged the package as out of date due to the PGP signature issue preventing it from building.

==> Verifying source file signatures with gpg...
box-2.7.5.phar ... FAILED (unknown public key 293D771241515FE8)
==> ERROR: One or more PGP signatures could not be verified!

piryguiry commented on 2016-12-25 23:38

Primary key fingerprint: 32E4 B747 57B1 D652 34FC 389F 293D 7712 4151 5FE8

jojosch commented on 2016-12-12 11:57

If makepkg fails with a message similar to "FAILED (unknown public key 293D771241515FE8)" or "One or more PGP signatures could not be verified!":

Please import the GPG Key of the developer of php-box with the fingerprint listed on https://github.com/box-project/box2#gpg-signature.

gpg --keyserver hkp://pgp.mit.edu --recv-keys 32E4B74757B1D65234FC389F293D771241515FE8

Also note: https://wiki.archlinux.org/index.php/Makepkg#Signature_checking

pgoetz commented on 2016-12-07 14:51

When trying to make this package, I get the following error message:

==> Verifying source file signatures with gpg...
box-2.7.4.phar ... FAILED (unknown public key 293D771241515FE8)
==> ERROR: One or more PGP signatures could not be verified!

prolific commented on 2016-12-07 11:39

@jojosch thanks a lot....by manually verifying i found out that my trust db was corrupted so i recreated it and then php-box got installed successfully...thanks again

jojosch commented on 2016-12-07 08:56

@prolific yaourt should create the build directory (default /tmp/yaourt-tmp-$USER/aur-php-box) with all the package contents. From there you can run the gpg --verify command.

(if there is no folder under /tmp check the TMPDIR variable in /etc/yaourtrc)

All comments