apt-get GPG problems (unknown signatures)...

sud_crow · 10-30-2004, 12:06 PM

Im having several issues with the GPG Check in apt-get... it doesnt let me install anything, im using the standard apt-get repos.

Here is the error:

Code:

Checking GPG signatures...
Unknown signature /var/cache/apt/archives/synaptic_0.53-0.suse091.rb.1_i586.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#8c9b4b0d)
E: Error(s) while checking package signatures:
0 unsigned package(s)
1 package(s) with unknown signatures
0 package(s) with illegal/corrupted signatures

Any idea on how to avoid GPG check or make it work??

(i have the rpmkeys group in the sources.list)

Thanks in advance!

sud_crow · 10-30-2004, 01:40 PM

Well, aftear searching a bit i found the way:

Code:

apt install --no-checksig <pkgname>

(Note its "apt" and not "apt-get"... )

Just in case someone needs it.

dwight · 10-30-2004, 04:51 PM

Yep. That's one way to do it. If you don't want to type --no-checksig in every time you could disable GPG alltogether.
You can to this by editing the file /etc/apt/apt.conf.d/gpg-checker.conf: you need to change GPG::Check true;
to GPG::Check false;. If you do this, you should be careful which apt repositories you use.
There's also another way. You could install the rpmkey packages from each of the repositories. You can do this with:

Code:

apt-get install rpmkey*

This would install the needed signature files and the GPG check shouldn't fail. At least as long the rpmkeys are up to date. I find
that this is always not the case, so I have GPG checking turned off.

Adler · 10-30-2004, 05:57 PM

sud_crow,

I use the command -

"apt-get install XXXX" - e.g. apt-get install GAIM

To do an upgrade

"apt-get dist-upgrade"

I should mention this is all done @ Root level.

pingu · 07-05-2005, 03:00 AM

So I'm trying to disable this stupid MD5-sum checking:
I created the file /etc/apt/apt.conf.d/gpg-checker.conf and wrote the line
GPG::Check false;
It didn't help, still "MD5Sum mismatch"
I also imported GPG-key, same problem. (Currently freshrpms.net, but happens every now and then on various repos.)

Quote:

apt install --no-checksig <pkgname>
(Note its "apt" and not "apt-get"... )

No apt in Fedora, apt-get --no-checksig doesn't work.

This is in various versions of Fedora, FC3, CentOS, LormaLinux
Could someone please tell me how to get rid of all MD5 & GPG checking - they never do any good, I don't want them!