{"action":"closed","issue":{"url":"https://api.github.com/repos/trezor/trezor-mcu/issues/4","labels_url":"https://api.github.com/repos/trezor/trezor-mcu/issues/4/labels{/name}","comments_url":"https://api.github.com/repos/trezor/trezor-mcu/issues/4/comments","events_url":"https://api.github.com/repos/trezor/trezor-mcu/issues/4/events","html_url":"https://github.com/trezor/trezor-mcu/issues/4","id":46127196,"number":4,"title":"apt-key adv command in dockerfile might be unsafe","user":{"login":"adrelanos","id":1985040,"avatar_url":"https://avatars.githubusercontent.com/u/1985040?v=3","gravatar_id":"","url":"https://api.github.com/users/adrelanos","html_url":"https://github.com/adrelanos","followers_url":"https://api.github.com/users/adrelanos/followers","following_url":"https://api.github.com/users/adrelanos/following{/other_user}","gists_url":"https://api.github.com/users/adrelanos/gists{/gist_id}","starred_url":"https://api.github.com/users/adrelanos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adrelanos/subscriptions","organizations_url":"https://api.github.com/users/adrelanos/orgs","repos_url":"https://api.github.com/users/adrelanos/repos","events_url":"https://api.github.com/users/adrelanos/events{/privacy}","received_events_url":"https://api.github.com/users/adrelanos/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2014-10-17T18:05:35Z","updated_at":"2015-02-13T17:22:41Z","closed_at":"2015-02-13T17:22:41Z","body":"From:\r\nhttps://github.com/trezor/trezor-mcu/blob/master/Dockerfile#L7\r\n\r\nThe following excerpt might be unsafe.\r\n\r\n```\r\napt-key adv --keyserver keyserver.ubuntu.com --recv-keys FE324A81C208C89497EFC6246D1D8367A3421AFB\r\n```\r\n\r\nBecause of a gnupg bug. `gpg --recv-keys/--refresh-keys ignores a given long id, uses short ID instead`:\r\nhttp://bugs.g10code.com/gnupg/issue1340\r\n\r\nSee also:\r\nhttp://www.asheesh.org/note/debian/short-key-ids-are-bad-news.html\r\n\r\nAs a fix you could check that you got the correct key by running:\r\n```\r\ngpg --fingerprint FE324A81C208C89497EFC6246D1D8367A3421AFB\r\n```\r\nand break on non-zero exit codes."}}