#1092723 recv-keys doesn’t get the same key as gpg

#1092723#5
Date:
2025-01-10 21:29:58 UTC
From:
To:
Dear Maintainers,

while testing gpg-from-sq I noticed that I get an incorrect behaviour
trying to retrieve a key from a keyserver and exporting it as
upstream/signing-key.asc.

I have a script that does something like :

rm ~/addkey.keyring
gpg --no-default-keyring --keyring ~/addkey.keyring --keyserver hkp://keyserver.ubuntu.com --recv-keys F1955ED9D1C2D10D80B31B3B14EE37CD15C53BDD
gpg --yes --no-default-keyring --keyring ~/addkey.keyring --export --export-options export-minimal,export-clean --armor --output debian/upstream/signing-key.asc


1. This breaks with gpg-from-sq which tells me
gpg:   error: Key resource "/home/coucouf/addkey.keyring" does not exist


2. If I touch ~/addkey.keyring first then the steps above will run without errorring out, but the resulting ascii key is incorrect.
Running uscan --download-current-version afterwards tells me:

uscan die: Failed to dearmor key(s) from debian/upstream/signing-key.asc at /usr/share/perl5/Devscripts/Uscan/Output.pm line 77.


You’ll find the keys exported by gpg and sq in attachment.
This examples comes from skrooge master or debian/2.33.0-1 tag. [1]


[1] https://salsa.debian.org/qt-kde-team/extras/skrooge


Thanks for your work on the sequoia stack.
--
Aurélien

#1092723#10
Date:
2025-01-11 09:43:09 UTC
From:
To:
I tried to reproduce this on my sid system, and there gpg-sq didn't
manage to download the key at all:

capitol@tone3:/tmp$ rm addkey*
capitol@tone3:/tmp$ touch addkey2.keyring
capitol@tone3:/tmp$ LANG=C gpg --no-default-keyring --keyring
/tmp/addkey.keyring --keyserver hkp://keyserver.ubuntu.com --recv-keys
F1955ED9D1C2D10D80B31B3B14EE37CD15C53BDD
gpg: keybox '/tmp/addkey.keyring' created
gpg: WARNING: server 'dirmngr' is older than us (2.2.45 < 2.2.46)
gpg: Note: Outdated servers may lack important security fixes.
gpg: Note: Use the command "gpgconf --kill all" to restart them.
gpg: key 14EE37CD15C53BDD: public key "St�hane MANKOWSKI
<stephane@mankowski.fr>" imported
gpg: Total number processed: 1
gpg:               imported: 1
capitol@tone3:/tmp$ LANG=C gpg-sq --no-default-keyring --keyring
/tmp/addkey2.keyring --keyserver hkp://keyserver.ubuntu.com
--recv-keys F1955ED9D1C2D10D80B31B3B14EE37CD15C53BDD
gpg: key 14EE37CD15C53BDD: "Stéphane MANKOWSKI
<stephane@mankowski.fr>" not changed
gpg: Total number processed: 0
gpg:              unchanged: 1
capitol@tone3:/tmp$ ls -la addkey*
.rw-rw-r-- capitol capitol 688 B Sat Jan 11 10:42:12 2025  addkey.keyring
.rw------- capitol capitol  32 B Sat Jan 11 10:42:12 2025  addkey.keyring~
.rw-rw-r-- capitol capitol   0 B Sat Jan 11 10:42:01 2025  addkey2.keyring

Still looks like a bug to me.

//Alex