[Slackbuilds-users] GPG key issue

J. Milgram milgram at cgpp.com
Wed Oct 22 14:46:01 UTC 2025


Hello,

Forgive me, this may be more of a gpg question, but it's relevant.

I was just upgrading a SlackBuild (signal-desktop, if it matters) and 
/usr/sbin/sboupgrade (sbotools 3.8.1) tells me:

The public key for GPG verification is missing.
Searching by keyid 0368EF579C7BA3B6...

(1)     SlackBuilds.org Development Team <slackbuilds-devel at slackbuilds.org>
           1024 bit DSA key 9C7BA3B6, created: 2007-01-27
Download and add this key? [n]

Huh? - I already have this  key  on my public keyring. So  I respond "n" 
and it tells me:

The contents of CHECKSUMS.md5 have been altered. Please run sbocheck.

... and exits with a "4" (failed md5sum verify, per the man page.)

Never saw this before during many upgrades.

So I ran sbocheck and a short way in it stops and gives me the same 
message about the
public key missing. I respond "n" and it proceeds and produces a long 
list of things that
need to be upgraded. Including sbotools which is now at 4.0. But I want 
to make sure things
make sense with the key before I proceed.

I figure for something like SlackBuilds I shouldn't ignore GPG key 
issues. I do have
that public key (1024D/9C7BA3B6) on my keyring. It has always been found 
before.
gpg --with-fingerprint --list-keys shows it with the same key ID, same 
fingerprint and email
address as the one at https://www.slackbuilds.org/GPG-KEY. Fingerprint is:

D307 6BC3 E783 EE74 7F09  B8B7 0368 EF57 9C7B A3B6

So why is it telling me that it  can't find the key? Can I write this 
off as some sort of gpg
(or gpg-user) oddity? Or has something about the key changed? Should I let
sboupgrade download and add the key again? Might upgrading sbotools 
straighten
everything out? I guess I'd have to do it manually, but that's OK.

Just realized that I'm running gpg 1, though gpg 2 is also installed 
(it's a Slack 15.0  system) -
could that be the issue? Do I need to reconfigure sbotools somehow to 
use gpg2?

Sorry for the rather inconcise question...

thanks!

Judah


-- 
=====
milgram at cgpp.com
301-257-7069

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x6E4882672D90BBD4.asc
Type: application/pgp-keys
Size: 2440 bytes
Desc: OpenPGP public key
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20251022/b5d9c957/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 665 bytes
Desc: OpenPGP digital signature
URL: <http://lists.slackbuilds.org/pipermail/slackbuilds-users/attachments/20251022/b5d9c957/attachment-0001.asc>


More information about the SlackBuilds-users mailing list