[SOLVED] Did my update fail?

MAYBL8 · 02-29-2024, 12:07 PM

I get this message when I run slackpkg update:

ERROR: Verification of the gpg signature on checsums.md5 failed.

I tried deleting the /root/.gpupg folder and rerunning
slackpkg update gpg but still get the same error.
Thanks

Petri Kaukasoina · 02-29-2024, 12:17 PM

You could try another mirror.

Did gpg work before? Does 'ldd /usr/bin/gpg' tell you some library is not found?

MAYBL8 · 02-29-2024, 12:21 PM

Quote:

Originally Posted by Petri Kaukasoina

You could try another mirror.

Did gpg work before? Does 'ldd /usr/bin/gpg' tell you some library is not found?

no all of that looks fine.
I will try another mirror.

MAYBL8 · 02-29-2024, 12:25 PM

Tried a different mirror still get the same message.

Petri Kaukasoina · 02-29-2024, 01:14 PM

Try it manually. As root:

Code:

wget http://ftp.slackware.com/pub/slackware/slackware64-15.0/CHECKSUMS.md5
wget http://ftp.slackware.com/pub/slackware/slackware64-15.0/CHECKSUMS.md5.asc
ls -l CHECKSUMS.md5*
gpg CHECKSUMS.md5.asc

Did it tell it was a Good signature from "Slackware Linux Project <security@slackware.com>"?

The date of your machine may not be completely wrong for gpg.

MAYBL8 · 02-29-2024, 02:04 PM

all of that was fine except the very last command gave this:

gpg: Can't check signature: public key not found

Petri Kaukasoina · 02-29-2024, 02:10 PM

Quote:

Originally Posted by MAYBL8

all of that was fine except the very last command gave this:

gpg: Can't check signature: public key not found

'slackpkg update gpg' should have installed it. What does 'gpg --list-keys' tell you?

Code:

# gpg --list-keys
/root/.gnupg/pubring.gpg
---------------------------------
pub   1024D/40102233 2003-02-26 [expires: 2038-01-19]
uid                  Slackware Linux Project <security@slackware.com>
sub   1024g/4E523569 2003-02-26 [expires: 2038-01-19]

MAYBL8 · 02-29-2024, 02:44 PM

Quote:

Originally Posted by Petri Kaukasoina

'slackpkg update gpg' should have installed it. What does 'gpg --list-keys' tell you?

Code:

# gpg --list-keys
/root/.gnupg/pubring.gpg
---------------------------------
pub   1024D/40102233 2003-02-26 [expires: 2038-01-19]
uid                  Slackware Linux Project <security@slackware.com>
sub   1024g/4E523569 2003-02-26 [expires: 2038-01-19]

I would show you the commands results but I only have a cli on the slackware machine right now.
the command gpg --list-keys returns nothing
there is a file pubring.gpg

I looked in it but there is nothing in it.

Petri Kaukasoina · 02-29-2024, 02:55 PM

Quote:

Originally Posted by MAYBL8

I would show you the commands results but I only have a cli on the slackware machine right now.
the command gpg --list-keys returns nothing
there is a file pubring.gpg

I looked in it but there is nothing in it.

You checked it as root, didn't you? And "slackpkg update gpg" doesn't install the key?

Code:

# slackpkg update gpg                                                               

                        Getting key from https://www.slackware.com/infra/keys/GPG-KEY                                                                                           
                        Slackware Linux Project's GPG key added

#

MAYBL8 · 02-29-2024, 03:51 PM

The only user on the machine so far is root.

It has the line getting the key but it doesn't say the key was added.

Petri Kaukasoina · 02-29-2024, 11:43 PM

Try this:

Code:

root@acer:~# rm -rf /root/.gnupg
root@acer:~# wget https://www.slackware.com/infra/keys/GPG-KEY
--2024-03-01 07:42:01--  https://www.slackware.com/infra/keys/GPG-KEY
Resolving www.slackware.com (www.slackware.com)... 104.84.152.27, 95.101.142.201, 2a02:26f0:5200::b81f:ff1, ...
Connecting to www.slackware.com (www.slackware.com)|104.84.152.27|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1572 (1.5K)
Saving to: â

GPG-KEY                                 100%[=============================================================================>]   1.54K  --.-KB/s    in 0s      

2024-03-01 07:42:02 (324 MB/s) - â saved [1572/1572]

root@acer:~# gpg --import GPG-KEY
gpg: directory `/root/.gnupg' created
gpg: new configuration file `/root/.gnupg/gpg.conf' created
gpg: WARNING: options in `/root/.gnupg/gpg.conf' are not yet active during this run
gpg: keyring `/root/.gnupg/secring.gpg' created
gpg: keyring `/root/.gnupg/pubring.gpg' created
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 40102233: public key "Slackware Linux Project <security@slackware.com>" imported
gpg: Total number processed: 1
gpg:               imported: 1
root@acer:~# gpg --list-keys
/root/.gnupg/pubring.gpg
------------------------
pub   1024D/40102233 2003-02-26 [expires: 2038-01-19]
uid                  Slackware Linux Project <security@slackware.com>
sub   1024g/4E523569 2003-02-26 [expires: 2038-01-19]

root@acer:~#

MAYBL8 · 03-01-2024, 07:12 AM

Looks like that solved the issue.
It installed the keys.

I did however have to use the --no-check-certificate option because it had an error about a certificate.

Petri Kaukasoina · 03-01-2024, 08:32 AM

It's possible you miss package ca-certificates. You already missed libunistring. There could be other packages missing. To check, try:

Code:

slackpkg install slackware64

MAYBL8 · 03-01-2024, 08:50 PM

Ok I ran that command. It installed allot of files.
I ran the wget command again.
Same error:
Cannot verify www.slackware.com's certificate

Petri Kaukasoina · 03-02-2024, 03:13 AM

You can check if a package is installed:

Code:

# cd /var/lib/pkgtools/packages
# ls ca-cert*
ca-certificates-20240216-noarch-1_slack15.0

To upgrade it:

Code:

slackpkg upgrade ca-certificates

wget tells the reason why it cannot verify the certificate if you read the next line, for example without the ca-certificates package:

Code:

ERROR: cannot verify www.slackware.com's certificate, issued by 'CN=R3,O=Let\'s Encrypt,C=US':
  Unable to locally verify the issuer's authority.