@gwuensch, let's continue this discussion in https://aur.archlinux.org/packages/docker-rootless-extras.
Search Criteria
Package Details: openssl-1.1 1.1.1.w-11
Package Actions
| Git Clone URL: | https://aur.archlinux.org/openssl-1.1.git (read-only, click to copy) |
|---|---|
| Package Base: | openssl-1.1 |
| Description: | The Open Source toolkit for Secure Sockets Layer and Transport Layer Security |
| Upstream URL: | https://www.openssl.org |
| Licenses: | custom:BSD |
| Provides: | libcrypto.so, libssl.so |
| Submitter: | solarfire |
| Maintainer: | the-k |
| Last Packager: | the-k |
| Votes: | 34 |
| Popularity: | 7.23 |
| First Submitted: | 2026-01-27 20:20 (UTC) |
| Last Updated: | 2026-06-15 12:24 (UTC) |
Dependencies (2)
Required by (271)
- activinspire
- adsklicensing
- aeon-bin
- akkoma-git
- alist-desktop-bin
- amazon-workspaces-bin
- amazon-workspaces-legacy-bin
- apollo-studio
- aptos (requires libcrypto.so)
- aptos (requires libssl.so)
- arti-git (requires libssl.so)
- astralrinth-app-bin
- atom-ng-bin
- aur-build-worker
- autenticacao-gov-pt-bin
- azahar-git (requires libssl.so)
- azahar-git (requires libcrypto.so)
- basemark
- biopass (requires libssl.so)
- biopass-git (requires libssl.so)
- Show 251 more...
Sources (46)
- ca-dir.patch
- CVE-2023-5678.patch
- CVE-2024-0727-1.patch
- CVE-2024-0727-2.patch
- CVE-2024-13176.patch
- CVE-2024-2511.patch
- CVE-2024-4741.patch
- CVE-2024-5535-1.patch
- CVE-2024-5535-2.patch
- CVE-2024-5535-3.patch
- CVE-2024-5535-4.patch
- CVE-2024-5535-5.patch
- CVE-2024-5535-6.patch
- CVE-2024-5535-7.patch
- CVE-2024-5535-8.patch
- CVE-2024-9143.patch
- CVE-2025-68160.patch
- CVE-2025-69418.patch
- CVE-2025-69419-1.patch
- CVE-2025-69419-2.patch
- CVE-2025-69420.patch
- CVE-2025-69421.patch
- CVE-2025-9230.patch
- CVE-2026-22795_CVE-2026-22796.patch
- CVE-2026-28387.patch
- CVE-2026-28388-1.patch
- CVE-2026-28388-2.patch
- CVE-2026-28389-1.patch
- CVE-2026-28389-2.patch
- CVE-2026-28389.tar
- CVE-2026-28390-1.patch
- CVE-2026-28390-2.patch
- CVE-2026-28390-3.patch
- CVE-2026-28390-4.patch
- CVE-2026-34180.patch
- CVE-2026-42766-1.patch
- CVE-2026-42766-2.patch
- CVE-2026-42766.tar
- CVE-2026-45447-1.patch
- CVE-2026-45447-2.patch
- CVE-2026-7383.patch
- CVE-2026-9076-1.patch
- CVE-2026-9076-2.patch
- CVE-2026-9076.tar
- https://www.openssl.org/source/openssl-1.1.1w.tar.gz
- https://www.openssl.org/source/openssl-1.1.1w.tar.gz.asc
the-k commented on 2026-06-21 09:41 (UTC)
gwuensch commented on 2026-06-21 00:40 (UTC)
The PKGBUILD should not have a Shebang line (#!/bin/bash -e).
patlefort commented on 2026-06-09 20:56 (UTC)
Sorry, disregard. Incredible combination of problems led me to believe that they didn't match.
the-k commented on 2026-06-09 20:11 (UTC)
@tioguda, that's just equivalent to pkgver=${_ver} and I have absolutely no idea how it'd help anything. See the comment above the pkgver definition.
tioguda commented on 2026-06-09 20:04 (UTC) (edited on 2026-06-21 09:27 (UTC) by tioguda)
I was mistaken about that too, sorry.
the-k commented on 2026-06-09 19:47 (UTC)
@patlefort, no idea what you're talking about. .SRCINFO is up to date, you can check yourself. I'll need steps to reproduce to investigate it further.
patlefort commented on 2026-06-09 19:27 (UTC)
The version in the PKGBUILD and the .SRCINFO don't match. pkgver is = 1.1.1.w0 while .SRCINFO has 1.1.1.w.
MagnusVesper commented on 2026-03-20 17:16 (UTC) (edited on 2026-03-20 17:17 (UTC) by MagnusVesper)
If you don't want to deal with fixing the key problems now, you can update it with one of these:
paru -S openssl-1.1 --mflags "--skippgpcheck"
yay -S openssl-1.1 --mflags "--skippgpcheck"
I only confirmed that it works with paru, but paru's manpage lists "mflags" as an option it supports too.
panther666 commented on 2026-03-14 14:54 (UTC) (edited on 2026-03-14 15:02 (UTC) by panther666)
[thunder ~]# gpg --keyserver "hkps://keys.openpgp.org" --recv-keys \
7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C \
A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C \
EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5 \
8657ABB260F056B1E5190839D9C4D26D0E604491
gpg: key D894E2CE8B3D79F5: new key but contains no user ID - skipped
gpg: /root/.gnupg/trustdb.gpg: trust-db erzeugt
gpg: Schlüssel B8EF1A6BA9DA2D5C: Öffentlicher Schlüssel "Tomáš Mráz <tomas@openssl.foundation>" importiert
gpg: key D5E9E43F7DF9EE8C: new key but contains no user ID - skipped
gpg: Anzahl insgesamt bearbeiteter Schlüssel: 3
gpg: ohne User-ID: 2
gpg: importiert: 1
[thunder ~]#yay -Sua
:: 1 Paket zu upgraden/installieren.
1 aur/openssl-1.1 1.1.1.w-2 -> 1.1.1.w-9
=> Überprüfe Signaturen der Quell-Dateien mit gpg...
openssl-1.1.1w.tar.gz ... FEHLGESCHLAGEN (Unbekannter öffentlicher Schlüssel D894E2CE8B3D79F5)
==> FEHLER: Eine oder mehrere PGP-Signaturen konnten nicht überprüft werden!
-> Fehler beim Erstellen: openssl-1.1-exit status 1
-> Die folgenden Pakete konnten nicht installiert werden. Ein manueller Eingriff ist erforderlich:
openssl-1.1 - exit status 1
gpg: Verzeichnis `/tmp/.gnupg' erzeugt
gpg: /tmp/.gnupg/trustdb.gpg: trust-db erzeugt
gpg: error reading key: Kein öffentlicher Schlüssel
gpg: Verzeichnis `/tmp/.gnupg' erzeugt
gpg: /tmp/.gnupg/trustdb.gpg: trust-db erzeugt
gpg: error reading key: Kein öffentlicher Schlüssel
gpg: Verzeichnis `/tmp/.gnupg' erzeugt
gpg: /tmp/.gnupg/trustdb.gpg: trust-db erzeugt
gpg: error reading key: Kein öffentlicher Schlüssel
gpg: Verzeichnis `/tmp/.gnupg' erzeugt
gpg: /tmp/.gnupg/trustdb.gpg: trust-db erzeugt
gpg: error reading key: Kein öffentlicher Schlüssel
:: PGP-Schlüssel müssen importiert werden:
-> 8657ABB260F056B1E5190839D9C4D26D0E604491, benötigt von: openssl-1.1
-> 7953AC1FBC3DC8B3B292393ED5E9E43F7DF9EE8C, benötigt von: openssl-1.1
-> A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C, benötigt von: openssl-1.1
-> EFC0A467D613CB83C7ED6D30D894E2CE8B3D79F5, benötigt von: openssl-1.1
:: Importieren? [J/n] j
=> Überprüfe Signaturen der Quell-Dateien mit gpg...
openssl-1.1.1w.tar.gz ... FEHLGESCHLAGEN (Unbekannter öffentlicher Schlüssel D894E2CE8B3D79F5)
==> FEHLER: Eine oder mehrere PGP-Signaturen konnten nicht überprüft werden!
-> Fehler beim Erstellen: openssl-1.1-exit status 1
-> Die folgenden Pakete konnten nicht installiert werden. Ein manueller Eingriff ist erforderlich:
openssl-1.1 - exit status 1
Update ist still not working..... Keys still cannot be loaded
unknown open key D894E2CE8B3D79F5
pgp signatures could not be verified
Can anybody help?
Pinned Comments
the-k commented on 2026-02-01 09:25 (UTC) (edited on 2026-02-03 08:18 (UTC) by the-k)
Check out https://wiki.archlinux.org/title/Makepkg#Signature_checking. Basically, if you use
makepkgdirectly, you'll have to manually import all keys into your user GPG keyring. You can do that by runninggpg --import keys/pgp/*.Some AUR helpers like
yayare able to do that for you. If you encounter server errors like @Exdebianmainuser did, configure GPG to use a better server. Most PGP servers today are unreliable. I recommendhkps://keyserver.ubuntu.com.