Help needed to verify the f-droid app APK

23

Can you mention the keyserver

24 
 ```
    $ gpg --keyserver keyserver.ubuntu.com --recv-key 37D2C98789D8311948394E3E41E7044E1DBA2E89
    gpg: keyserver receive failed: Server indicated a failure
    ```

Others: pgp keyserver at DuckDuckGo

25

Recommended something @Licaon_Kter

Tried none of them really worked. Need to look into it keyserver has some issues i find fdroid really lacks the verification and security part that is not the case in other stores even in linux stores. In this Field fdroid need to look into. Easy and basic.

26

https://keys.openpgp.org/ p.e.

1 Like
27

I can confirm this works; I already had the key so it says “not changed”.

$ torify --isolate gpg --keyserver   keys.openpgp.org --recv-key 37D2C98789D8311948394E3E41E7044E1DBA2E89
gpg: key 41E7044E1DBA2E89: "F-Droid <admin@f-droid.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
28

$ gpg --keyserver keys.openpgp.org --recv-key 37D2C98789D8311948394E3E41E7044E1DBA2E89
gpg: keyserver receive failed: Server indicated a failure

29

It works, this is your fault.
Bad DNS server, firewalled bash… whatever

30

Can anyone lookintO it

31

As said above we can’t see into your network, so we can’t fix your network issue.

Works for me and several others.

All sorts of restrictions could be in place somewhere along the route, be it China Firewall, Russian censorship, etc.

Did you try via Tor also?

proxychains gpg --keyserver keyserver.ubuntu.com --recv-key 37D2C98789D8311948394E3E41E7044E1DBA2E89
32

Everything is working as it should be just i can’t import that key. But in the past i have imported that while fdroid was 1.13.

33

Does adding -vv to the gpg command helps debugging this?

34

$ gpg -vv --keyserver keyserver.ubuntu.com --recv-key 37D2C98789D8311948394E3E41E7044E1DBA2E89
gpg: keyserver receive failed: Server indicated a failure

Edit- There must me something wrong i just tried on a kvm base vm on my system with ubuntu 22.04 running i got same error really stange can you look int9

35

Same for Tor? eg. do this in a Tails VM

36

Okey i will try it today

37

I don’t have tails iso on hand so i use parrot os as a live os running from usb and key imported and verified successfully. Strange but i could not do it from install os even in kvm. Whats wrong.

38

So that was via clearnet or Tor?

If clearnet then it means that your base OS has issues with gpg setup

If Tor then it means that your intenet is somehow corrupting the download.

IMHO

39

I did not use proxy. And parrot os is tor by default or not i don’t know.

40

@Human

Maybe use something like Fedora or Debian instead of a riced out hax0r distro.

41
  1. Install [Termux] (https://f-droid.org/en/packages/com.termux/) and
    termux-setup-storage
  2. apt-get update && apt full-upgrade -y
  3. apt install gnupg
  4. apt install wget
  5. cd /sdcard/Download/
  6. wget FILE-LINK (or download F-Droid.apk and F-Droid.apk.asc from https://f-droid.org/)
  7. wget SIGNATURE-LINK (F-Droid.apk.asc)
  8. gpg --keyserver-options auto-key-retrieve --verify SIGNATURE-FILE.apk.asc

result:

/sdcard/Download $ gpg --keyserver-options auto-key-retrieve --verify F-Droid.apk.asc gpg: assuming signed data in ‘F-Droid.apk’
gpg: Signature made 2022-01-26 21:12:50 +0330 +0330
gpg: using RSA key 802A9799016112346E1FEFF47A029E54DD5DCE7A
gpg: key 41E7044E1DBA2E89: 1 duplicate signature removed
gpg: key 41E7044E1DBA2E89: public key “F-Droid admin@f-droid.org” imported
gpg: Total number processed: 1
gpg: imported: 1
gpg: Good signature from “F-Droid admin@f-droid.org” [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 37D2 C987 89D8 3119 4839 4E3E 41E7 044E 1DBA 2E89
Subkey fingerprint: 802A 9799 0161 1234 6E1F EFF4 7A02 9E54 DD5D CE7A
/sdcard/Download $

a reference:

42

I find it and done that i got a good signature and i tried on parrot os live boot same i got good signature. Don’t know what is wrong in my default system. I have tried with live booting elementary same issue i find. There must be some issue. In which side i don’t know.