[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: backports keyring



On Sunday 15 February 2009 18:46:42 Robert Holtzman wrote:
> Tried "apt-get install debian-backports-keyring" and got the message
>
> WARNING: The following packages cannot be authenticated!
>    debian-backports-keyring
> Install these packages without verification [y/N]?
> E: Some packages could not be authenticated
>
> I terminated at that point. Can anyone tell me what the problem is (yeah,
> I know, the problem is it can't be authenticated. Now that we have that
> out of the way.....) and if there is a solution?

All the signatures that are used to verify the all backports.org repositories 
are generated based on the key in that package, including the files that would 
authenticate that package.

It's a chicken<->egg problem.  The backports.org site has alternate 
instructions involving direct application of gpg/apt-key to get you the 
correct key before you install any package.

I just install that one untrusted package before installing anything else.  (I 
know this isn't entirely safe, but it's not actually more dangerous than the 
other options.)

(I'm a bit surprised that you have that package -- I couldn't find it in my 
lenny-backports mirror.)
-- 
Boyd Stephen Smith Jr.                   ,= ,-_-. =.
bss@iguanasuicide.net                   ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy         `-'(. .)`-'
http://iguanasuicide.net/                    \_/

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: