signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid

[EusebioMorell]

Hi,

I started getting this error on pacman -Syu, and couldn't update the MSYS2 system because of it:

$ pacman -Syu
error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is invalid
:: Synchronizing package databases...
 mingw32 is up to date
 mingw64 is up to date
 msys is up to date
error: database 'mingw32' is not valid (invalid or corrupted database (PGP signature))

I have tried the following:

rm -rf /etc/pacman.d/gnupg
pacman-key --init
pacman-key --populate msys2
pacman-key --refresh-keys

But commands above didn't fix the issue. The output of the commands was:

$ pacman-key --init
gpg: /etc/pacman.d/gnupg/trustdb.gpg: trustdb created
gpg: no ultimately trusted keys found
gpg: Generating pacman keyring master key...
gpg: skipping control `%no-protection' ()
...+++++
...+++++
gpg: key 8AD72C6F marked as ultimately trusted
gpg: Done
==> Updating trust database...
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u

$ pacman-key --populate msys2
==> Appending keys from msys2.gpg...
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
==> Locally signing trusted keys in keyring...
  -> Locally signing key D55E7A6D7CE9BA1587C0ACACF40D263ECA25678A...
  -> Locally signing key 123D4D51A1793859C2BE916BBBE514E53E0D0813...
  -> Locally signing key B91BCF3303284BF90CC043CA9F418C233E652008...
  -> Locally signing key 9DD0D4217D75A33B896159E6DA7EF2ABAEEA755C...
==> Importing owner trust values...
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: setting ownertrust to 4
gpg: inserting ownertrust of 4
==> Updating trust database...
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   4  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   4  signed:   3  trust: 0-, 0q, 0n, 4m, 0f, 0u
gpg: depth: 2  valid:   3  signed:   0  trust: 3-, 0q, 0n, 0m, 0f, 0u

$ pacman-key --refresh-keys
gpg: refreshing 8 keys from hkp://pool.sks-keyservers.net
gpg: requesting key 8AD72C6F from hkp server pool.sks-keyservers.net
gpg: requesting key CA25678A from hkp server pool.sks-keyservers.net
gpg: requesting key AEEA755C from hkp server pool.sks-keyservers.net
gpg: requesting key 3E0D0813 from hkp server pool.sks-keyservers.net
gpg: requesting key 3E652008 from hkp server pool.sks-keyservers.net
gpg: requesting key A47D45A1 from hkp server pool.sks-keyservers.net
gpg: requesting key F93FC717 from hkp server pool.sks-keyservers.net
gpg: requesting key 4CA56930 from hkp server pool.sks-keyservers.net
gpgkeys: key 15915B66A4201868D60545DAD10970618AD72C6F not found on keyserver
gpg: DBG: armor-keys-failed (KEY 0x15915B66A4201868D60545DAD10970618AD72C6F BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x15915B66A4201868D60545DAD10970618AD72C6F FAILED 6
) ->6
gpg: key CA25678A: "Alexey Pavlov (Alexpux) <alexey.pawlow@gmail.com>" 4 new signatures
gpg: key AEEA755C: "Martell Malone (martell) <martellmalone@gmail.com>" 3 new signatures
gpg: key 3E0D0813: "Ray Donnelly (MSYS2 Developer - master key) <mingw.android@gmail.com>" 2 new signatures
gpg: key 3E652008: "Ignacio Casal Quinteiro <icquinteiro@gmail.com>" 2 new signatures
gpg: key A47D45A1: "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" 1 new signature
gpg: key F93FC717: "Martell Malone (martell) <me@martellmalone.com>" not changed
gpg: key 4CA56930: "Ray Donnelly (MSYS2 Developer) <mingw.android@gmail.com>" 2 new signatures
gpg: Total number processed: 7
gpg:              unchanged: 1
gpg:         new signatures: 14
gpg: keyserver communications error: key not found
gpg: keyserver communications error: bad public key
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   4  trust: 0-, 0q, 0n, 0m, 0f, 1u
gpg: depth: 1  valid:   4  signed:   3  trust: 0-, 0q, 0n, 4m, 0f, 0u
gpg: depth: 2  valid:   3  signed:   0  trust: 3-, 0q, 0n, 0m, 0f, 0u
gpg: keyserver refresh failed: bad public key
==> ERROR: A specified local key could not be updated from a keyserver.

[Alexpux]

Try run under shell:

rm -f /var/lib/pacman/sync/*
pacman -Syu

[EusebioMorell]

It somehow got fixed in today's update

Thanks, anyway

[veganaize]

I'm getting similar today. After running Alexpux's commands above my output:

$ pacman -Syyu
error: GPGME error: No data
error: GPGME error: No data
error: GPGME error: No data
:: Synchronizing package databases...
mingw32 639.0 B 0.00B/s 00:00 [#####################] 100%
mingw32.sig 639.0 B 0.00B/s 00:00 [#####################] 100%
error: GPGME error: No data
error: failed to update mingw32 (invalid or corrupted database (PGP signature))
mingw64 639.0 B 0.00B/s 00:00 [#####################] 100%
mingw64.sig 639.0 B 0.00B/s 00:00 [#####################] 100%
error: GPGME error: No data
error: failed to update mingw64 (invalid or corrupted database (PGP signature))
error: failed retrieving file 'msys.db' from www2.futureware.at : error setting certificate verify locations:
CAfile: /usr/ssl/certs/ca-bundle.crt
CApath: none
msys 639.0 B 0.00B/s 00:00 [#####################] 100%
msys.sig 639.0 B 0.00B/s 00:00 [#####################] 100%
error: GPGME error: No data
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize any databases
error: failed to init transaction (invalid or corrupted database (PGP signature) )

...and...

$ pacman-key --refresh-keys
gpg: refreshing 8 keys from hkp://pool.sks-keyservers.net
gpg: requesting key 35C923C1 from hkp server pool.sks-keyservers.net
gpg: requesting key CA25678A from hkp server pool.sks-keyservers.net
gpg: requesting key AEEA755C from hkp server pool.sks-keyservers.net
gpg: requesting key 3E0D0813 from hkp server pool.sks-keyservers.net
gpg: requesting key 3E652008 from hkp server pool.sks-keyservers.net
gpg: requesting key A47D45A1 from hkp server pool.sks-keyservers.net
gpg: requesting key F93FC717 from hkp server pool.sks-keyservers.net
gpg: requesting key 4CA56930 from hkp server pool.sks-keyservers.net
gpgkeys: key 2266F792D9DB2565264401FF9960039335C923C1 not found on keyserver
gpg: DBG: armor-keys-failed (KEY 0x2266F792D9DB2565264401FF9960039335C923C1 BEGIN
) ->0
gpg: DBG: armor-keys-failed (KEY 0x2266F792D9DB2565264401FF9960039335C923C1 FAILED 6
) ->6
gpg: key CA25678A: "Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com" not changed
gpg: key AEEA755C: "Martell Malone (martell) martellmalone@gmail.com" not changed
gpg: key 3E0D0813: "Ray Donnelly (MSYS2 Developer - master key) mingw.android@gmail.com" not changed
gpg: key 3E652008: "Ignacio Casal Quinteiro icquinteiro@gmail.com" not changed
gpg: key A47D45A1: "Alexey Pavlov (Alexpux) alexpux@gmail.com" not changed
gpg: key F93FC717: "Martell Malone (martell) me@martellmalone.com" not changed
gpg: key 4CA56930: "Ray Donnelly (MSYS2 Developer) mingw.android@gmail.com" not changed
gpg: Total number processed: 7
gpg: unchanged: 7
gpg: keyserver communications error: key not found
gpg: keyserver communications error: bad public key
gpg: keyserver refresh failed: bad public key
==> ERROR: A specified local key could not be updated from a keyserver.

[veganaize]

I noticed that Sourceforge.net is currently down. I don't know if that could be related.

[Alexpux]

Yes this s related to sf.net down.
Try update later

[stonedreamforest]

me too

error: GPGME error: No data
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is unknown trust
error: GPGME error: No data
:: Synchronizing package databases...
 mingw32                  360.5 KiB  15.5K/s 00:23 [#####################] 100%
 mingw32.sig               96.0   B  0.00B/s 00:00 [#####################] 100%
error: mingw32: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is unknown trust
error: failed to update mingw32 (invalid or corrupted database (PGP signature))
 mingw64                  360.8 KiB  26.3K/s 00:14 [#####################] 100%
 mingw64.sig               96.0   B  0.00B/s 00:00 [#####################] 100%
error: mingw64: signature from "Alexey Pavlov (Alexpux) <alexpux@gmail.com>" is unknown trust
error: failed to update mingw64 (invalid or corrupted database (PGP signature))
error: failed to update msys (no servers configured for repository)
error: failed to synchronize any databases
error: failed to init transaction (no servers configured for repository)

[WMcKibbin]

$ pacman -Syyu
error: mingw32: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
error: mingw64: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
:: Synchronizing package databases...
mingw32 360.9 KiB 1008K/s 00:00 [#########################################################################] 100%
mingw32.sig 96.0 B 0.00B/s 00:00 [#########################################################################] 100%
error: mingw32: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
error: failed to update mingw32 (invalid or corrupted database (PGP signature))
mingw64 360.7 KiB 927K/s 00:00 [#########################################################################] 100%
mingw64.sig 96.0 B 93.8K/s 00:00 [#########################################################################] 100%
error: mingw64: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is invalid
error: failed to update mingw64 (invalid or corrupted database (PGP signature))
msys 155.9 KiB 709K/s 00:00 [#########################################################################] 100%
msys.sig 96.0 B 0.00B/s 00:00 [#########################################################################] 100%
error: database 'mingw32' is not valid (invalid or corrupted database (PGP signature))
error: database 'mingw64' is not valid (invalid or corrupted database (PGP signature))

Ran into this issue today when I tried to update and install some packages. Tried removing the gnupg and sync files and refreshing everything but its no good. Any input you can offer to get my setup running like new?

[moyente]

I have been google'ing in the last few days hoping to find a solution to this same exact issue to no avail...
Is there a known working solution?
By the way, this is in regard to the 64 bit version install.

I started msys2_shell.cmd and run the two commands per @Alexpux and gotten no luck either

rm -f /var/lib/pacman/sync/*
pacman -Syu
:: Synchronizing package databases...
mingw32 370.1 KiB 3.80M/s 00:00 [#####################] 100%
mingw32.sig 96.0 B 1920B/s 00:00 [#####################] 100%
error: mingw32: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is unknown trust
error: failed to update mingw32 (invalid or corrupted database (PGP signature))
mingw64 369.9 KiB 6.57M/s 00:00 [#####################] 100%
mingw64.sig 96.0 B 15.6K/s 00:00 [#####################] 100%
error: mingw64: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is unknown trust
error: failed to update mingw64 (invalid or corrupted database (PGP signature))
msys 158.9 KiB 5.17M/s 00:00 [#####################] 100%
msys.sig 96.0 B 0.00B/s 00:00 [#####################] 100%
error: msys: signature from "Alexey Pavlov (Alexpux) alexpux@gmail.com" is unknown trust
error: failed to update msys (invalid or corrupted database (PGP signature))
error: failed to synchronize any databases
error: failed to init transaction (invalid or corrupted database (PGP signature))

Thanks

[WMcKibbin]

I believe to fix this I had to meddle with GNUPG, or get off my work network. I'm really sorry I didn't save the steps, didn't write them down.

[coolreader18]

I fixed this by running pacman-key --lsign-key A47D45A1.

[bigov]

Привет! Снова проблемы с подписями при обновлении:

ошибка: msys: подпись от "Alexey Pavlov (Alexpux) alexpux@gmail.com" некорректна
ошибка: не удалось обновить msys (неверная или поврежденная база данных(PGP-подпись))
ошибка: failed to synchronize all databases
...
rm -rf /etc/pacman.d/gnupg
pacman-key --init
pacman-key --populate msys2
pacman-key --refresh-keys
...
gpg: key F40D263ECA25678A: 4 подписи не проверены за отсутствием ключа
gpg: ключ F40D263ECA25678A: "Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com" 4 новых подписей
...
как бороться?

[coolreader18]

@bigov pacman-key --lsign-key F40D263ECA25678A?

[bigov]

pacman-key --lsign-key F40D263ECA25678A?

did not help :/

[bigov]

...
gpg: key F40D263ECA25678A: 1 подпись не проверена за отсутствием ключа
gpg: ключ F40D263ECA25678A: "Alexey Pavlov (Alexpux) alexey.pawlow@gmail.com" не изменен
gpg: Всего обработано: 7
gpg: неизмененных: 7

WS-36 MSYS ~
$ pacman-key --lsign-key F40D263ECA25678A
-> Локальное подписывание ключа 'F40D263ECA25678A'...
==> Обновление таблицы доверия...
gpg: проверка таблицы доверия не нужна

WS-36 MSYS ~
$ pacman -Syyu
ошибка: msys: подпись от "Alexey Pavlov (Alexpux) alexpux@gmail.com" некорректна
:: Обновление баз данных пакетов...
mingw32 452,7 KiB 617K/s 00:01 [#####################] 100%
mingw32.sig 119,0 B 0,00B/s 00:00 [#####################] 100%
mingw64 454,9 KiB 940K/s 00:00 [#####################] 100%
mingw64.sig 119,0 B 0,00B/s 00:00 [#####################] 100%
msys 190,6 KiB 815K/s 00:00 [#####################] 100%
msys.sig 119,0 B 0,00B/s 00:00 [#####################] 100%
ошибка: msys: подпись от "Alexey Pavlov (Alexpux) alexpux@gmail.com" некорректна
ошибка: не удалось обновить msys (неверная или поврежденная база данных(PGP-подпись))
ошибка: failed to synchronize all databases