Problem installing ncurses

mikail · 21 January 2018 13:34

I'm getting the following issue:

==> Making package: ncurses5-compat-libs 6.0+20170902-1 (Sun 21 Jan 12:08:54 GMT 2018)
==> Checking runtime dependencies...
==> Checking buildtime dependencies...
==> Retrieving sources...
-> Downloading ncurses-6.0-20170902.tgz...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 3244k 100 3244k 0 0 3244k 0 0:00:01 --:--:-- 0:00:01 3666k
-> Downloading ncurses-6.0-20170902.tgz.asc...
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 267 100 267 0 0 267 0 0:00:01 --:--:-- 0:00:01 1435
==> Validating source files with md5sums...
ncurses-6.0-20170902.tgz ... Passed
ncurses-6.0-20170902.tgz.asc ... Skipped
==> Verifying source file signatures with gpg...
ncurses-6.0-20170902.tgz ... FAILED (unknown public key 702353E0F7E48EDB)
==> ERROR: One or more PGP signatures could not be verified!

adomas · 18 February 2018 18:34

You are installing from AUR right? It seems that you don't have the mentioned key in your system. Try running:

gpg --recv-keys 702353E0F7E48EDB

and try again. On AUR page of this package are more detailed comments about this issue:

https://aur.archlinux.org/packages/ncurses5-compat-libs/

mikail · 21 January 2018 12:20

Yes I am installing from AUR.

I did read the wiki pages and I am a bit dubious about adding this key to my key ring. First issue is that when I searched for this key on the MIT key server it doesn't exist.

Is there any risk in accepting this key?

Lolix · 21 January 2018 13:33

Is the same key used by the official Arch package

validpgpkeys=('C52048C0C0748FEE227D47A2702353E0F7E48EDB') # Thomas Dickey

If you don't want to add keys is possible to skip them

and this error of unknown public key has been discussed to death on the forum and on internet

(moved from #technical-issues-and-assistance to #technical-issues-and-assistance:aur as this is an issue with an AUR package)

jonathon · 21 January 2018 21:58

If you don't trust the key, you shouldn't trust the key or any software it signs. Don't use the software and instead install only packages from the repos.

This is part-and-parcel of using the AUR. Please read up on what the AUR is and how it works:

https://wiki.archlinux.org/index.php/AUR

system · 21 April 2018 21:58

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.