Trouble with Apt - GPG and rpmkey
Hello, I'm still trying to get apt set up correctly. After having installed an old version, I decided to run apt-get install apt in order to obtain the latest version. From which I got the following response: Reading Package Lists... Done Building Dependency Tree... Done The following packages will be upgraded apt 1 upgraded, 0 newly installed, 0 removed and 526 not upgraded. Inst apt [0.5.15cnc6-0.suse091.rb.3] (0.5.15cnc6-0.suse091.rb.5 SuSE:9.1/stable) Conf apt (0.5.15cnc6-0.suse091.rb.5 SuSE:9.1/stable) 12:10:04 root@fluorite:/work> rpm -q apt apt-0.5.15cnc6-0.suse091.rb.3 12:10:38 root@fluorite:/work> apt-get install apt Reading Package Lists... Done Building Dependency Tree... Done The following packages will be upgraded apt 1 upgraded, 0 newly installed, 0 removed and 526 not upgraded. Need to get 467kB of archives. After unpacking 50.4kB disk space will be freed. Get:1 ftp://ftp.gwdg.de SuSE/9.1-i386/suser-rbos apt 0.5.15cnc6-0.suse091.rb.5 [467kB] Fetched 467kB in 8s (54.4kB/s) Checking GPG signatures... Unknown signature /var/cache/apt/archives/apt_0.5.15cnc6-0.suse091.rb.5_i586.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#8c9b4b0d) E: Error(s) while checking package signatures: 0 unsigned package(s) 1 package(s) with unknown signatures 0 package(s) with illegal/corrupted signatures Looking on the web site I found the information about rpmkey. So I added the word "rpmkey" to my sources.list, just like the web page says. My sources.list starts off like this now (please excuse word-wrapping): rpm ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.1-i386 rpmkey update-prpm update (and more following) and now when I try to update I get: Failed to fetch ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE/9.1-i386/base/pkglist.rpmkey Unable to fetch file, server said '/pub/linux/suse/apt/SuSE/9.1-i386/base/pkglist.rpmkey.bz2: No such file or directory. ' Reading Package Lists... Done Building Dependency Tree... Done W: Release file did not contain checksum information for ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE/9.1-i386/base/pkglist.rpmkey W: Release file did not contain checksum information for ftp://ftp.gwdg.de/pub/linux/suse/apt/SuSE/9.1-i386/base/release.rpmkey W: You may want to run apt-get update to correct these problems I searched for and installed all the rpmkey rpms, as the web site suggested. However I still get the failure about the rpmkey component - what am I doing wrong here? Thanks. -- ---------------------------------------------------- Jonathan Wilson Cedar Creek Software http://www.cedarcreeksoftware.com
On Thursday 16 September 2004 19:33, JW wrote: ...
Checking GPG signatures... Unknown signature /var/cache/apt/archives/apt_0.5.15cnc6-0.suse091.rb.5_i586.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#8c9b4b0d) E: Error(s) while checking package signatures: 0 unsigned package(s) 1 package(s) with unknown signatures 0 package(s) with illegal/corrupted signatures
Looking on the web site I found the information about rpmkey. So I added the word "rpmkey" to my sources.list, just like the web page says.
Well done, you're near the solution.
My sources.list starts off like this now (please excuse word-wrapping):
rpm ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.1-i386 rpmkey update-prpm update (and more following)
Typo: 'rpmkey' must be 'rpmkeys'. Mind the 's'! ;) ... http://linux01.gwdg.de/apt4rpm/home.html#hints The 2nd hint will help you further. Anyway, this is a great site to explore, especially for apt beginners. BTW, just add the 's' to rpmkey in sources.list, then do: apt update apt install rpmkey-suser-rbos apt install apt BTW 2: if apt wants to upgrade 526 packages, that sounds not good. Post the output of: egrep -v '^(#|$)' /etc/sources.list then we'll see if we can do something about it. Cheers, Leen
LM >On Thursday 16 September 2004 19:33, JW wrote: LM >... LM >> Checking GPG signatures... LM >> Unknown LM >> signature /var/cache/apt/archives/apt_0.5.15cnc6-0.suse091.rb.5_i586.rpm: LM >> (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#8c9b4b0d) LM > egrep -v '^(#|$)' /etc/sources.list I assume you meant /etc/apt/sources.list rpm ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.1-i386 rpmkeys update security base kde gnome xfree86 xorg mozilla suser-rbos suser-gbv usr-local-bin suser-tcousin suser-scorot funktronics packman packman-i686 kernel-of-the-day wine suse-people suse-projects kde3-stable rpm-src ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.1-i386 update-prpm update security-prpm security base kde gnome xfree86 xorg mozilla suser-rbos suser-gbv usr-local-bin suser-tcousin suser-scorot funktronics packman packman-i686 kernel-of-the-day wine suse-people suse-projects kde3-stable (Again, please excuse the word-wrapping - that's only 2 lines in the file) I have changed rpmkey ro rpmkeys, run apt-get update /and/ apt update (it's supposed to be the same thing, right?), installed every rpmkey- rpm that can be found with apt-cache search rpmkey and I'm still having trouble: apt install squirrelmail squirrelmail-plugins Reading Package Lists... Done Building Dependency Tree... Done The following packages will be upgraded squirrelmail squirrelmail-plugins 2 upgraded, 0 newly installed, 0 removed and 136 not upgraded. Need to get 0B/4352kB of archives. After unpacking 3292kB of additional disk space will be used. Checking GPG signatures... Unknown signature /var/cache/apt/archives/squirrelmail_1.4.3a-0.gbv.1_noarch.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#b7afc211) Unknown signature /var/cache/apt/archives/squirrelmail-plugins_1.4.3a-0.gbv.2_noarch.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#b7afc211) E: Error(s) while checking package signatures: 0 unsigned package(s) 2 package(s) with unknown signatures 0 package(s) with illegal/corrupted signatures Thanks for your help - any more ideas? -- ---------------------------------------------------- Jonathan Wilson Cedar Creek Software http://www.cedarcreeksoftware.com
* JW
apt install squirrelmail squirrelmail-plugins Reading Package Lists... Done Building Dependency Tree... Done The following packages will be upgraded squirrelmail squirrelmail-plugins 2 upgraded, 0 newly installed, 0 removed and 136 not upgraded. Need to get 0B/4352kB of archives. After unpacking 3292kB of additional disk space will be used. Checking GPG signatures... Unknown signature /var/cache/apt/archives/squirrelmail_1.4.3a-0.gbv.1_noarch.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#b7afc211) Unknown signature /var/cache/apt/archives/squirrelmail-plugins_1.4.3a-0.gbv.2_noarch.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#b7afc211) E: Error(s) while checking package signatures: 0 unsigned package(s) 2 package(s) with unknown signatures 0 package(s) with illegal/corrupted signatures
apt -y --no-che install squirrelmail squirrelmail-plugins answers yes to questions, disregards keys -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/photos
On Thursday 16 September 2004 23:13, JW wrote:
LM >On Thursday 16 September 2004 19:33, JW wrote: LM >... LM >> Checking GPG signatures... LM >> Unknown LM >> signature /var/cache/apt/archives/apt_0.5.15cnc6-0.suse091.rb.5_i586.rpm: LM >> (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#8c9b4b0d)
LM > egrep -v '^(#|$)' /etc/sources.list
I assume you meant /etc/apt/sources.list
Indeed, I suppose my fingers could not keep up with my thoughts ;)
rpm ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.1-i386 rpmkeys update security base kde gnome xfree86 xorg mozilla suser-rbos suser-gbv usr-local-bin suser-tcousin suser-scorot funktronics packman packman-i686 kernel-of-the-day wine suse-people suse-projects kde3-stable rpm-src ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.1-i386 update-prpm update security-prpm security base kde gnome xfree86 xorg mozilla suser-rbos suser-gbv usr-local-bin suser-tcousin suser-scorot funktronics packman packman-i686 kernel-of-the-day wine suse-people suse-projects kde3-stable
(Again, please excuse the word-wrapping - that's only 2 lines in the file)
I know, ;) doesn't matter. But you have every SuSE repository in there you possibly could find, I suppose. Whether that is smart you can read in: http://linux01.gwdg.de/apt4rpm/home.html#hints ATM I only have the following repositories enabled: base update security kde rpmkeys suser-rbos I enable others only when I want to (I have each repository listed on a single line, and commented out).
I have changed rpmkey ro rpmkeys, run apt-get update /and/ apt update (it's supposed to be the same thing, right?),
Yes, 'apt update' would suffice (is shorter ;).
installed every rpmkey- rpm that can be found with apt-cache search rpmkey and I'm still having trouble:
apt install squirrelmail squirrelmail-plugins ... E: Error(s) while checking package signatures: 0 unsigned package(s) 2 package(s) with unknown signatures 0 package(s) with illegal/corrupted signatures
Patrick already posted a solution ('--no-che' is short for '--no-checksig'). Cheers, Leen
Op donderdag 16 september 2004 23:13, schreef JW:
Thanks for your help - any more ideas?
What's the result of: rpm -q rpmkey-suser-gbv rpm -q gpg-pubkey-b7afc211 ls -l /usr/lib/rpm/gnupg/suser-gbv.asc You may want to try to install rpmkey-suser-gbv once more apt --no-ch --no-po install rpmkey-suser-gbv and have squirrelmail successfully installed after that... -- Richard Bos Without a home the journey is endless
Patrick and Lendert: I might not be making myself clear - I am able to install with --nochecksig (and have) I am just wondering what's wrong because it would seem like I'm not _supposed_ to have to install with that option. RB >Op donderdag 16 september 2004 23:13, schreef JW: RB >What's the result of: RB >rpm -q rpmkey-suser-gbv RB >rpm -q gpg-pubkey-b7afc211 RB > RB >ls -l /usr/lib/rpm/gnupg/suser-gbv.asc ccs024:/etc/postfix # rpm -q rpmkey-suser-gbv rpmkey-suser-gbv-0.1-3 ccs024:/etc/postfix # rpm -q gpg-pubkey-b7afc211 package gpg-pubkey-b7afc211 is not installed ccs024:/etc/postfix # ls -l /usr/lib/rpm/gnupg/suser-gbv.asc -rw-r--r-- 1 root root 1755 Aug 18 05:22 /usr/lib/rpm/gnupg/suser-gbv.asc RB >You may want to try to install rpmkey-suser-gbv once more RB >apt --no-ch --no-po install rpmkey-suser-gbv RB >and have squirrelmail successfully installed after that... apt --no-ch --no-po install rpmkey-suser-gbv Reading Package Lists... Done Building Dependency Tree... Done rpmkey-suser-gbv is already the newest version. 0 upgraded, 0 newly installed, 0 removed and 135 not upgraded. Thanks. -- ---------------------------------------------------- Jonathan Wilson Cedar Creek Software http://www.cedarcreeksoftware.com
* JW
Patrick and Lendert: I might not be making myself clear - I am able to install with --nochecksig (and have) I am just wondering what's wrong because it would seem like I'm not _supposed_ to have to install with that option.
Richard Bos is the resident expert here, but I would hazard a guess that the SquirrelMail package is not signed or incorrectly signed or that the suser-gvb rpmkey is botched. A test for the last condition, rpm -e rpmkey-suser-gbv, and then reinstall it with apt per the instructions from Richard. ps: It does seem to be tooo common for the keys to be bad/missing ??? (Richard ??) -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/photos
** Reply to message from Patrick Shanahan
* JW
[09-16-04 17:52]: Patrick and Lendert: I might not be making myself clear - I am able to install with --nochecksig (and have) I am just wondering what's wrong because it would seem like I'm not _supposed_ to have to install with that option.
Edit /etc/apt/apt.conf.d/gpg-checker.conf to look like this: // Make GPG::Check no; to disable gpg checking // It can still be used in combination with --checksig GPG::Check false; Scripts::PM::Pre:: gpg-checker.lua; Ed Harrison SuSE 9.1, Kernel 2.6.7-vanilla PolarBar Mailer 1.25a
On Thu, Sep 16, 2004 at 05:50:23PM -0500, JW wrote:
Patrick and Lendert: I might not be making myself clear - I am able to install with --nochecksig (and have) I am just wondering what's wrong because it would seem like I'm not _supposed_ to have to install with that option.
RB >Op donderdag 16 september 2004 23:13, schreef JW: RB >What's the result of: RB >rpm -q rpmkey-suser-gbv RB >rpm -q gpg-pubkey-b7afc211 RB > RB >ls -l /usr/lib/rpm/gnupg/suser-gbv.asc
ccs024:/etc/postfix # rpm -q rpmkey-suser-gbv rpmkey-suser-gbv-0.1-3 ccs024:/etc/postfix # rpm -q gpg-pubkey-b7afc211 package gpg-pubkey-b7afc211 is not installed ccs024:/etc/postfix # ls -l /usr/lib/rpm/gnupg/suser-gbv.asc -rw-r--r-- 1 root root 1755 Aug 18 05:22 /usr/lib/rpm/gnupg/suser-gbv.asc
RB >You may want to try to install rpmkey-suser-gbv once more RB >apt --no-ch --no-po install rpmkey-suser-gbv RB >and have squirrelmail successfully installed after that...
apt --no-ch --no-po install rpmkey-suser-gbv Reading Package Lists... Done Building Dependency Tree... Done rpmkey-suser-gbv is already the newest version. 0 upgraded, 0 newly installed, 0 removed and 135 not upgraded.
Now try 'rpm -e rpmkey-suser-gbv' and reinststall the rpm. Hmm, perhaps 'apt reinstall rpmkey-suser-gbv' works too. The output must tell that it is installing a gpp key. If not what is your apt version: 'rpm -q apt' It must be the newest otherwise it won't work. -- Richard
Hello, Is the problem still there? . I didn't change anything about my repository rpmkey (gbv) since I released it first time. And just now I revised my 9.1 repository and all packages are signed. I guess it is an old apt version not managing rpmkeys properly. Guillermo El Viernes, 17 de Septiembre de 2004 00:50, JW escribió:
Patrick and Lendert: I might not be making myself clear - I am able to install with --nochecksig (and have) I am just wondering what's wrong because it would seem like I'm not _supposed_ to have to install with that option.
RB >Op donderdag 16 september 2004 23:13, schreef JW: RB >What's the result of: RB >rpm -q rpmkey-suser-gbv RB >rpm -q gpg-pubkey-b7afc211 RB > RB >ls -l /usr/lib/rpm/gnupg/suser-gbv.asc
ccs024:/etc/postfix # rpm -q rpmkey-suser-gbv rpmkey-suser-gbv-0.1-3 ccs024:/etc/postfix # rpm -q gpg-pubkey-b7afc211 package gpg-pubkey-b7afc211 is not installed ccs024:/etc/postfix # ls -l /usr/lib/rpm/gnupg/suser-gbv.asc -rw-r--r-- 1 root root 1755 Aug 18 05:22 /usr/lib/rpm/gnupg/suser-gbv.asc
RB >You may want to try to install rpmkey-suser-gbv once more RB >apt --no-ch --no-po install rpmkey-suser-gbv RB >and have squirrelmail successfully installed after that...
apt --no-ch --no-po install rpmkey-suser-gbv Reading Package Lists... Done Building Dependency Tree... Done rpmkey-suser-gbv is already the newest version. 0 upgraded, 0 newly installed, 0 removed and 135 not upgraded.
Thanks.
-- ---------------------------------------------------- Jonathan Wilson Cedar Creek Software http://www.cedarcreeksoftware.com
-- Guillermo Ballester Valor gbv@oxixares.com Ogijares, Granada SPAIN Linux user #117181. See http://counter.li.org/ Public GPG KEY http://www.oxixares.com/~gbv/pubgpg.html
You could edit /etc/apt/apt.conf.d/gpg-checker.conf and change "GPG::Check true;" to "GPG::Check false;" David -- Registered Linux User No 207521 The Linux Counter: http://counter.li.org/ The above is my personal opinion and does not necessarily reflect that of the little voices in my head.
participants (8)
-
David Robertson
-
Ed Harrison
-
Guillermo Ballester Valor
-
JW
-
Leendert Meyer
-
Patrick Shanahan
-
radoeka
-
Richard Bos