Description of the issue:
I tried to update Brave browser. It works normally every time but today the update did not work, an error appears that GPG verification failed.
Steps to Reproduce (add as many as necessary):
- Run
sudo dnf --refresh upgrade
(or update through Gnome Software GUI) and confirm upgrade - GPG check fails, Brave does not update (nor install)
Actual Result (gifs and screenshots are welcome!):
I tried using the Gnome Software GUI but that did not work since the upgrade would automatically cancel.
So with the Terminal I ran:
[user@host ~]$ sudo dnf --refresh upgrade
Copr repo for mat2 owned by atenart 15 kB/s | 1.5 kB 00:00
created by dnf config-manager from https://brav 37 kB/s | 3.3 kB 00:00
Fedora 38 - x86_64 117 kB/s | 24 kB 00:00
Fedora 38 openh264 (From Cisco) - x86_64 4.1 kB/s | 989 B 00:00
Fedora Modular 38 - x86_64 127 kB/s | 24 kB 00:00
Fedora 38 - x86_64 - Updates 114 kB/s | 24 kB 00:00
Fedora Modular 38 - x86_64 - Updates 134 kB/s | 23 kB 00:00
Dependencies resolved.
================================================================================
Package Arch Version Repository Size
================================================================================
Upgrading:
brave-browser
x86_64 1.52.129-1 brave-browser-rpm-release.s3.brave.com_x86_64_ 106 M
brave-keyring
noarch 1.13-1 brave-browser-rpm-release.s3.brave.com_x86_64_ 15 k
Transaction Summary
================================================================================
Upgrade 2 Packages
Total download size: 106 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): brave-keyring-1.13-1.noarch.rpm 119 kB/s | 15 kB 00:00
(2/2): brave-browser-1.52.129-1.x86_64.rpm 15 MB/s | 106 MB 00:06
--------------------------------------------------------------------------------
Total 15 MB/s | 106 MB 00:06
Public key for brave-keyring-1.13-1.noarch.rpm is not installed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
Then I ran:
[user@host ~]$ sudo dnf clean packages
2 files removed
That made no difference so I checked the GPG keys:
[user@host ~]$ rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'
gpg-pubkey-9867c58f-601c49ca Fedora (35) <[email protected]> public key
gpg-pubkey-87c4f1a9-5b1ff953 atenart_mat2 (None) <atenart#[email protected]> public key
gpg-pubkey-38ab71f4-60242b08 Fedora (36) <[email protected]> public key
gpg-pubkey-c2d4e821-6285304f Brave Software <[email protected]> public key
gpg-pubkey-5323552a-6112bcdc Fedora (37) <[email protected]> public key
gpg-pubkey-dd79b481-62fe7502 Zoom Video Communications, Inc. <[email protected]> public key
gpg-pubkey-eb10b464-6202d9c6 Fedora (38) <[email protected]> public key
And I removed the older Brave Software key and imported the new key:
[user@host ~]$ sudo rpm -e gpg-pubkey-c2d4e821-6285304f
[user@host ~]$ sudo rpm --import https://brave-browser-rpm-release.s3.brave.com/brave-core.asc
That made no difference so I tried re-running the official installation guide:
sudo dnf install dnf-plugins-core
(already installed)sudo dnf config-manager --add-repo https://brave-browser-rpm-release.s3.brave.com/brave-browser.repo
sudo rpm --import https://brave-browser-rpm-release.s3.brave.com/brave-core.asc
sudo dnf install brave-browser brave-keyring
, from which I got:
[user@host ~]$ sudo dnf install brave-browser brave-keyring
Brave Browser 46 kB/s | 7.3 kB 00:00
Package brave-browser-1.52.126-1.x86_64 is already installed.
Package brave-keyring-1.11-1.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
I tried updating:
[user@host ~]$ sudo dnf --refresh upgrade
Copr repo for mat2 owned by atenart 7.0 kB/s | 1.5 kB 00:00
Brave Browser 33 kB/s | 3.3 kB 00:00
created by dnf config-manager from https://brav 48 kB/s | 3.3 kB 00:00
Fedora 38 - x86_64 104 kB/s | 24 kB 00:00
Fedora 38 openh264 (From Cisco) - x86_64 3.8 kB/s | 989 B 00:00
Fedora Modular 38 - x86_64 147 kB/s | 24 kB 00:00
Fedora 38 - x86_64 - Updates 77 kB/s | 24 kB 00:00
Fedora Modular 38 - x86_64 - Updates 148 kB/s | 23 kB 00:00
Dependencies resolved.
================================================================================
Package Architecture Version Repository Size
================================================================================
Upgrading:
brave-browser x86_64 1.52.129-1 brave-browser 106 M
brave-keyring noarch 1.13-1 brave-browser 15 k
Transaction Summary
================================================================================
Upgrade 2 Packages
Total download size: 106 M
Is this ok [y/N]: y
Downloading Packages:
(1/2): brave-keyring-1.13-1.noarch.rpm 209 kB/s | 15 kB 00:00
(2/2): brave-browser-1.52.129-1.x86_64.rpm 13 MB/s | 106 MB 00:08
--------------------------------------------------------------------------------
Total 13 MB/s | 106 MB 00:08
Public key for brave-keyring-1.13-1.noarch.rpm is not installed
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
So the new Brave Browser
repository shows up, but the repo link is the same as the older one. Regardless of disabling the older one or not, it still shows the same result as before.
I ended up uninstalling Brave but now I can’t install it since it shows the very same GPG failed error.
Expected result:
Update Brave
Reproduces how often:
All the time since trying to update from Brave browser version 1.52.126-1
to 1.52.129-1
, Brave keyring from 1.11-1
to 1.13-1
.
Operating System and Brave Version (See the About Brave
page in the main menu):
Operating system: Fedora Linux 38 (virtual machine)
Brave browser: Brave 1.52.126-1 (Official Build) (64-bit) - can’t check Chromium version since I can’t reinstall Brave
Additional Information:
I don’t know if this makes any difference, but about a month ago I changed a setting in my computer which makes me automatically login without having to enter my user password so I could login faster.
As a consequence, Brave would ask me to enter my password every time I opened it, saying the keyring had not been unlocked. Once I would enter it, it wouldn’t ask me again for the whole user session, until I rebooted/logged out and back in.
*Note that updates still worked OK during this time