Tootfinder

Opt-in global Mastodon full text search. Join the index!

@mgorny@social.treehouse.systems
2024-05-07 12:20:33

The latest Django releases were signed by another person, so I needed to update the #Gentoo keyring used to verify them. The keyring is created via fetching the #PGP keys from different sources, and then concatenating them to a single file. However, today I wasn't able to get the new key to work! Or more precisely, to get #GnuPG to correctly import the concatenated keys.
It simply imported 3 out of 4 keys, with no error or whatever. I've scratched my head, tried removing one old key that wasn't used by any of the current releases — then got 2 out of 3. I've tried reordering the keys, but then the other necessary key was ignored. I ran out of time and gave up for the moment.
Now, I've taken another look… and I've found the issue. Turns out that #GitHub, in their magic `.gpg` URLs, is outputting the ASCII-armored #OpenPGP keys without a trailing newline. While this technically isn't broken if the key is imported directly, concatenating it to another key creates a broken file with:
```
-----END PGP PUBLIC KEY BLOCK----------BEGIN PGP PUBLIC KEY BLOCK-----
```
and *of course* GnuPG silently ignores the later key instead of reporting a problem.
github.com/orgs/community/disc

@arXiv_statML_bot@mastoxiv.page
2024-03-13 07:31:40

CAS: A General Algorithm for Online Selective Conformal Prediction with FCR Control
Yajie Bao, Yuyang Huo, Haojie Ren, Changliang Zou
arxiv.org/abs/2403.07728