LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Ubuntu (https://www.linuxquestions.org/questions/ubuntu-63/)
-   -   Trying to upload manually signed packages to PPA that are showing up as not signed. (https://www.linuxquestions.org/questions/ubuntu-63/trying-to-upload-manually-signed-packages-to-ppa-that-are-showing-up-as-not-signed-837958/)

Kenny_Strawn 10-14-2010 12:51 AM

Trying to upload manually signed packages to PPA that are showing up as not signed.
 
Just so you know, I am trying to upload packages to a PPA (packages that contain custom "sources.list"s designed to make upgrades or downgrades between Ubuntu releases easier) and, even after going through all that work to manually generate a key and sign them with gpg, dput still rejects them as "not signed". Any idea what could be causing this? What files is it looking for?

Kenny_Strawn 10-14-2010 01:31 AM

Here is the output of dput:

Code:

dput -f ppa:mango-k/ubuntu-releases *.changes
Checking signature on .changes
gpg: no valid OpenPGP data found.
gpg: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
No signature on /home/kenny_strawn/ubuntu-releases/ubuntu-release-dapper_6.06-0ubuntu1_i386.changes.
kenny_strawn@kenny-AOA110:~/ubuntu-releases$


Kenny_Strawn 10-14-2010 01:11 PM

Okay, now I (sort of) found out the problem: I had to specify the name of the .asc files that sign the packages. Now, however, I am getting a different error:

Code:

kenny_strawn@kenny-AOA110:~/ubuntu-releases$ dput -f *.asc ppa:mango-k/ubuntu-releases *.changes
No host ubuntu-release-dapper_6.06-0ubuntu1.dsc.asc found in config
kenny_strawn@kenny-AOA110:~/ubuntu-releases$

I have packages that include sources.list files for ALL the supported releases, in order to allow one to upgrade or downgrade at will.

Any help is appreciated. Please try to reply, not just glance and leave.

Kenny_Strawn 10-14-2010 05:54 PM

Okay, after re-signing the files manually I now am getting an error that the signature is bad:

Code:

Checking signature on .changes
gpg: Signature made Thu 14 Oct 2010 03:52:21 PM PDT using RSA key ID 4C9C5444
gpg: BAD signature from "Kenny Strawn (This is a key for the Ubuntu Distribution Upgrades PPA.) <mango_k@att.net>"
Bad signature on /home/kenny_strawn/ubuntu-releases/ubuntu-release-dapper_6.06-0ubuntu1_i386.changes.



All times are GMT -5. The time now is 08:14 PM.