LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 11-25-2015, 11:42 AM   #1
lordbone
LQ Newbie
 
Registered: May 2009
Posts: 13

Rep: Reputation: 0
Exclamation Slackpkg wrong gpg signature on packages


Hello everyone,

I did a quick slackpkg update and upgrade-all today, on a slackware64-current box, and it seems some packages have the wrong gpg signature ?

Code:
==============================================================================
WARNING!        WARNING!        WARNING!        WARNING!        WARNING!
==============================================================================
One or more errors occurred while slackpkg was running:

libusb-compat-0.1.5-x86_64-2.txz:       gpg
libzip-1.0.1-x86_64-1.txz:      gpg
lilo-24.2-x86_64-1.txz: gpg
llvm-3.7.0-x86_64-2.txz:        gpg
lm_sensors-3.4.0-x86_64-1.txz:  gpg
lvm2-2.02.134-x86_64-1.txz:     gpg
make-4.1-x86_64-1.txz:  gpg
man-1.6g-x86_64-3.txz:  gpg
man-pages-4.02-noarch-1.txz:    gpg
mariadb-10.0.22-x86_64-1.txz:   gpg
mc-4.8.15-x86_64-1.txz: gpg
nano-2.4.3-x86_64-1.txz:        gpg
net-snmp-5.7.3-x86_64-2.txz:    gpg
network-scripts-14.2-noarch-1.txz:      gpg
nmap-7.00-x86_64-1.txz: gpg
ntp-4.2.8p4-x86_64-1.txz:       gpg
openldap-client-2.4.42-x86_64-1.txz:    gpg
pango-1.38.1-x86_64-1.txz:      gpg
pciutils-3.4.0-x86_64-1.txz:    gpg
pcre-8.38-x86_64-1.txz: gpg
perl-5.22.0-x86_64-1.txz:       gpg
php-5.6.15-x86_64-1.txz:        gpg
pixman-0.33.4-x86_64-1.txz:     gpg
pkgtools-14.2-noarch-4.txz:     gpg
python-2.7.10-x86_64-2.txz:     gpg
python-setuptools-18.4-x86_64-1.txz:    gpg
qca-2.0.3-x86_64-1.txz: gpg
qca-cyrus-sasl-2.0.0_beta3-x86_64-2.txz:        gpg
qt-4.8.7-x86_64-2.txz:  gpg
readline-6.3-x86_64-2.txz:      gpg
ruby-2.2.3-x86_64-3.txz:        gpg
sendmail-8.15.2-x86_64-2.txz:   gpg
sendmail-cf-8.15.2-noarch-2.txz:        gpg
sysvinit-scripts-2.0-noarch-24.txz:     gpg
tcl-8.6.4-x86_64-2.txz: gpg
usbutils-007-x86_64-3.txz:      gpg
util-linux-2.26.2-x86_64-2.txz: gpg
vim-7.4.898-x86_64-1.txz:       gpg
wget-1.17-x86_64-1.txz: gpg
whois-5.2.10-x86_64-1.txz:      gpg
xterm-320-x86_64-1.txz: gpg
xz-5.2.2-x86_64-1.txz:  gpg

==============================================================================
slackpkg update gpg provides:
Code:
~# slackpkg update gpg

                        Downloading ftp://mirror.bytemark.co.uk/slackware/slackware64-current/GPG-KEY...
--2015-11-25 19:42:07--  ftp://mirror.bytemark.co.uk/slackware/slackware64-current/GPG-KEY
           => /tmp/slackpkg.KeuKdC/gpgkey
Resolving mirror.bytemark.co.uk (mirror.bytemark.co.uk)... 212.110.161.69, 2001:41c8:20:5e6::10
Connecting to mirror.bytemark.co.uk (mirror.bytemark.co.uk)|212.110.161.69|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /slackware/slackware64-current ... done.
==> SIZE GPG-KEY ... 1572
==> PASV ... done.    ==> RETR GPG-KEY ... done.
Length: 1572 (1.5K) (unauthoritative)

GPG-KEY                                                             100%[====================================================================================================================================================================>]   1.54K  --.-KB/s   in 0s

2015-11-25 19:42:08 (28.9 MB/s) - /tmp/slackpkg.KeuKdC/gpgkey saved [1572]
Running upgrade-all again provides:
Code:
~# slackpkg upgrade-all

You need the GPG key of Slackware Linux Project <security@slackware.com>.
To download and install that key, run:

        # slackpkg update gpg

You can disable GPG checking too, but it is not a good idea.
To disable GPG, edit slackpkg.conf and change the value of the CHECKGPG
variable to off - you can see an example in the original slackpkg.conf.new
file distributed with slackpkg.
I've tried multiple mirrors for -current, such as slackware.no / osuosl.org / bytemark.co.uk . I'm hitting the same gpg errors on all of them.

I have ran slackpkg update every time I changed the mirror, the Changelog is the same on all of them, but the CHECKSUMS.md5 seems to be signed with another gpg:

Code:
                        Downloading ftp://mirror.bytemark.co.uk/slackware/slackware64-current/CHECKSUMS.md5.asc...
--2015-11-25 19:47:23--  ftp://mirror.bytemark.co.uk/slackware/slackware64-current/CHECKSUMS.md5.asc
           => /tmp/slackpkg.7KSczF/CHECKSUMS.md5.asc
Resolving mirror.bytemark.co.uk (mirror.bytemark.co.uk)... 212.110.161.69, 2001:41c8:20:5e6::10
Connecting to mirror.bytemark.co.uk (mirror.bytemark.co.uk)|212.110.161.69|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /slackware/slackware64-current ... done.
==> SIZE CHECKSUMS.md5.asc ... 181
==> PASV ... done.    ==> RETR CHECKSUMS.md5.asc ... done.
Length: 181 (unauthoritative)

CHECKSUMS.md5.asc                                                   100%[====================================================================================================================================================================>]     181  --.-KB/s   in 0.02s

2015-11-25 19:47:23 (9.68 KB/s) - /tmp/slackpkg.7KSczF/CHECKSUMS.md5.asc saved [181]


                ERROR: Verification of the  gpg signature on CHECKSUMS.md5
                       failed! This could mean that the file is out of date
                       or has been tampered with.
Anyone else hit this bump today ?

Thank you!

Best regards!
 
Old 11-25-2015, 12:30 PM   #2
pasquall
LQ Newbie
 
Registered: Apr 2015
Location: So Paulo, Brasil
Distribution: Slackware, FreeBSD
Posts: 4

Rep: Reputation: 0
Is your gpg running ok?

I had a similar problem and I found that I didn't have installed "a/eudev".
 
Old 11-25-2015, 12:42 PM   #3
rworkman
Slackware Contributor
 
Registered: Oct 2004
Location: Tuscaloosa, Alabama (USA)
Distribution: Slackware
Posts: 2,309

Rep: Reputation: 822Reputation: 822Reputation: 822Reputation: 822Reputation: 822Reputation: 822Reputation: 822
Manually upgrade aaa_elflibs, then use upgradepkg --reinstall --install-new a/eudev and a/libgudev, and all should be fine.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
[SOLVED] Slackpkg update error - gpg signature on cheksum stoa Slackware 2 06-13-2015 05:28 PM
slackpkg complained about wrong md5sum and gpg on raspberry pi kite Slackware 4 06-25-2014 04:37 PM
[SOLVED] GPG signature for slackbuilds packages ginoboy Slackware 4 10-10-2010 03:33 PM
GPG Signature problem in up2date dineshjk Red Hat 1 08-09-2004 07:08 AM
does not have GPG signature mackol Linux - Software 0 05-26-2004 09:57 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 10:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration