GPG Key issues (Related to CB) #2260

GvYoutube commented 2025年12月15日 19:40:45 +01:00

Comment

I'm having issues with signing my GPG key, as Codeberg is not accepting the key and gives me this error: The provided GPG key, signature and token do not match or token is out-of-date. I am using the exact command it Ives me to sign it. What is going wrong here?

### Comment I'm having issues with signing my GPG key, as Codeberg is not accepting the key and gives me this error: The provided GPG key, signature and token do not match or token is out-of-date. I am using the exact command it Ives me to sign it. What is going wrong here?

Gusted commented 2025年12月16日 02:11:06 +01:00

Hi,

Is the key expired by any chance? What's the key type (RSA, Ed25519)?

Hi, Is the key expired by any chance? What's the key type (RSA, Ed25519)?

GvYoutube commented 2025年12月16日 13:27:40 +01:00

@Gusted wrote in #2260 (comment):

Hi,

Is the key expired by any chance? What's the key type (RSA, Ed25519)?

It is an ED25519 key. I did this the same day so there couldn't be a chance it was expired, and plus when making the key I set it to never expire.

@Gusted wrote in https://codeberg.org/Codeberg/Community/issues/2260#issuecomment-8965098: > Hi, > > Is the key expired by any chance? What's the key type (RSA, Ed25519)? It is an ED25519 key. I did this the same day so there couldn't be a chance it was expired, and plus when making the key I set it to never expire.

starg2 commented 2025年12月17日 11:20:31 +01:00

1. Can you verify the token you just signed by yourself?
2. Are you sure you're signing the correct token? The token to sign changes every time.

1. Can you verify the token you just signed by yourself? 2. Are you sure you're signing the correct token? The token to sign changes every time.

GvYoutube commented 2025年12月17日 16:31:58 +01:00

@starg2 wrote in #2260 (comment):

1. Can you verify the token you just signed by yourself?
2. Are you sure you're signing the correct token? The token to sign changes every time.

I am signing it correctly. I copy-paste the command it even gives me.

@starg2 wrote in https://codeberg.org/Codeberg/Community/issues/2260#issuecomment-8995752: > 1. Can you verify the token you just signed by yourself? > 2. Are you sure you're signing the correct token? The token to sign changes every time. I am signing it correctly. I copy-paste the command it even gives me.

Gusted commented 2025年12月17日 17:07:00 +01:00

I recently learned about the exact verification of this token and you have to be sort of lucky and request a token in the first half of a minute as the token does not expire in exactly 1 minute but in the next minute. So if you request it at xx:12:50 then you only have ten seconds to verify it. So please go to a time site (https://time.gusted.xyz/ or https://time.is) to get the exact time with seconds and go to the SSH page when its around xx:xx:05 (in case the codeberg server has a time offset of a few seconds) and then do the verification process.

I recently learned about the exact verification of this token and you have to be sort of lucky and request a token in the first half of a minute as the token does not expire in exactly 1 minute but in the next minute. So if you request it at xx:12:50 then you only have ten seconds to verify it. So please go to a time site (https://time.gusted.xyz/ or https://time.is) to get the exact time with seconds and go to the SSH page when its around xx:xx:05 (in case the codeberg server has a time offset of a few seconds) and then do the verification process.

GvYoutube commented 2025年12月17日 17:13:48 +01:00

@Gusted wrote in #2260 (comment):

I recently learned about the exact verification of this token and you have to be sort of lucky and request a token in the first half of a minute as the token does not expire in exactly 1 minute but in the next minute. So if you request it at xx:12:50 then you only have ten seconds to verify it. So please go to a time site (https://time.gusted.xyz/ or https://time.is) to get the exact time with seconds and go to the SSH page when its around xx:xx:05 (in case the codeberg server has a time offset of a few seconds) and then do the verification process.

That is so odd! Thanks for the tip, it actually worked this time.

@Gusted wrote in https://codeberg.org/Codeberg/Community/issues/2260#issuecomment-9003201: > I recently learned about the exact verification of this token and you have to be sort of lucky and request a token in the first half of a minute as the token does not expire in exactly 1 minute but in the next minute. So if you request it at xx:12:50 then you only have ten seconds to verify it. So please go to a time site (https://time.gusted.xyz/ or https://time.is) to get the exact time with seconds and go to the SSH page when its around xx:xx:05 (in case the codeberg server has a time offset of a few seconds) and then do the verification process. That is so odd! Thanks for the tip, it actually worked this time.