Hi

with a /etc/apt/apt.conf config that has
APT::Get::AllowUnauthenticated 0;

which I now think means do NOT allow unathenticated downloads

I am getting synaptic unathenticated error message prior to completing the download. Altho I know I can now change that config file to remove the warning I really would like to fix this error.

2) From reading at another forum, Mepis may have an issue with gpg public keys for whatever my repository is for the relevant download.

Mention is made of trying to fix the error by installing the correct key....but I do not know how to get that key.

3) Any Mepis users or Debian users (I am not fussy heh heh) know possible solutions to try.

4) I have tried the following without luck

a) su with
apt-get clean
apt-get autoclean

b) su with
apt-get
apt-get install (desired package)

---this gives an error about authenication of course


any assistance would be greatly appreciated.

if you can not help thanks for reading my fumbling efforts to move off Mandriva to a Debian style distro.

Maybe this thread at DebCentral.org will be helpful?


sleepy

thanks sleepy

altho I am using synaptic.....I suppose I will have to learn to use apt.

I will only post back if I have further questions.

thanks again

Hmm...sorry that my link didn't deal directly with Synaptic. I saw that you had tried a few apt-get commands and thought that you were familiar with both Synaptic and apt.

Hopefully it will still help you solve your problem. :-\

Best of luck,


sleepy

There are authentication files available, typically either on the same site or referenced at the site containing the repositories that you are pointing to. I do not have an example handy, otherwise I would give you one. But for example, you can look somewhere around http://www.us.debian.org/mirror/list and see if there is an authentication file associated with a specific mirror or distribution. ftp://debian.lcs.mit.edu/debian/README.html may get you slightly closer to one of the files you need. Could ftp://debian.lcs.mit.edu/debian/dist...le/Release.gpg be an example of the kind of thing you need?

masinick

I think you are right umm but I have been away all weekend so have yet to test.

I will now report back when I get a chance.

Thanks everyone for their help.

I will report back either way in case it helps others.

to anyone

I tried the link offered by masinick and you can read it with the firefox web browsers.
ftp://debian.lcs.mit.edu/debian/dist...le/Release.gpg

2) then I tried to do the same with one of my repositories and its got gpg file....but I can not use the browser.

Instead it wants me to try and either download it or open it with Kgpg.

This intrigues me as the files both end in .gpg so it can not be a KDE association issue...I hope...but looks to be a local gpg issue.

a) here is the gpg file for others to try
http://apt.mepis.org/mepis32-6.5/dis...is/Release.gpg

b) but the link in repository is not everything up to Release.
its only this
http://apt.mepis.org/mepis32-6.5

does this mean as I can download stuff...there is no problem or do I have a setting issue?

3) and staying with the possibility its my configs here is something else others may wish to check

in /etc/apt
root@3[apt]# ls -al
total 52
drwxr-xr-x 4 root root 4096 2007-04-17 09:02 .
drwxr-xr-x 107 root root 12288 2007-06-13 12:36 ..
-rw-r--r-- 1 root root 146 2007-06-13 13:25 apt.conf
drwxr-xr-x 2 root root 4096 2006-12-13 15:24 apt.conf.d
-rw-r--r-- 1 root root 2381 2005-09-27 07:44 apt-file.conf
-rwxr--r-- 1 root root 102 2006-03-05 08:34 preferences
-rw------- 1 root root 0 2006-06-14 20:05 secring.gpg
-rw-r--r-- 1 root root 982 2007-06-13 13:04 sources.list
drwxr-xr-x 2 root root 4096 2006-02-22 02:38 sources.list.d
-rw------- 1 root root 1200 2006-06-14 20:05 trustdb.gpg
-rw-r--r-- 1 root root 7166 2007-01-09 02:20 trusted.gpg


why is there a zero byte file secring.gpg ....is that normal?

thanks for any advice.

ok more problems so lets start again.

I restored an old partimage and re-checked my /etc/apt/apt.conf and its currently this
APT Default-Release "mepis";
APT Cache-Limit 20000000;
APT Get Purge;
APT Get AllowUnauthenticated 1;
Acquire cdrom Mount "/media/cdrom";

Opposite to what I wrote above.....allowunauthenticated 1 which I thought meant yes actually looks like no.....wtf???

2) re-tested synaptic for a file called 2vcard....the top file for a std mepis 6.5 that is new.....gives an unauthenticated error screen as this

http://www.filehigh.com/viewimg.php?f=38573&i=437000

then I de-selected it and run apt-get like this

root@1[gordy]# apt-get install 2vcard
Reading package lists... Done
Building dependency tree... Done
The following NEW packages will be installed:
2vcard
0 upgraded, 1 newly installed, 0 to remove and 20 not upgraded.
Need to get 14.2kB of archives.
After unpacking 111kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
2vcard
Authentication warning overridden.
Get:1 http://archive.ubuntu.com dapper/universe 2vcard 0.5-1ubuntu1 [14.2kB]
Fetched 14.2kB in 2s (6309B/s)
Selecting previously deselected package 2vcard.
(Reading database ... 74052 files and directories currently installed.)
Unpacking 2vcard (from .../2vcard_0.5-1ubuntu1_i386.deb) ...
Setting up 2vcard (0.5-1ubuntu1) ...


so what is going on????

grrrrrr

looks like it installed it. so whats the problem?

to import a key, from a terminal...

gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 123456789

gpg --armor --export 123456789 | sudo apt-key add -

apt-get update

1223456789 == key that is missing, or that synaptic/ apt is complaining about.

rshaw

yes it installed and thanks for speedy reply

but I am trying to fix the un-authenticated errors I am getting in using synaptic.....and others suggest I need to get the gpg key using apt or apt-get

but I can not see a key like 1234567etc in the output I have listed for apt-get.

any clues how I get apt-get to give me a key?

2) any clues why apt-get is over-riding my apt.conf file?

thanks for any help

is this happening with all packages from dapper/universe or just this one? if just this one, than the package didn't get signed (common)/got signed with a different key

ok thanks for that suggestion but I am still struggling.

assuming this link Get:1 http://archive.ubuntu.com dapper/universe 2vcard 0.5-1ubuntu1 [14.2kB] is my source asfarasIcantell using a browser I get this

http://archive.ubuntu.com/ubuntu/dis...er/Release.gpg

so then I tried this

wget http://archive.ubuntu.com/ubuntu/dis...er/Release.gpg -O - | sudo apt-key add -
--10:01:11-- http://archive.ubuntu.com/ubuntu/dis...er/Release.gpg
=> `-'
Resolving archive.ubuntu.com... 91.189.89.6, 91.189.89.8, 91.189.88.31
Connecting to archive.ubuntu.com|91.189.89.6|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 189 [text/plain]

100%[======================================>] 189 --.--K/s

10:01:12 (22.53 MB/s) - `-' saved [189/189]

gpg: no valid OpenPGP data found.

--------

there could be a number of things going wrong but as the release.gpg file exists in the above link....I do not know why the wget technique is failing.....yes I am new to Mepis.

any further clues?

so a google of gpg issue suggests testing gpg

gpg --version
gpg (GnuPG) 1.4.2.2
Copyright (C) 2005 Free Software Foundation, Inc.
This program comes with ABSOLUTELY NO WARRANTY.
This is free software, and you are welcome to redistribute it
under certain conditions. See the file COPYING for details.

Home: ~/.gnupg
Supported algorithms:
Pubkey: RSA, RSA-E, RSA-S, ELG-E, DSA
Cipher: 3DES, CAST5, BLOWFISH, AES, AES192, AES256, TWOFISH
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512
Compression: Uncompressed, ZIP, ZLIB, BZIP2


look ok. so then I tried this

gpg /dev/null
gpg: processing message failed: eof

hmmm now I am stuck

Does anyone know how to fix synaptic unauthenticated error without turning off config setting?