apt-get GPG signature check unknow/illegal/corrupt
 

Hello and thanks for taking the time to read/answer this:

Am having this problem with apt-get, I use apt in a SuSe 9.3 box, so this just an example of the same problems that I have each time that I try to install any package.

Before installing apt I did an update to the system with YasT then I setup apt from rpms for SuSe 9.3 using "#rpm -Uhv *.rpm" and I also do a "check" of the installation with this #rpm -qa | grep -E "^apt-" this showme all the rpms installed properly, plus I do a "#apt-get check" and everything goes well.

Also I use on my /etc/apt/sources.list only this repository line:

rpm ftp://ftp.gwdg.de/pub/linux/suse/apt/ SuSE/9.3-i386 base update security

Later I changed that repository by this:

rpm ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.3-i386 update security base suser-rbos packman

Then it changed to this:

rpm ftp://ftp.gwdg.de/pub/linux/suse/apt SuSE/9.3-i386 suser-guru rpmkeys base update-drpm update-prpm update kde misc x-ati mozilla samba3 suser-rbos suser-jengelh suser-oc2pus suser-gbv usr-local-bin suser-tcousin suser-scorot suser-jogley funktronics packman packman-i686 kernel-of-the-day wine suse-people suse-projects security-prpm security

So the problems are that each time that I try to install a package I get this kind of error related to the GPG signatures:
======================================================
Get:1 ftp://ftp.gwdg.de SuSE/9.3-i386/suser-gbv amsn 0.94-0.gbv.1 [3214kB]
Fetched 3214kB in 3m33s (15,1kB/s)
Checking GPG signatures...
Unknown signature /var/cache/apt/archives/amsn_0.94-0.gbv.1_noarch.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#b7afc211)
E: Error(s) while checking package signatures:
0 unsigned package(s)
1 package(s) with unknown signatures
0 package(s) with illegal/corrupted signatures
E: Handler silently failed
=======================================================

I did chek this file, some sites recommend to change this file in the line GPG::Check true; to GPG::Check no;, but I think this is not a good idea so I leave the file as is. I mean something like this:
=======================================================
// Make GPG::Check no; to disable gpg checking
// It can still be used in combination with --checksig
GPG::Check true;
Scripts::PM::Pre:: gpg-checker.lua;
=======================================================

Any suggestions to solve this problem?

Best regards.

Thanks

-mofo

either change it to 'no' or install the keys. i've ran for years with it set to no, it's not a big deal. or do an 'apt search rpmkey' and install any/all with apt --no-checksig --no-post install <desired rpmkey >

now apt works like a charm!!
 

many thanks -+=rshaw=+-

your instructions where right, now apt works great.

thank you again.

-mofo