[SOLVED] slackpkg: GPG signature verification on checksums.md5 failed

sombragris · 10-20-2017, 09:37 AM

Today when I was preparing to apply the latest round of -current updates, I ran 'slackpkg update' and got this message:

Code:

ERROR: Verification of the  gpg signature on CHECKSUMS.md5
       failed! This could mean that the file is out of date
       or has been tampered with.

Any ideas on how to solve this? Thanks!

GazL · 10-20-2017, 10:01 AM

It's possible that your mirror is corrupt, or hasn't completed updating.

Here's mine for reference:

Code:

ws1:/srv/slackware/slackware64-current$ ls -l CHECKSUMS.md5*
-rw-r--r-- 1 build build 854329 Oct 20 06:08 CHECKSUMS.md5
-rw-r--r-- 1 build build    163 Oct 20 06:08 CHECKSUMS.md5.asc
ws1:/srv/slackware/slackware64-current$ gpg --verify CHECKSUMS.md5.asc CHECKSUMS.md5
gpg: Signature made Fri 20 Oct 2017 06:08:06 BST using DSA key ID 40102233
gpg: Good signature from "Slackware Linux Project <security@slackware.com>"
ws1:/srv/slackware/slackware64-current$ sha256sum CHECKSUMS.md5
c43717089c173e9be90e9ea8c762467ca7185ca43866db9557d80bfab13e5e8b  CHECKSUMS.md5
ws1:/srv/slackware/slackware64-current$

You can either try again later, or swap to a different mirror.

sombragris · 10-20-2017, 10:38 AM

Thank you! Switched mirrors and everythig went fine.

a4z · 05-31-2018, 12:14 PM

just had the same problem, but my mirror was
http://mirrors.slackware.com/slackwa...ckware64-14.2/

problem is that we get no useful error message, which mirror provides a bad/corrupt file.

could this be improved?