Re: [SLE] SuSE update: RPM has invalid signature (?)
Yep - tried every server, http/ftp, you name it. Someone on linuxquestions.org suggested checking that the system clock is correct - it wasn't, but setting it correctly made no difference either. I guess it must be something to do with rpm - but I have tried a rpm --rebuilddb, which didn't help either. I am completely stumped, and really do not want to re-install since unless I understand what's happening I won't be able to fix it (when it happens again). Cheers, Jon. Lord Jester wrote:
On Sun, 2005-02-20 at 12:32 +0000, Jonathan Brooks wrote:
Dear All,
Have just installed SuSE 9.2 with a network install (ftp.mirrorservice.org), and want to apply patches. Each time I run YOU it starts to download each patch and then fails. Under the details I see that the "RPM has invalid signature".
How can I fix this? It's driving me absolutely nuts!
Cheers, Jon.
-- Jonathan Brooks (Ph.D.) Research Assistant PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: 01865 272156 fax: 01865 282675
Not sure if this will help, but have your tried a different mirror for the patches? Personally I use a German mirror although I live in the US, never given me any trouble.
HTH, Michael
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
* Jonathan Brooks <jonathan.brooks@human-anatomy.oxford.ac.uk> [02-20-05 13:33]:
Yep - tried every server, http/ftp, you name it. Someone on linuxquestions.org suggested checking that the system clock is correct - it wasn't, but setting it correctly made no difference either.
I guess it must be something to do with rpm - but I have tried a rpm --rebuilddb, which didn't help either.
I am completely stumped, and really do not want to re-install since unless I understand what's happening I won't be able to fix it (when it happens again).
I guess the last place to look may provide you an answer. Try from the command line: man rpm search for 'sig' -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery
Yeah - you would have thought that might shed some light on it, but it doesn't. Thus far the only thing I have found on the web relating to this problem, made the helpful suggestion of downloading the DVD iso and reinstalling - which is not an option. I notice from a few other threads that other people are having problems getting the list of servers to appear in YOU - does this relate to my problem - are all of SuSE/Novell's servers screwed. To summarise, I can connect to the server - but whenever I try to download patches, YOU downloads them and as soon as it finishes complains that the RPM signature is invalid! There has to be a solution other than reinstalling!!!!!!!!!!! Come on, somebody must have an idea of how to fix this???? Cheers, Jon. Patrick Shanahan wrote:
* Jonathan Brooks <jonathan.brooks@human-anatomy.oxford.ac.uk> [02-20-05 13:33]:
Yep - tried every server, http/ftp, you name it. Someone on linuxquestions.org suggested checking that the system clock is correct - it wasn't, but setting it correctly made no difference either.
I guess it must be something to do with rpm - but I have tried a rpm --rebuilddb, which didn't help either.
I am completely stumped, and really do not want to re-install since unless I understand what's happening I won't be able to fix it (when it happens again).
I guess the last place to look may provide you an answer. Try from the command line: man rpm search for 'sig'
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
On Sunday 20 Feb 2005 19:41 pm, Jonathan Brooks wrote: <SNIP>
I notice from a few other threads that other people are having problems getting the list of servers to appear in YOU - does this relate to my problem -
Probably not.
are all of SuSE/Novell's servers screwed.
No.
To summarise, I can connect to the server - but whenever I try to download patches, YOU downloads them and as soon as it finishes complains that the RPM signature is invalid!
There has to be a solution other than reinstalling!!!!!!!!!!!
Come on, somebody must have an idea of how to fix this????
Try reinstalling the package suse-build-key-xxxx.noarch.rpm from the original installation source/media. Dylan -- "I see your Schwartz is as big as mine" -Dark Helmet
Hi Dylan, Thanks - at last I seem to be getting somewhere. I have downloaded the suse-build-key rpm, but when I come to install it: rpm -Uhv suse-build-key.... It states that it is already installed. How do I get round this problem? Thanks for your help. Yours, Jon. Dylan wrote:
On Sunday 20 Feb 2005 19:41 pm, Jonathan Brooks wrote: <SNIP>
I notice from a few other threads that other people are having problems getting the list of servers to appear in YOU - does this relate to my problem -
Probably not.
are all of SuSE/Novell's servers screwed.
No.
To summarise, I can connect to the server - but whenever I try to download patches, YOU downloads them and as soon as it finishes complains that the RPM signature is invalid!
There has to be a solution other than reinstalling!!!!!!!!!!!
Come on, somebody must have an idea of how to fix this????
Try reinstalling the package suse-build-key-xxxx.noarch.rpm from the original installation source/media.
Dylan
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
* Jonathan Brooks <jonathan.brooks@human-anatomy.oxford.ac.uk> [02-20-05 15:15]:
Thanks - at last I seem to be getting somewhere. I have downloaded the suse-build-key rpm, but when I come to install it:
rpm -Uhv suse-build-key....
It states that it is already installed. How do I get round this problem?
man rpm will give you the answer. This is what man pages are for. -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery
Thanks that's hugely helpful ;) Not being familiar with all 900 lines of the man page I eventually found --force as an option. I.e. rpm --force -ihv suse-build-key-1.blahblah which works. However, is there something helpful in the man page for when that doesn't fix the problem I am having - I still get the same error. Cheers, Jon. Patrick Shanahan wrote:
* Jonathan Brooks <jonathan.brooks@human-anatomy.oxford.ac.uk> [02-20-05 15:15]:
Thanks - at last I seem to be getting somewhere. I have downloaded the suse-build-key rpm, but when I come to install it:
rpm -Uhv suse-build-key....
It states that it is already installed. How do I get round this problem?
man rpm
will give you the answer. This is what man pages are for.
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
On Sunday 20 Feb 2005 20:13 pm, Jonathan Brooks wrote:
Hi Dylan,
Thanks - at last I seem to be getting somewhere. I have downloaded the suse-build-key rpm, but when I come to install it:
rpm -Uhv suse-build-key....
try rpm -ivh suse-build-key-xxxx...rpm --force No garuntees tho Dylan
It states that it is already installed. How do I get round this problem?
Thanks for your help.
Yours, Jon.
Dylan wrote:
On Sunday 20 Feb 2005 19:41 pm, Jonathan Brooks wrote: <SNIP>
I notice from a few other threads that other people are having problems getting the list of servers to appear in YOU - does this relate to my problem -
Probably not.
are all of SuSE/Novell's servers screwed.
No.
To summarise, I can connect to the server - but whenever I try to download patches, YOU downloads them and as soon as it finishes complains that the RPM signature is invalid!
There has to be a solution other than reinstalling!!!!!!!!!!!
Come on, somebody must have an idea of how to fix this????
Try reinstalling the package suse-build-key-xxxx.noarch.rpm from the original installation source/media.
Dylan
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
-- "I see your Schwartz is as big as mine" -Dark Helmet
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Jon, Patrick's "man rpm" and searching for "sig" gets you to where you can figure out the solution, but I'd really like to know how the problem came about in the first place? I've installed and updated by ftp a number of times and not run into this. The first time I bought the boxed Pro set and my CD-ROM drive died. I made the boot and module floppies on another machine, booted and loaded the modules I needed and it just worked. It took most of the night but it worked. So, would you mind sharing all the steps you took to get this installation under way? - - Carl - -- ____________________________________________________________________ C. E. Hartung Business Development & Support Services http://www.cehartung.com/ carlh@cehartung.com Dover Foxcroft, Maine, USA Public Key #0x68396713 Reg. Linux User #350527 http://counter.li.org/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFCGOeXusxgymg5ZxMRAph/AJ9czhUYPWwijo9jg7t3PoJByG9rXgCfRVc1 Z6gka4PfREhUByJcXoV4UvE= =p2p7 -----END PGP SIGNATURE-----
Sure thing.... I am using vmware workstation 5 Beta RC2 running on WindowsXP, and have installed SuSE 9.2 - network install (source ftp.mirrorservice.org). Installation seemed to go smoothly until the end, when Yast tries to detect network connectivity and run YOU for the first time. This failed - but since it is an optional step in the installation I wasn't too concerned. After I rebooted the VM, I installed vmware-tools (which is probably irrelevant to this problem), and checked on networking, and everything seemed to be working fine. The machine had a DHCP assigned IP, I could browse the web, etc,etc. The first (and only) problem I have observed with the system is when running YOU. Patch downloads, YOU complains, if I click on details I see: ERROR(You:RPM has invalid signature.) Incidentally, on the suggestion of another user I have reinstalled the RPM: suse-build-key-1.0-663.1.rpm (downloaded from ftp.suse.com) with the command: rpm --force -ihv suse-build...... this completes OK with the message "importing SuSE build key to rpm keyring ....done" However, this has not fixed my problem - I still get the same error message. Are there some other steps I need to take? Cheers, Jon. Carl E. Hartung wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi Jon,
Patrick's "man rpm" and searching for "sig" gets you to where you can figure out the solution, but I'd really like to know how the problem came about in the first place?
I've installed and updated by ftp a number of times and not run into this. The first time I bought the boxed Pro set and my CD-ROM drive died. I made the boot and module floppies on another machine, booted and loaded the modules I needed and it just worked. It took most of the night but it worked.
So, would you mind sharing all the steps you took to get this installation under way?
- - Carl
- -- ____________________________________________________________________ C. E. Hartung Business Development & Support Services http://www.cehartung.com/ carlh@cehartung.com Dover Foxcroft, Maine, USA Public Key #0x68396713 Reg. Linux User #350527 http://counter.li.org/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCGOeXusxgymg5ZxMRAph/AJ9czhUYPWwijo9jg7t3PoJByG9rXgCfRVc1 Z6gka4PfREhUByJcXoV4UvE= =p2p7 -----END PGP SIGNATURE-----
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
On Sunday 20 February 2005 21.27, Jonathan Brooks wrote:
Sure thing....
I am using vmware workstation 5 Beta RC2 running on WindowsXP, and have installed SuSE 9.2 - network install (source ftp.mirrorservice.org). Installation seemed to go smoothly until the end, when Yast tries to detect network connectivity and run YOU for the first time. This failed - but since it is an optional step in the installation I wasn't too concerned.
After I rebooted the VM, I installed vmware-tools (which is probably irrelevant to this problem), and checked on networking, and everything seemed to be working fine. The machine had a DHCP assigned IP, I could browse the web, etc,etc. The first (and only) problem I have observed with the system is when running YOU. Patch downloads, YOU complains, if I click on details I see: ERROR(You:RPM has invalid signature.)
Incidentally, on the suggestion of another user I have reinstalled the RPM: suse-build-key-1.0-663.1.rpm (downloaded from ftp.suse.com) with the command: rpm --force -ihv suse-build......
this completes OK with the message "importing SuSE build key to rpm keyring ....done"
However, this has not fixed my problem - I still get the same error message. Are there some other steps I need to take?
Cheers, Jon.
Carl E. Hartung wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hi Jon,
Patrick's "man rpm" and searching for "sig" gets you to where you can figure out the solution, but I'd really like to know how the problem came about in the first place?
I've installed and updated by ftp a number of times and not run into this. The first time I bought the boxed Pro set and my CD-ROM drive died. I made the boot and module floppies on another machine, booted and loaded the modules I needed and it just worked. It took most of the night but it worked.
So, would you mind sharing all the steps you took to get this installation under way?
- - Carl
- -- ____________________________________________________________________ C. E. Hartung Business Development & Support Services http://www.cehartung.com/ carlh@cehartung.com Dover Foxcroft, Maine, USA Public Key #0x68396713 Reg. Linux User #350527 http://counter.li.org/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFCGOeXusxgymg5ZxMRAph/AJ9czhUYPWwijo9jg7t3PoJByG9rXgCfRVc1 Z6gka4PfREhUByJcXoV4UvE= =p2p7 -----END PGP SIGNATURE-----
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
Does it tell you WHAT update package lacks the signature? It MIGHT be that the provider of that specific package (that fails) just plain forgot to sign it, and thus you get an unrecoverable error from RPM. This happens a lot if you use APT. Especially of you use a repository "outside" the SuSE approved ones. -- /Rikard --------------------------------------------------------------- Rikard Johnels email : rikjoh@norweb.se Web : http://www.rikjoh.com/users/rikjoh Mob : +46 735 05 51 01 PGP : 0x461CEE56 ---------------------------------------------------------------
* Rikard Johnels <rikjoh@norweb.se> [02-20-05 16:05]: - --full-quote-removed---
Does it tell you WHAT update package lacks the signature? It MIGHT be that the provider of that specific package (that fails) just plain forgot to sign it, and thus you get an unrecoverable error from RPM. This happens a lot if you use APT. Especially of you use a repository "outside" the SuSE approved ones.
There are ways to install rpms and to install via apt and to disregard signatures. IIANM, you can also apply a signature to a package. those man pages solve all sorts of problems. -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery
On Sunday 20 February 2005 22.08, Patrick Shanahan wrote:
* Rikard Johnels <rikjoh@norweb.se> [02-20-05 16:05]:
- --full-quote-removed---
Does it tell you WHAT update package lacks the signature? It MIGHT be that the provider of that specific package (that fails) just plain forgot to sign it, and thus you get an unrecoverable error from RPM. This happens a lot if you use APT. Especially of you use a repository "outside" the SuSE approved ones.
There are ways to install rpms and to install via apt and to disregard signatures. IIANM, you can also apply a signature to a package.
those man pages solve all sorts of problems. -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery
Thats not the point. The point is (unless i am totally misstaken) that the updated failed due to missing signatures. The one thing you DON'T want to happen on a system. Ok if you install something manually via RPM, apt or Yast. Then its another thing. But the productionsystem should (In my mind) update cleanly without having to resort to "magic tinkering" to get it to. -- /Rikard --------------------------------------------------------------- Rikard Johnels email : rikjoh@norweb.se Web : http://www.rikjoh.com/users/rikjoh Mob : +46 735 05 51 01 PGP : 0x461CEE56 ---------------------------------------------------------------
Hi, You're RIGHT - you ARE mistaken - all of the SuSE patches fail to install. I have only ever tried to update from the servers listed in YOU. I have never used apt. So the problem is something fundamental. See follow up email. Cheers, Jon. Rikard Johnels wrote:
On Sunday 20 February 2005 22.08, Patrick Shanahan wrote:
* Rikard Johnels <rikjoh@norweb.se> [02-20-05 16:05]:
- --full-quote-removed---
Does it tell you WHAT update package lacks the signature? It MIGHT be that the provider of that specific package (that fails) just plain forgot to sign it, and thus you get an unrecoverable error from RPM. This happens a lot if you use APT. Especially of you use a repository "outside" the SuSE approved ones.
There are ways to install rpms and to install via apt and to disregard signatures. IIANM, you can also apply a signature to a package.
those man pages solve all sorts of problems. -- Patrick Shanahan Registered Linux User #207535 http://wahoo.no-ip.org @ http://counter.li.org HOG # US1244711 Photo Album: http://wahoo.no-ip.org/gallery
Thats not the point. The point is (unless i am totally misstaken) that the updated failed due to missing signatures. The one thing you DON'T want to happen on a system. Ok if you install something manually via RPM, apt or Yast. Then its another thing. But the productionsystem should (In my mind) update cleanly without having to resort to "magic tinkering" to get it to.
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
Jonathan Brooks wrote:
Incidentally, on the suggestion of another user I have reinstalled the
RPM: suse-build-key-1.0-663.1.rpm (downloaded from ftp.suse.com) with the command: rpm --force -ihv suse-build......
this completes OK with the message "importing SuSE build key to rpm
keyring ....done"
However, this has not fixed my problem - I still get the same error
message. Are there some other steps I need to take?
Maybe you have confused rpm with multiple keys. What does rpm -qa gpg-pubkey* give? Are there any duplicates? -- Joe Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Registered Linux user 231871
Joe, I think you might have hit the nail on the head. rpm -qa gpg-pubkey* returns nothing. So I followed an earlier suggestion by yetanothergeek (aka Jeff) and imported gpg-pubkey-... (see earlier mail), following that rpm -qa gpg-pubkey* still gave nothing, so I reinstalled the suse-build-key- rpm and ran rpm --rebuilddb I.e. a bit of a belt and braces approach. Any hey presto YOU works!!!!! Joe and Jeff are geniuses!!! Thanks for your perseverance. A much obliged Jon. Joe Morris (NTM) wrote:
Jonathan Brooks wrote:
Incidentally, on the suggestion of another user I have reinstalled the
RPM: suse-build-key-1.0-663.1.rpm (downloaded from ftp.suse.com) with the command: rpm --force -ihv suse-build......
this completes OK with the message "importing SuSE build key to rpm
keyring ....done"
However, this has not fixed my problem - I still get the same error
message. Are there some other steps I need to take?
Maybe you have confused rpm with multiple keys. What does rpm -qa gpg-pubkey* give? Are there any duplicates?
-- Jonathan Brooks (Ph.D.) Research Fellow PaIN Group, Department of Human Anatomy & Genetics University of Oxford, South Parks Road, Oxford, OX1 3QX tel: +44(0)1865-282654 fax: +44(0)1865-282656
participants (6)
-
Carl E. Hartung -
Dylan -
Joe Morris (NTM) -
Jonathan Brooks -
Patrick Shanahan -
Rikard Johnels