problem with debmirror on etch: Release signature does not verify.
Hi there,
I am having a problem with debmirror on etch: It used to work, but now it fails to download files properly
Package: debmirror
Version: 20060907.1
Debian Release: 4.0
Here is /etc/debmirror.conf:
----------------------------
# /etc/debmirror.conf
# Output options
$verbose=1;
$progress=0;
$debug=0;
# Download options
# $host="
ftp.belnet.be";
# $user="anonymous";
$remoteroot="";
$download_method="http";
@dists="etch";
@sections="main,contrib,non-free";
@arches="i386";
# @extra_dirs="";
# @ignores="";
# @excludes="";
# @includes="";
# @excludes_deb_section="";
# @limit_priority="";
$skippackages=0;
$getcontents=0;
$do_source=0;
$max_batch=0;
# Security/Sanity options
$ignore_release_gpg=0;
$ignore_release=0;
$check_md5sums=0;
$ignore_small_errors=0;
# Cleanup
$cleanup=1;
$post_cleanup=0;
# Locking options
$timeout=300;
# Rsync options
$rsync_batch=200;
$rsync_options="-aIL --partial";
# FTP/HTTP options
$passive=0;
# $proxy="";
# Dry run
$dry_run=0;
# The config file must return true or perl complains.
# Always copy this.
1;
----------------------------
Here's what my script does:
#!/bin/bash
#
# Main mirror
#
debmirror -v --host=ftp.belnet.be --root="/debian" --dist="etch" --section="main,contrib,non
-free" /home/mirror/debian
#
# debian-security
#
debmirror -v --host=
ftp.de.debian.org
--root="/debian-security" --dist="etch/updates" --section="main,contrib,non-free" /home/mirror/debian-security
#
# debian-multimedia
#
debmirror -v --host=
www.debian-multimedia.org --dist="etch" --section="main,contrib,non
-free" /home/mirror/debian-multimedia
Here are the results:
[root@lilith] 10:12 /home/mirror>debmirror -v --host=
ftp.belnet.be --root="/debian" --dist="etch" --section="main,contrib,non-free" /home/mirror/debian
Mirroring to /home/mirror/debian from
http://ftp.belnet.be//debian/
Arches: i386
Dists: etch,etch
Sections: main,contrib,non-free,main,contrib,non-free
Pdiff mode: use.
Attempting to get lock, this might take 2 minutes before it fails.
Get Release files.
[0%] Getting: dists/etch/Release... ok
[0%] Getting: dists/etch/Release.gpg... ok
gpg: Signature made dim 08 avr 2007 12:42:00 CEST using DSA key ID 6070D3A1
gpg: Can't check signature: public key not found
gpg: Signature made dim 08 avr 2007 11:38:40 CEST using DSA key ID ADB11277
gpg: Can't check signature: public key not found
Release signature does not verify.
[0%] Getting: dists/etch/Release... ok
[0%] Getting: dists/etch/Release.gpg... ok
gpg: Signature made dim 08 avr 2007 12:42:00 CEST using DSA key ID 6070D3A1
gpg: Can't check signature: public key not found
gpg: Signature made dim 08 avr 2007 11:38:40 CEST using DSA key ID ADB11277
gpg: Can't check signature: public key not found
Release signature does not verify.
Errors:
Release signature does not verify.
Release signature does not verify.
Failed to download some Release or
Release.gpg files!
WARNING: releasing 1 pending lock...
[root@lilith] 10:12 /home/mirror>
[root@lilith] 10:14 /home/mirror>debmirror -v --host=
ftp.de.debian.org --root="/debian-security" --dist="etch/updates" --section="main,contrib,non-free" /home/mirror/debian-security
Mirroring to /home/mirror/debian-security from
http://ftp.de.debian.org//debian-security/
Arches: i386
Dists: etch,etch/updates
Sections: main,contrib,non-free,main,contrib,non-free
Pdiff mode: use.
Attempting to get lock, this might take 2 minutes before it fails.
Get Release files.
[0%] Getting: dists/etch/Release... dists/etch/Release failed 404 Not Found
dists/etch/Release failed md5sum check, removing
[0%] Getting: dists/etch/Release.gpg... dists/etch/Release.gpg failed 404 Not Found
dists/etch/Release.gpg failed md5sum check, removing
Release signature does not verify.
[0%] Getting: dists/etch/updates/Release... ok
[0%] Getting: dists/etch/updates/Release.gpg... ok
gpg: Signature made dim 22 avr 2007 16:56:05 CEST using DSA key ID 6070D3A1
gpg: Can't check signature: public key not found
Release signature does not verify.
Errors:
Download of dists/etch/Release failed: 404 Not Found Download of dists/etch/Release.gpg failed: 404 Not Found Release signature does not verify.
Release signature does not verify.
Failed to download some Release or
Release.gpg files!
WARNING: releasing 1 pending lock...
[root@lilith] 10:14 /home/mirror>
[root@lilith] 10:15 /home/mirror>debmirror -v --host=
www.debian-multimedia.org
--dist="etch" --section="main,contrib,non-free" /home/mirror/debian-multimedia
Mirroring to /home/mirror/debian-multimedia from
http://www.debian-multimedia.org//
Arches: i386
Dists: etch,etch
Sections: main,contrib,non-free,main,contrib,non-free
Pdiff mode: use.
Attempting to get lock, this might take 2 minutes before it fails.
Get Release files.
[0%] Getting: dists/etch/Release... ok
[0%] Getting: dists/etch/Release.gpg... ok
gpg: Signature made dim 22 avr 2007 10:17:59 CEST using DSA key ID 1F41B907
gpg: Can't check signature: public key not found
Release signature does not verify.
[0%] Getting: dists/etch/Release... ok
[0%] Getting: dists/etch/Release.gpg... ok
gpg: Signature made dim 22 avr 2007 10:17:59 CEST using DSA key ID 1F41B907
gpg: Can't check signature: public key not found
Release signature does not verify.
Errors:
Release signature does not verify.
Release signature does not verify.
Failed to download some Release or Release.gpg files!
WARNING: releasing 1 pending lock...
[root@lilith] 10:15 /home/mirror>
... you may say: "Well, you forgot to put the keys into apt !"
But the keys are there, look:
[root@lilith] 10:15 /home/mirror>apt-key list
/etc/apt/trusted.gpg
--------------------
pub 1024D/2D230C5F 2006-01-03 [expired: 2007-02-07]
uid Debian Archive Automatic Signing Key (2006) <
ftpmaster@debian.org>
pub 1024D/6070D3A1 2006-11-20 [expires: 2009-07-01]
uid Debian Archive Automatic Signing Key (4.0/etch) <
ftpmaster@debian.org>
pub 1024D/ADB11277 2006-09-17
uid Etch Stable Release Key <
debian-release@lists.debian.org>
... any help would be appreciated.
Cheers,
Alex
Reply to: