GPG keys - Server indicated a failure

[Thibaut]

Hello everyone,

I'm trying to create my own debian image for my USB ARMORY, in order to use the g_multi module to have SSH access and Mass Storage.

My issue is the following :

When I try to load the keys with GPG, I get the following line:

gpg --keyserver hkp://keys.gnupg.net --recv-keys 38DBBDC86092693E

gpg: failed to receive from keyserver: Server indicated a failure

Another problem:
I managed to recover keys on Ubuntu servers with the command but when I want to compile with the "make ..." I get:

gpg: signed data is assumed to be in "linux-5.10.82.tar"
gpg: Signed on Fri Nov 26 2021 10:40:38 AM CET
gpg: with RSA key 647F28654894E3BD457199BE38DBBDC86092693E
gpg: Good signature from "Greg Kroah-Hartman <gre...@linuxfoundation.org>" [unknown]
gpg: alias "Greg Kroah-Hartman <gre...@kernel.org>" [unknown]
gpg: alias "Greg Kroah-Hartman (Linux kernel stable release signing key) <gr...@kroah.com>" [unknown]
gpg: Warning: this key is not certified with a trusted signature.
gpg: There is no indication that the signature belongs to its owner.
Master key fingerprint: 647F 2865 4894 E3BD 4571 99BE 38DB BDC8 6092 693E

The end of the compilation is done well but an error message appears afterwards due to a key problem.

Someone would have any idea ?

Thank you in advance,

Thibaut

[Andrej Rosano]

Hi Thibaut,

On 2022-02-28 Mon, Thibaut wrote:
> Hello everyone,
>
> I'm trying to create my own debian image for my USB ARMORY, in order to use
> the g_multi module to have SSH access and Mass Storage.
>
> My issue is the following :
>
> When I try to load the keys with GPG, I get the following line:
>
>
>

> *gpg --keyserver hkp://keys.gnupg.net --recv-keys 38DBBDC86092693Egpg:
> failed to receive from keyserver: Server indicated a failure*

The key servers are not always reliable. If you have issues you can first download
the key and then import in your keychain manually. We also had issues in our
Makefile:

https://github.com/f-secure-foundry/usbarmory-debian-base_image/commit/6ceb6eafe031535350a44809bd42e559bee1

>
> Another problem:
> I managed to recover keys on Ubuntu servers with the command but when I
> want to compile with the "make ..." I get:
>
>
>
>
>
>
>
>
>

> *gpg: signed data is assumed to be in "linux-5.10.82.tar"gpg: Signed on Fri

> Nov 26 2021 10:40:38 AM CETgpg: with RSA key

> 647F28654894E3BD457199BE38DBBDC86092693Egpg: Good signature from "Greg

> Kroah-Hartman <gre...@linuxfoundation.org>" [unknown]gpg: alias "Greg
> Kroah-Hartman <gre...@kernel.org>" [unknown]gpg: alias "Greg Kroah-Hartman
> (Linux kernel stable release signing key) <gr...@kroah.com>" [unknown]gpg:

> Warning: this key is not certified with a trusted signature.gpg: There is
> no indication that the signature belongs to its owner.Master key
> fingerprint: 647F 2865 4894 E3BD 4571 99BE 38DB BDC8 6092 693E*

>
> The end of the compilation is done well but an error message appears
> afterwards due to a key problem.
>
> Someone would have any idea ?

Before using the key, you should mark it as trusted. Check `gpg --edit-key ...`.

Cheers
Andrej

>
> Thank you in advance,
>
> Thibaut
>

> --
> You received this message because you are subscribed to the Google Groups "USB armory" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to usbarmory+...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/usbarmory/9da6b6de-4700-497f-aec7-6647093fcfacn%40googlegroups.com.


--
Andrej Rosano | Hardware Security | F-Secure
www.f-secure.com - foundry.f-secure.com
BDE1 62F4 7020 1588 8046 AE02 EA17 8C32 AB56 54CE

[Thibaut]

Hi,

Thank you for your answer

So I tried to download the .asc key with wget, then import it manually but the problem persists: there is still no public key

When will the keys be available?
Do I have to create my own image to get Mass Storage and SSH access? If not, how can I do?

Thank you in advance,

Thibaut

[Andrej Rosano]

Hi Thibaut,

On 2022-03-09 Wed, Thibaut wrote:
> Hi,
>
> Thank you for your answer
> So I tried to download the .asc key with wget, then import it manually but
> the problem persists: there is still no public key

You can download the 38DBBDC86092693 key from:

https://usbarmory.github.io/keys/38DBBDC86092693E.asc

>
> When will the keys be available?
> Do I have to create my own image to get Mass Storage and SSH access? If
> not, how can I do?

You can use the default image and play with g_multi.ko module. For
example, on usbarmory:

dd if=/dev/zero of=/tmp/disk.img bs=1M count=32
modprobe g_multi file=/tmp/disk.img

You will see three USB devices (storage, ehternet and ACM) exposed on the host:

cdc_ether 3-7.2:2.0 usb0: register 'cdc_ether' at usb-0000:00:14.0-7.2, CDC Ethernet Device, fa:a2:7d:b8:01:84
usb-storage 3-7.2:2.4: USB Mass Storage device detected
scsi host0: usb-storage 3-7.2:2.4
cdc_ether 3-7.2:2.0 enp0s20f0u7u2c2: renamed from usb0
cdc_acm 3-7.2:2.2: ttyACM0: USB ACM device
usbcore: registered new interface driver cdc_acm
cdc_acm: USB Abstract Control Model driver for USB modems and ISDN adapters
scsi 0:0:0:0: Direct-Access Linux File-Stor Gadget 0515 PQ: 0 ANSI: 2
sd 0:0:0:0: Power-on or device reset occurred
sd 0:0:0:0: [sda] 65536 512-byte logical blocks: (33.6 MB/32.0 MiB)
sd 0:0:0:0: [sda] Write Protect is off
sd 0:0:0:0: [sda] Mode Sense: 0f 00 00 00
sd 0:0:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA
sd 0:0:0:0: [sda] Attached SCSI disk
usb 3-6.4: reset low-speed USB device number 8 using xhci_hcd


Hope this can help.

> To view this discussion on the web visit https://groups.google.com/d/msgid/usbarmory/27f7ba41-a445-4a91-b027-55edceaff3b6n%40googlegroups.com.