[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Downloading sources from an unsigned intranet repository



On Mon, Oct 06, 2014 at 11:40:23AM +1000, Stuart Longland wrote:
> Hi all,
> 
> For some time now my workplace has had an APT repository for in-house
> developed packages for software we either produce or support.
> 
> This lives on an internal intranet server and is accessed over plain
> HTTP.  This has worked well for some time now.  Until today I notice:
> 
> > stuartl@qube:~$ apt-get source vrtlic -y --force-yes
> > Reading package lists... Done
> > Building dependency tree
> > Reading state information... Done
> > WARNING: The following packages cannot be authenticated!
> >   vrtlic
> > E: Some packages could not be authenticated
> 
> Even though I tell apt-get to force download of the package sources
> (which, I might add, I can personally vouch for as I put them there), it
> refuses to do so because the package repository is unsigned.
> 
> Now I *could* organise a gpg key to sign the repository with.  I have
> administrative privileges on the machine concerned.

So it worked before and has suddenly stopped working for no reason?

-- 
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing." --- Malcolm X


Reply to: