Bad Signatures on install

galliar · 02-15-2005, 01:18 PM

Hello,

When I go to install using rpmdrake, any installation fails giving me the message "Bad signatures" cannot open file xxxxxxx.rpm. I am using an ftp site called: ftp://ftp.mirrorservice.org/pub/Mand.../main_updates. I have tried other sites also and get the same error message. I am using the download version of Mandrake 10.1, the non-64 bit version. I get the same message on an entirely different system.

I am sure there must be something I am doing wrong. Has anybody else had this problem, and how did you fix it?

Regards,

Randy.

reddazz · 02-15-2005, 01:39 PM

It means the packages are not officially signed using the Mandrake gpg keys. You should still be able to install them though.

galliar · 02-15-2005, 03:41 PM

Hi,

I appreciate your response. The files will not install, and I have tested a handful of different packages, and different servers, but none will work. These are mirror servers. Is there a specific server I should be going to? Shouldn't all the mirror servers on Mandrakes list be authorized sources for RPM's? Thank you for your help also.

Regards,

Randy.

Padma · 02-15-2005, 04:10 PM

I think that message also shows up when your repository sources are not properly synched up with your urpmi database. In rpmdrake, there should be a button labeld "Update", or "Update sources", or some such (I am at work on a Win box, can't check my Mdk box right now

).

Or from the command line, "urpmi.update -all" should update your sources. (I think - IIRC)

Lakota · 02-15-2005, 04:15 PM

first off, use the "gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98" command as root to import the mandrake security team's gpg keys to your pc. Like so:

Code:

[don@x1-6-00-0a-e6-91-be-32 don]$ su
Password:
[root@x1-6-00-0a-e6-91-be-32 don]# gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
gpg: /root/.gnupg: directory created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 22458A98: public key "Mandrake Linux Security Team <security@mandrakesoft.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
[root@x1-6-00-0a-e6-91-be-32 don]#

Then try installing your updates again and see if the bad signature message is gone and all works well.

galliar · 02-15-2005, 05:24 PM

Hello,

I tried both of your suggestions, and I still get the message bad signatures. If I install off the CD, I don't get this message. I also updated the signature for the ftp source I was pointed to after using gpg command, and installs still will not work. Oh well, I'll eventually figure this out, probably finding out it is something very simple!!

I did look through the Mandrake doc, but it just says to put in the ftp address of the mirror server.

Thank you for your help.

I definately feel like a newbie!

reddazz · 02-15-2005, 05:30 PM

Some suggested you update your urpmi sources, try that and see if this resolves your problems. You may have to wait a few hours for the mirror you are using to sync with the main ftp site before all packages are available.