Re: gpg-errors with apt
On Thu, Jul 07, 2005 at 01:39:57PM +0100, Steve Kemp wrote:
> On Thu, Jul 07, 2005 at 02:14:51PM +0200, Johann Spies wrote:
>
> > Ok, but the archive on archive3.sun.ac.za is just a mirror from a
> > primary debian upstream source. Do I have to generate a spesific key
> > for my server?
>
> Strange .. but no you need do nothing with your key(s).
>
> > > > NO_PUBKEY 07DC563D1F41B907 W: You may want to update the package lists
> > > > to correct these missing files
> > >
> > > Find the key that the archive is signed with, import it as you
> > > did for the main Sid/Etch archive and all should be well.
> >
> > And where do I find this key?
>
> gpg --keyserver some.key.server --recv-keys 07DC563D1F41B907
>
> (For keyservers I use:
> keyring.debian.org
> pgp.mit.edu
> pgpkeys.pgp.net
> wwwkeys.uk.pgp.net
> or wwwkeys.pgp.net )
>
Thanks, I have done that with no error messages:
# gpg --keyserver keyring.debian.org --recv-keys 07DC563D1F41B907
F1D53D8C4F368D
gpg: requesting key 4F368D5D from hkp server keyring.debian.org
gpg: requesting key 1F41B907 from hkp server keyring.debian.org
gpg: key 4F368D5D: "Debian Archive Automatic Signing Key (2005)
<ftpmaster@debian.org>" not changed
gpg: key 1F41B907: "Christian Marillat <marillat@debian.org>" not
changed
gpg: Total number processed: 2
gpg: unchanged: 2
I have also downloaded the script "apt-check-sigs" which reported the
following:
Checking sources in /etc/apt/sources.list:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
...
Source: deb ftp://archive3.sun.ac.za/pub/mirrors/debian unstable main contrib non-free
o Origin: Debian/Debian
o Suite: unstable/sid
o Date: Tue, 05 Jul 2005 19:38:39 UTC
o Description: Debian Unstable - Not Released
* COULDN'T CHECK SIGNATURE BY KEYID: F1D53D8C4F368D5D
* NO VALID SIGNATURE
o Okay: main contrib non-free
Source: deb-src ftp://archive3.sun.ac.za/pub/mirrors/debian unstable main contrib non-free
o Origin: Debian/Debian
o Suite: unstable/sid
o Date: Tue, 05 Jul 2005 19:38:39 UTC
o Description: Debian Unstable - Not Released
* COULDN'T CHECK SIGNATURE BY KEYID: F1D53D8C4F368D5D
* NO VALID SIGNATURE
o Okay: main contrib non-free
...
I am also the ftp-administrator of archive3.sun.ac.za so I have an
uneasy feeling about this...
Regards
Johann
--
Johann Spies Telefoon: 021-808 4036
Informasietegnologie, Universiteit van Stellenbosch
"Trust in the Lord with all your heart, and do not
lean on your own understanding."
Proverbs 3:5
Reply to: