LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware > Slackware - ARM
Reload this Page [SOLVED] slarm64: slackpkg GPG check fails
User Name
Password
Slackware - ARM This forum is for the discussion of Slackware ARM.

Notices


Reply
Page 1 of 2 1 2
  Search this Thread
Old 10-04-2021, 01:04 PM   #1
slacksam
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Slackware, Salix, slarm64
Posts: 210

Rep: Reputation: 37
slarm64: slackpkg GPG check fails

Lately, on my Rock-Pi 4 with slarm64, when launching
Code:
# slackpkg update && slackpkg upgrade-all
I get this error message:
Code:
[...]
                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2...                                                      
--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2                                                                    
Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    
Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                 
HTTP request sent, awaiting response... 200 OK                                 
Length: 14 [application/x-bzip2]                                               
Saving to: ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’                                                                                                         

/tmp/slackpkg.mJ4R82/testi 100%[=====================================>]      14  --.-KB/s    in 0s                                                             

2021-10-04 19:49:36 (483 KB/s) - ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’ saved [14/14]                                                                     

                Checksums                                                      
                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5...                                                             
--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5                                                                           
Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    
Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                 
HTTP request sent, awaiting response... 200 OK                                 
Length: 341770 (334K)                                                          
Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’                                

/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>] 333.76K  1.20MB/s    in 0.3s                                                           

2021-10-04 19:49:36 (1.20 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’ saved [341770/341770]                                                                   

                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc...                                                         
--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc                                                                       
Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    
Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                 
HTTP request sent, awaiting response... 200 OK                                 
Length: 691 [application/pgp-signature]                                        
Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’                            

/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>]     691  --.-KB/s    in 0s                                                             

2021-10-04 19:49:36 (19.3 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’ saved [691/691]                                                                     


                ERROR: Verification of the  gpg signature on CHECKSUMS.md5                                                                                     
                       failed! This could mean that the file is out of date                                                                                    
                       or has been tampered with. If you use mirrors.slackware.com                                                                             
                       as your mirror, this could also mean that the mirror to                                                                                 
                       which you got redirected is not yet updated with the most                                                                               
                       recent changes in the Slackware tree.                                                                                                   



You need the GPG key of slarm64 AArch64 <security@slarm64.org>.                                                                                                
To download and install that key, run:                                         

        # slackpkg update gpg                                                  

You can disable GPG checking too, but it is not a good idea.                                                                                                   
To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG                                                                                        
variable to off - you can see an example in the original slackpkg.conf.new                                                                                     
file distributed with slackpkg.
After
Code:
# slackpkg update gpg

                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY
                        Slackware Linux Project's GPG key added
doing
Code:
# slackpkg update && slackpkg upgrade-all
still fails.

Changing the mirror doesn't help either.
For updating my system I need to disable CHECKGPG in /etc/slackpkg/slackpkg.conf, but that's not recommended.

Any ideas how I can get rid of this error without disabling CHECKGPG?
 
Old 10-04-2021, 04:26 PM   #2
pchristy
Senior Member
 
Registered: Oct 2012
Location: South Devon, UK
Distribution: Slackware
Posts: 1,120

Rep: Reputation: Disabled
Working OK on SlackwareUK tonight. There was a problem over the week-end, which now seems resolved.

--
Pete
 
Old 10-05-2021, 01:01 AM   #3
slacksam
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Slackware, Salix, slarm64
Posts: 210

Original Poster
Rep: Reputation: 37
On my system it still fails, also with the slackware.uk mirror:
Code:
# slackpkg update && slackpkg upgrade-all
[...]
                        Downloading http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc...
--2021-10-05 07:56:56--  http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc
Resolving slackware.uk (slackware.uk)... 2a02:2498:e004:2a::a861, 216.119.155.61
Connecting to slackware.uk (slackware.uk)|2a02:2498:e004:2a::a861|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 691 [application/pgp-signature]
Saving to: ‘/tmp/slackpkg.LWPBma/CHECKSUMS.md5.asc’

/tmp/slackpkg.LWPBma/CHECK 100%[=====================================>]     691  --.-KB/s    in 0s      

2021-10-05 07:56:56 (23.8 MB/s) - ‘/tmp/slackpkg.LWPBma/CHECKSUMS.md5.asc’ saved [691/691]


                ERROR: Verification of the  gpg signature on CHECKSUMS.md5
                       failed! This could mean that the file is out of date
                       or has been tampered with. If you use mirrors.slackware.com
                       as your mirror, this could also mean that the mirror to
                       which you got redirected is not yet updated with the most
                       recent changes in the Slackware tree.



You need the GPG key of slarm64 AArch64 <security@slarm64.org>.
To download and install that key, run:

        # slackpkg update gpg

You can disable GPG checking too, but it is not a good idea.
To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG
variable to off - you can see an example in the original slackpkg.conf.new
file distributed with slackpkg.
 
Old 10-05-2021, 01:49 AM   #4
pchristy
Senior Member
 
Registered: Oct 2012
Location: South Devon, UK
Distribution: Slackware
Posts: 1,120

Rep: Reputation: Disabled
Code:
You need the GPG key of slarm64 AArch64 <security@slarm64.org>.
To download and install that key, run:

        # slackpkg update gpg
Could this be the problem?

Just checked again, and its fine here on the SlackwareUK mirror.

--
Pete
 
Old 10-05-2021, 01:58 AM   #5
slacksam
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Slackware, Salix, slarm64
Posts: 210

Original Poster
Rep: Reputation: 37
Quote:
Code:
 You need the GPG key of slarm64 AArch64 <security@slarm64.org>.
To download and install that key, run:

          # slackpkg update gpg
Could this be the problem?
As I already wrote in my first post, this doesn't help.
 
Old 10-05-2021, 04:01 AM   #6
pchristy
Senior Member
 
Registered: Oct 2012
Location: South Devon, UK
Distribution: Slackware
Posts: 1,120

Rep: Reputation: Disabled
I'm out of ideas then! Mine updated OK late last night, and no changes this morning, so I can't re-try.

I do keep a local copy of both Slackware64-current and slarm64-current on a local NAS here - not really necessary for slarm64, but I have 3 or 4 machines running slackware and this saves on bandwidth! I rsync to slackwareUK daily and then update from there. GPG is still checked, though.

Might be worth trying rsyncing a local drive and then updating from there?

Otherwise you might have to wait and see if anyone else is having problems. Not sure what else to suggest.

--
Pete
 
Old 10-05-2021, 05:18 AM   #7
slacksam
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Slackware, Salix, slarm64
Posts: 210

Original Poster
Rep: Reputation: 37
I also have a local host system syncing a mirror locally, that's being updated daily, but setting the path as mirror to /etc/slackpkg/mirrors doesn't solve that issue:
Code:
# slackpkg update gpg && slackpkg update && slackpkg upgrade-all

                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY
                        Slackware Linux Project's GPG key added


                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY
                        Slackware Linux Project's GPG key added
Updating the package lists...
        Downloading...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/CHECKSUMS.md5.asc...
Files //var/lib/slackpkg/CHECKSUMS.md5.asc and /tmp/slackpkg.guujH6/CHECKSUMS.md5.asc differ

        Downloading...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/ChangeLog.txt...
                List of all files
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/patches/MANIFEST.bz2...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/slarm64/MANIFEST.bz2...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/extra/MANIFEST.bz2...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/pasture/MANIFEST.bz2...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/testing/MANIFEST.bz2...
                Checksums
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/CHECKSUMS.md5...
                        Linking /sshfs/rps/Mirror/Slackware/slarm64-current/CHECKSUMS.md5.asc...

                ERROR: Verification of the  gpg signature on CHECKSUMS.md5
                       failed! This could mean that the file is out of date
                       or has been tampered with. If you use mirrors.slackware.com
                       as your mirror, this could also mean that the mirror to
                       which you got redirected is not yet updated with the most
                       recent changes in the Slackware tree.



You need the GPG key of slarm64 AArch64 <security@slarm64.org>.
To download and install that key, run:

        # slackpkg update gpg

You can disable GPG checking too, but it is not a good idea.
To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG
variable to off - you can see an example in the original slackpkg.conf.new
file distributed with slackpkg.
 
Old 10-05-2021, 06:08 AM   #8
pchristy
Senior Member
 
Registered: Oct 2012
Location: South Devon, UK
Distribution: Slackware
Posts: 1,120

Rep: Reputation: Disabled
OK, that's me out of ideas, then! Sorry!

--
Pete
 
Old 10-05-2021, 11:45 AM   #9
sndwvs
Senior Member
 
Registered: Aug 2014
Posts: 1,915

Rep: Reputation: Disabled
Quote:
Originally Posted by slacksam View Post
Lately, on my Rock-Pi 4 with slarm64, when launching
Code:
# slackpkg update && slackpkg upgrade-all
I get this error message:
Code:
[...]
                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2...                                                      
--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/testing/MANIFEST.bz2                                                                    
Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    
Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                 
HTTP request sent, awaiting response... 200 OK                                 
Length: 14 [application/x-bzip2]                                               
Saving to: ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’                                                                                                         

/tmp/slackpkg.mJ4R82/testi 100%[=====================================>]      14  --.-KB/s    in 0s                                                             

2021-10-04 19:49:36 (483 KB/s) - ‘/tmp/slackpkg.mJ4R82/testing-MANIFEST.bz2’ saved [14/14]                                                                     

                Checksums                                                      
                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5...                                                             
--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5                                                                           
Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    
Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                 
HTTP request sent, awaiting response... 200 OK                                 
Length: 341770 (334K)                                                          
Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’                                

/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>] 333.76K  1.20MB/s    in 0.3s                                                           

2021-10-04 19:49:36 (1.20 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5’ saved [341770/341770]                                                                   

                        Downloading http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc...                                                         
--2021-10-04 19:49:36--  http://dl.slarm64.org/slarm64/slarm64-current/CHECKSUMS.md5.asc                                                                       
Resolving dl.slarm64.org (dl.slarm64.org)... 193.151.15.132                                                                                                    
Connecting to dl.slarm64.org (dl.slarm64.org)|193.151.15.132|:80... connected.                                                                                 
HTTP request sent, awaiting response... 200 OK                                 
Length: 691 [application/pgp-signature]                                        
Saving to: ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’                            

/tmp/slackpkg.mJ4R82/CHECK 100%[=====================================>]     691  --.-KB/s    in 0s                                                             

2021-10-04 19:49:36 (19.3 MB/s) - ‘/tmp/slackpkg.mJ4R82/CHECKSUMS.md5.asc’ saved [691/691]                                                                     


                ERROR: Verification of the  gpg signature on CHECKSUMS.md5                                                                                     
                       failed! This could mean that the file is out of date                                                                                    
                       or has been tampered with. If you use mirrors.slackware.com                                                                             
                       as your mirror, this could also mean that the mirror to                                                                                 
                       which you got redirected is not yet updated with the most                                                                               
                       recent changes in the Slackware tree.                                                                                                   



You need the GPG key of slarm64 AArch64 <security@slarm64.org>.                                                                                                
To download and install that key, run:                                         

        # slackpkg update gpg                                                  

You can disable GPG checking too, but it is not a good idea.                                                                                                   
To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG                                                                                        
variable to off - you can see an example in the original slackpkg.conf.new                                                                                     
file distributed with slackpkg.
After
Code:
# slackpkg update gpg

                        Getting key from https://www.slackware.com/infra/keys/arm/GPG-KEY
                        Slackware Linux Project's GPG key added
doing
Code:
# slackpkg update && slackpkg upgrade-all
still fails.

Changing the mirror doesn't help either.
For updating my system I need to disable CHECKGPG in /etc/slackpkg/slackpkg.conf, but that's not recommended.

Any ideas how I can get rid of this error without disabling CHECKGPG?
check which keys are installed
Code:
sudo gpg --list-keys
Quote:
pub 2048R/C5DB61BC 2015-04-21
uid Your Name (Optional Comment)
sub 2048R/18C601D3 2015-04-21
remove all mentions slarm64 AArch64 <security[a]slarm64.org>
Code:
sudo gpg --delete-keys C5DB61BC
 
Old 10-05-2021, 02:42 PM   #10
slacksam
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Slackware, Salix, slarm64
Posts: 210

Original Poster
Rep: Reputation: 37
@sndwvs:
According to your advice, I deleted the slarm64 related gpg key, but I also had a gpg key of "Slackware ARM", which I also deleted. Then I ran "slackpkg update gpg", which added the key of "Slackware ARM", but a "slackpkg upgrade-all" says "You need the GPG key of slarm64 AArch64".

Here are the steps:
Code:
# gpg --list-keys
/root/.gnupg/pubring.gpg
------------------------
pub   1024D/9C7BA3B6 2007-01-27
uid                  SlackBuilds.org Development Team <slackbuilds-devel[at]slackbuilds.org>
sub   2048g/C575D49B 2007-01-27
Code:
# slackpkg update

[...]

                        Downloading http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc...
--2021-10-05 21:23:36--  http://slackware.uk/slarm64/slarm64-current/CHECKSUMS.md5.asc
Resolving slackware.uk (slackware.uk)... 2a02:2498:e004:2a::a861, 216.119.155.61
Connecting to slackware.uk (slackware.uk)|2a02:2498:e004:2a::a861|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 691 [application/pgp-signature]
Saving to: ‘/tmp/slackpkg.utnCiQ/CHECKSUMS.md5.asc’

/tmp/slackpkg.utnCiQ/CHECK 100%[=====================================>]     691  --.-KB/s    in 0s      

2021-10-05 21:23:36 (11.4 MB/s) - ‘/tmp/slackpkg.utnCiQ/CHECKSUMS.md5.asc’ saved [691/691]


                ERROR: Verification of the  gpg signature on CHECKSUMS.md5
                       failed! This could mean that the file is out of date
                       or has been tampered with. If you use mirrors.slackware.com
                       as your mirror, this could also mean that the mirror to
                       which you got redirected is not yet updated with the most
                       recent changes in the Slackware tree.
Code:
# gpg --list-keys
/root/.gnupg/pubring.gpg
------------------------
pub   1024D/9C7BA3B6 2007-01-27
uid                  SlackBuilds.org Development Team <slackbuilds-devel[at]slackbuilds.org>
sub   2048g/C575D49B 2007-01-27

pub   2048R/1623FC33 2014-06-16
uid                  Slackware ARM (Slackware ARM Linux Project) <mozes[at]slackware.com>
sub   2048R/5EA4DF60 2014-06-16
Code:
# slackpkg upgrade-all

You need the GPG key of slarm64 AArch64 <security[at]slarm64.org>.
To download and install that key, run:

        # slackpkg update gpg

You can disable GPG checking too, but it is not a good idea.
To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG
variable to off - you can see an example in the original slackpkg.conf.new
file distributed with slackpkg.
Last edited by slacksam; 10-05-2021 at 02:45 PM.
 
Old 10-05-2021, 03:15 PM   #11
sndwvs
Senior Member
 
Registered: Aug 2014
Posts: 1,915

Rep: Reputation: Disabled
try to download and update the latest slackpkg first.
Quote:
pub 3072R/4690E354 2020-12-19 [expires: 2040-12-14]
uid slarm64 AArch64 <security[a]slarm64.org>
sub 3072R/91353E37 2020-12-19 [expires: 2040-12-14]
 
Old 10-05-2021, 04:47 PM   #12
slacksam
Member
 
Registered: Oct 2012
Location: Germany
Distribution: Slackware, Salix, slarm64
Posts: 210

Original Poster
Rep: Reputation: 37
Is slackpkg-15.0.7 the latest version?
This was already installed. I made a reinstall, but that didn't help.
 
Old 10-06-2021, 11:07 AM   #13
pchristy
Senior Member
 
Registered: Oct 2012
Location: South Devon, UK
Distribution: Slackware
Posts: 1,120

Rep: Reputation: Disabled
Whatever the issue is, it is something unique to your machine. Just updated slarm64-current here using slackpkg-15.0.7 with no issues.

All I can think of is to go through all the configuration files very carefully, and make sure everything is as it should be (only one mirror selected, etc).

Best of luck!

--
Pete
 
Old 10-06-2021, 11:53 AM   #14
sndwvs
Senior Member
 
Registered: Aug 2014
Posts: 1,915

Rep: Reputation: Disabled
Quote:
Originally Posted by slacksam View Post
Is slackpkg-15.0.7 the latest version?
This was already installed. I made a reinstall, but that didn't help.
from your output
Code:
gpg --list-keys
it is clear that the key is not being added.
check
Code:
ldd /usr/bin/curl
ldd /usr/bin/wget
 
Old 10-06-2021, 11:53 PM   #15
shelldweller
Member
 
Registered: Mar 2019
Distribution: Slackware
Posts: 300

Rep: Reputation: Disabled
This happens on all the new images that I build. My workaround is to just (as root):

Code:
wget http://dl.slarm64.org/slarm64/slarm64-current/GPG-KEY
(any mirror in the /etc/slackpkg/mirrors file should work for that)

and then:

Code:
gpg --import GPG-KEY
after that, slackpkg works as expected.

There is probably a more official way to do that, but this is my quick and dirty fix when I run into the same issue.
 
  


Reply
Page 1 of 2 1 2



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] slackpkg update fails gpg check; How do I fix it? maschelsea Slackware 5 03-11-2024 03:02 PM
[SOLVED] I have run slackpkg update gpg instead of slackpkg update amikoyan Slackware 13 08-15-2021 02:12 AM
[SOLVED] Update slarm64 md5/gpg issues? pchristy Slackware - ARM 16 02-21-2021 04:21 PM
gpg / gpg-agent -- Can't connect to /root/.gnupg/S.gpg-agent jrtayloriv Linux - Security 9 06-03-2019 10:06 AM
GPG: Bad session key gpg between gpg on linux and gpg gui on windows XP konqi Linux - Software 1 07-21-2009 09:37 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware > Slackware - ARM

All times are GMT -5. The time now is 02:22 PM.

Contact Us - Advertising Info - Rules - Privacy - LQ Merchandise - Donations - Contributing Member - LQ Sitemap -
Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration