fix: retry key receiving on port TCP/80 if using default keyserver
Metadata
Current evaluation
Merged in craft-archives#189 (daf89a2), adding a TCP/80 fallback for default HKP keyserver timeouts and removing obsolete apt-key-era work; fixes #165.
Resolution: closed resolved
Reason: PR #189 was merged as commit daf89a2 after approval and passing checks. Its TCP/80 retry resolves #165, and downstream testing with canonical/snapcraft#5670 confirmed the fix.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [x] Have you successfully run `make lint && make test`?
---
By default gpg uses the hkp protocol (over HTTP) on port TCP/11371. This port may be filtered in some environments and may not be accepted by proxies. When gpg timeout trying to connect to the default keyserver, retry with on port TCP/80. The default protocol is unchanged but must be explicitly set when setting a port.
Also fix AptGPGKeyInstallError doing unnecessary work since moving from apt-key to gpg.
Fixes #165
CRAFT-4560
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged in craft-archives#189 (daf89a2), adding a TCP/80 fallback for default HKP keyserver timeouts and removing obsolete apt-key-era work; fixes #165. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged in canonical/craft-archives#189 (daf89a2): added a TCP/80 fallback for timed-out default HKP keyserver access, removed unnecessary apt-key-era work, and fixed #165. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged fix that retries GPG key retrieval on TCP/80 when default port 11371 times out, and optimizes AptGPGKeyInstallError after the apt-key to gpg migration. Approved by three reviewers, passed all CI checks, and resolves #165 and CRAFT-4560. |
Update history
No update history recorded yet.
Related work
-
Likely Fixed By:
craft-archives#165
(confidence 100%)
The merged change explicitly fixes the default keyserver port-fallback issue.
-
Related To:
canonical/snapcraft#5670
(confidence 90%)
The downstream Snapcraft PR was used to validate the fix.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #165 Consider changing keyserver to hkp://keyserver.ubuntu.com:80 | craft-archives | closed | Fixed by craft-archives PR #189 (commit daf89a2): key retrieval now retries via hkp://keyserver.ubuntu.com:80 with proxy handling. Downstream snapcraft PR #5670 merged. |