KernelCare Error: gpg: Can't check signature

Symptoms

During KernelCare installation or KernelCare updates you may face the following error because of gpg:

# kcarectl --update
Downloading updates
gpg: Can't check signature: public key not found
Bad Signature: /var/cache/kcare/patches/none-e3bc04eacf95963ade78062236cefafab67089a4-5-extra/kpatch.extra.bin

Solution

1. Try to update KernelCare to make sure that you use the latest package version:

   yum update kernelcare

2. If this doesn't help, please verify the signature by running:

   # gpg --verify /tmp/debug/kpatch.extra.bin.sig /tmp/debug/kpatch.extra.bin

3. If everything is alright, gpg verifies the signature. Try to import the key now:

   # kcarectl --import-key /etc/pki/kcare-gpg/kcare_pub.gpg

   If the verification (step #2) fails, you should see the output similar to "gpg: Error: The trustdb is corrupted.". In that case, you need to recreate the trustdb via the following commands:

   # cd /etc/pki/kcare-gpg/
   # cp trustdb.gpg trustdb.gpg_bak
   # gpg --export-ownertrust > otrust.tmp
   # rm trustdb.gpg
   # gpg --import-ownertrust < otrust.tmp

4. Import the gpg key once more:

   # kcarectl --import-key /etc/pki/kcare-gpg/kcare_pub.gpg
   # kcarectl --update 

You should be able to install/update KernelCare now. If the problem persists, please contact our Support team for further assistance.