Package Details: ssl-mgr 5.4.0-1

Git Clone URL: https://aur.archlinux.org/ssl-mgr.git (read-only, click to copy)
Package Base: ssl-mgr
Description: Manage (re)new certificates and handle DANE TLSA key rollover
Upstream URL: https://github.com/gene-git/ssl-mgr
Keywords: certificates dane letsencrypt rollover
Licenses: MIT
Submitter: GeneArch
Maintainer: GeneArch
Last Packager: GeneArch
Votes: 2
Popularity: 0.004908
First Submitted: 2024-03-29 23:49 (UTC)
Last Updated: 2025-01-10 10:29 (UTC)

Pinned Comments

GeneArch commented on 2025-01-03 10:33 (UTC)

Note on getting the git signing public key. Any of the following:

1) Get fresh copy of the package (on this page Package Actions Download Snapshot) Unpack tar file and the key will be in keys/pgp:

gpg --import < keys/pgp/*.asc

2) Available on github (same account as the package source): https://github.com/gene-git/blog/tree/master/git-keys

3) From authors website : https://www.sapience.com/tech

4) via WKD curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

Latest Comments

GeneArch commented on 2025-01-03 10:33 (UTC)

Note on getting the git signing public key. Any of the following:

1) Get fresh copy of the package (on this page Package Actions Download Snapshot) Unpack tar file and the key will be in keys/pgp:

gpg --import < keys/pgp/*.asc

2) Available on github (same account as the package source): https://github.com/gene-git/blog/tree/master/git-keys

3) From authors website : https://www.sapience.com/tech

4) via WKD curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

GeneArch commented on 2025-01-01 21:33 (UTC) (edited on 2025-01-01 21:33 (UTC) by GeneArch)

awesome

simona commented on 2025-01-01 21:12 (UTC)

solved with
curl $(gpg-wks-client --print-wkd-url arch@sapience.com) | gpg --import

GeneArch commented on 2025-01-01 21:07 (UTC)

I assume you edited the PKGBUILD to use the source line that verifies the source (since its commented out by default).

So in same directory you edited the PKGBUILD is the keys directory.

GeneArch commented on 2025-01-01 21:04 (UTC)

The AUR package has the keys. When you get the AUR package itself it comes with PKGBUILD and keys/pgp/xxx.asc

It sounds like you might be using a tool to fetch and build the package. The package itself is a downloadable file you can get in link at top right under "Package Actions" labelled:

'Download snapshot'

Also see the comment in another package:

https://aur.archlinux.org/packages/wg_tool#comment-1004777

which goes over downloading directly from author's website or importing from Web Key Directory.

It sounds like the package fetch/build tool tried and failed to get the key. But its simple enough to get manually.

Let me know if you get it working. Its definitely good to have the package verify the source.

simona commented on 2025-01-01 20:57 (UTC)

inside https://github.com/gene-git/ssl-mgr? where?

GeneArch commented on 2025-01-01 20:22 (UTC)

Thanks - yes the key is not available in pgp keyservers as they are now considered insecure and should be avoided.

Instead the key is available as part of the package now in the directory pgp/keys

Please try by hand as package build user: gpg --import pgp/keys/*.asc

thanks

simona commented on 2025-01-01 20:08 (UTC)

:: PGP keys need importing:
-> 7CCA1BA66669F3273DB52678E5B81343AB9809E1, required by: ssl-mgr kea_config process-mem lockmgr python-pynotify wg_tool
:: Importing keys with gpg...
gpg: ricezione dal keyserver fallita: Dati assenti