Re: cpanp install, gpg: Can't check signature: No public key

Replies are listed 'Best First'.
Re^2: cpanp install, gpg: Can't check signature: No public key by locked_user sundialsvc4 (Abbot) on Sep 27, 2012 at 17:05 UTC
It seems that this is something to do with cryptographic signature verification (integrity checking) of the package content, not a test-failure. I know that there is an `o conf` setting for this in ordinary CPAN, which can turn this feature on or off, but I can’t speak to this particular scenario. I would like to know how it shakes out ...
Re^2: cpanp install, gpg: Can't check signature: No public key by QM (Parson) on Sep 28, 2012 at 09:12 UTC
In `cpanp` (and I presume in `cpan`): `CPAN Terminal> s conf signature 0` [download] -QM -- Quantum Mechanics: The dreams stuff is made of	[reply] [d/l] [select]
Re^3: cpanp install, gpg: Can't check signature: No public key by Anonymous Monk on Jul 30, 2023 at 17:37 UTC
# For cpan, use 'o conf' Note: That's a small letter 'o' before 'conf' o conf signature 0 o conf commit # You will get a warning about signature not being a valid config item, but just ignore it	[reply]
Re^4: cpanp install, gpg: Can't check signature: No public key by mikegold10 (Acolyte) on Jul 30, 2023 at 17:47 UTC
Sorry for the garbled anonymous post, above. For cpan, use `o conf` Note: That's a small letter o before conf `o conf signature 0 o conf commit` [download] You will get a warning about `signature` not being a valid config item, but just ignore that.	[reply] [d/l] [select]
Re^3: cpanp install, gpg: Can't check signature: No public key by locked_user sundialsvc4 (Abbot) on Sep 28, 2012 at 12:21 UTC
Okay, and if a GPG signature is missing ... can someone please document here how one properly retrieves and installs it? (Does someone, like, have to read that hex key-id and enter it by hand into a separate command to pull the PK down from a keyserver? How gauche ... For all those of us who don’t know the answer, what is the answer to this one?)
Re^4: cpanp install, gpg: Can't check signature: No public key by Anonymous Monk on Sep 28, 2012 at 12:38 UTC
If you're using the cli gpg --import keyfile gpg --keyserver pgp.mit.edu --recv-keys eyeid I'm sure there are ways to autoimport keys, but I don't know how	[reply]