apt-check-sigs problem (plz cc adambarton@mac.com)
People,
Perhaps you could give me a hand with an issue I am having with the
apt-check-sigs script. Also would you mind CCing me on your responses as
I am off list right now.
I have been updating with 'apt-get update && apt-get dist-upgrade' which
has been working fine but I now want to use the apt-check-sigs script to
ensure I am using authentic Debian packages.
However, when I run apt-check-sigs I get many gpg: error reading key:
public key not found errors and I am not sure to interpret the results.
How should I go about troubleshooting this?
I have already downloaded http://ftp-master.debian.org/ziyi_key_2003.asc
and installed it using 'gpg --no-default-keyring --keyring
trustedkeys.gpg --import ziyi_key_2003.asc' as root.
I have also changed by sources to use ftp.us.debian.org (not that I
really think this is so important, but I did notice a release file that
didn't have an associated .gpg file on mirror.ac.uk)
Below is the real info.
Kind regards,
Adam Barton.
I have been carrying out the following as root:
# apt-get update
# ./apt-check-sigs.pl
gpg: error reading key: public key not found
./apt-check-sigs.pl:
/var/lib/apt/lists/security.debian.org_dists_stable_updates_Release:
signature verification error, full gnupg output follows:
gpgv: Signature made Wed Jan 7 13:18:32 2004 CET using DSA key ID 30B34DD5
[GNUPG:] ERRSIG 2DB1C72530B34DD5 17 2 00 1073477912 9
[GNUPG:] NO_PUBKEY 2DB1C72530B34DD5
gpgv: Can't check signature: public key not found
./apt-check-sigs.pl:
/var/lib/apt/lists/www.mirror.ac.uk_sites_ftp.debian.org_debian_dists_stable_Release:
signature verification error, full gnupg output follows:
gpgv: Signature made Thu Nov 20 19:57:33 2003 CET using DSA key ID 38C6029A
[GNUPG:] SIG_ID v3QRpQajl8Da2RvX0ibxNujkeEw 2003-11-20 1069354653
[GNUPG:] GOODSIG B629A24C38C6029A Debian Archive Automatic Signing Key
(2003) <ftpmaster@debian.org>
gpgv: Good signature from "Debian Archive Automatic Signing Key (2003)
<ftpmaster@debian.org>"
[GNUPG:] VALIDSIG EB2FA2AF170D235926A77BF3B629A24C38C6029A 2003-11-20
1069354653
gpgv: Signature made Wed Dec 31 17:26:06 2003 CET using DSA key ID 30B34DD5
[GNUPG:] ERRSIG 2DB1C72530B34DD5 17 2 00 1072887966 9
[GNUPG:] NO_PUBKEY 2DB1C72530B34DD5
gpgv: Can't check signature: public key not found
./apt-check-sigs.pl:
/var/lib/apt/lists/non-us.debian.org_debian-non-US_dists_stable_non-US_Release:
signature is not by Debian Archive
./apt-check-sigs.pl:
/var/lib/apt/lists/ftp.us.debian.org_debian_dists_stable_Release:
signature verification error, full gnupg output follows:
gpgv: Signature made Thu Nov 20 19:57:33 2003 CET using DSA key ID 38C6029A
[GNUPG:] SIG_ID v3QRpQajl8Da2RvX0ibxNujkeEw 2003-11-20 1069354653
[GNUPG:] GOODSIG B629A24C38C6029A Debian Archive Automatic Signing Key
(2003) <ftpmaster@debian.org>
gpgv: Good signature from "Debian Archive Automatic Signing Key (2003)
<ftpmaster@debian.org>"
[GNUPG:] VALIDSIG EB2FA2AF170D235926A77BF3B629A24C38C6029A 2003-11-20
1069354653
gpgv: Signature made Wed Dec 31 17:26:06 2003 CET using DSA key ID 30B34DD5
[GNUPG:] ERRSIG 2DB1C72530B34DD5 17 2 00 1072887966 9
[GNUPG:] NO_PUBKEY 2DB1C72530B34DD5
gpgv: Can't check signature: public key not found
./apt-check-sigs.pl:
/var/lib/apt/lists/ftp.us.debian.org_debian_dists_stable_Release:
signature verification error, full gnupg output follows:
gpgv: Signature made Thu Nov 20 19:57:33 2003 CET using DSA key ID 38C6029A
[GNUPG:] SIG_ID v3QRpQajl8Da2RvX0ibxNujkeEw 2003-11-20 1069354653
[GNUPG:] GOODSIG B629A24C38C6029A Debian Archive Automatic Signing Key
(2003) <ftpmaster@debian.org>
gpgv: Good signature from "Debian Archive Automatic Signing Key (2003)
<ftpmaster@debian.org>"
[GNUPG:] VALIDSIG EB2FA2AF170D235926A77BF3B629A24C38C6029A 2003-11-20
1069354653
gpgv: Signature made Wed Dec 31 17:26:06 2003 CET using DSA key ID 30B34DD5
[GNUPG:] ERRSIG 2DB1C72530B34DD5 17 2 00 1072887966 9
[GNUPG:] NO_PUBKEY 2DB1C72530B34DD5
gpgv: Can't check signature: public key not found
./apt-check-sigs.pl:
/var/lib/apt/lists/non-us.debian.org_debian-non-US_dists_stable_non-US_Release:
signature is not by Debian Archive
./apt-check-sigs.pl:
/var/lib/apt/lists/non-us.debian.org_debian-non-US_dists_stable_non-US_Release:
signature is not by Debian Archive
My sources file is as follows:
blueboy:~# cat /etc/apt/sources.list
deb http://security.debian.org/ stable/updates main
deb http://www.mirror.ac.uk/sites/ftp.debian.org/debian/ stable main
non-free
deb http://non-us.debian.org/debian-non-US stable/non-US main non-free
deb http://ftp.us.debian.org/debian/ stable main non-free contrib
deb-src http://ftp.us.debian.org/debian/ stable main non-free contrib
deb http://non-us.debian.org/debian-non-US stable/non-US main contrib
non-free
deb-src http://non-us.debian.org/debian-non-US stable/non-US main
contrib non-free
blueboy:~#
Reply to: