[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#316262: apt: Local repository and Release.gpg



On Wed, 29 Jun 2005 the mental interface of
Michael Vogt told:

> On Wed, Jun 29, 2005 at 08:41:06PM +0200, Elimar Riesebieter wrote:
> > Package: apt
> > Version: 0.6.38
> > Severity: normal
> 
> Thanks for your bugreport.
>  
> > My configuration is to ask for gpg keys. This is done for the official deb
> > sorces. But since 0.6.38 my Release file from my local builds is ignored. I
> > singed the Release to Release.gpg: both are ignored. Ok, 'apt-key add my keyid'
> > was done before and 'apt-key list' shows my key.
> > 
> > I didn't found any hint in apt-doc or libapt-pkg-doc :(
> 
> Did you checked (by hand) if the Release.gpg is a valid signature for
> the Release file? 

Created via gpg -a -d -o Release.gpg Release

> What is the output of:
> apt-get -o Debug::Acquire::gpgv=true update


Ign  file: unstable Release.gpg
Ign  file: unstable Release
Ign  file: unstable/main Packages
Ign  http://www.lxtec.de binary-i386/ Release.gpg
Ign  http://www.lxtec.de sources/ Release.gpg
OK   http://www.lxtec.de binary-i386/ Release
OK   http://www.lxtec.de sources/ Release
Ign  http://www.lxtec.de binary-i386/ Packages
Ign  http://www.lxtec.de sources/ Sources
OK   http://www.lxtec.de binary-i386/ Packages
OK   ftp://ftp.de.debian.org testing Release.gpg
OK   http://www.lxtec.de sources/ Sources
OK   ftp://ftp.de.debian.org unstable Release.gpg
OK   ftp://ftp.de.debian.org experimental Release.gpg
OK   ftp://ftp.de.debian.org testing Release
inside VerifyGetSigners
gpgv path: /usr/bin/gpgv
Keyring path: /etc/apt/trusted.gpg
Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/ftp.de.debian.org_debian_dists_testing_Release.gpg /var/lib/apt/lists/ftp.de.debian.org_debian_dists_testing_Release
Read: [GNUPG:] SIG_ID 6CseraadPOfLUXJ45TfEOgfEE/0 2005-06-29 1120071092
Read: [GNUPG:] GOODSIG F1D53D8C4F368D5D Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
Read: [GNUPG:] VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D 2005-06-29 1120071092 0 4 0 17 2 00 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
Got VALIDSIG, key ID:VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
gpgv exited
gpgv suceeded
OK   ftp://ftp.de.debian.org unstable Release
inside VerifyGetSigners
gpgv path: /usr/bin/gpgv
Keyring path: /etc/apt/trusted.gpg
Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/ftp.de.debian.org_debian_dists_unstable_Release.gpg /var/lib/apt/lists/ftp.de.debian.org_debian_dists_unstable_Release
Read: [GNUPG:] SIG_ID hDRmB4LLU8ovewMUy6uzHeXHvtg 2005-06-29 1120071108
Read: [GNUPG:] GOODSIG F1D53D8C4F368D5D Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
Read: [GNUPG:] VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D 2005-06-29 1120071108 0 4 0 17 2 00 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
Got VALIDSIG, key ID:VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
gpgv exited
gpgv suceeded
OK   ftp://ftp.de.debian.org experimental Release
inside VerifyGetSigners
gpgv path: /usr/bin/gpgv
Keyring path: /etc/apt/trusted.gpg
Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/ftp.de.debian.org_debian_dists_experimental_Release.gpg /var/lib/apt/lists/ftp.de.debian.org_debian_dists_experimental_Release
Read: [GNUPG:] SIG_ID S5cL0pRL7wcjuIxUjWABJMb1Hr4 2005-06-29 1120071109
Read: [GNUPG:] GOODSIG F1D53D8C4F368D5D Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
Read: [GNUPG:] VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D 2005-06-29 1120071109 0 4 0 17 2 00 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
Got VALIDSIG, key ID:VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
gpgv exited
gpgv suceeded
OK   ftp://ftp.debian.org experimental Release.gpg
Hole:1 ftp://ftp.de.debian.org testing/main Packages
Ign  ftp://ftp.de.debian.org testing/main Packages
OK   ftp://ftp.debian.org experimental Release
inside VerifyGetSigners
gpgv path: /usr/bin/gpgv
Keyring path: /etc/apt/trusted.gpg
Preparing to exec: /usr/bin/gpgv /usr/bin/gpgv --status-fd 3 --keyring /etc/apt/trusted.gpg /var/lib/apt/lists/partial/ftp.debian.org_debian_dists_experimental_Release.gpg /var/lib/apt/lists/ftp.debian.org_debian_dists_experimental_Release
Read: [GNUPG:] SIG_ID S5cL0pRL7wcjuIxUjWABJMb1Hr4 2005-06-29 1120071109
Read: [GNUPG:] GOODSIG F1D53D8C4F368D5D Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
Read: [GNUPG:] VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D 2005-06-29 1120071109 0 4 0 17 2 00 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
Got VALIDSIG, key ID:VALIDSIG 4C7A8E5E9454FE3FAE1E78ADF1D53D8C4F368D5D
gpgv exited
gpgv suceeded
Hole:2 ftp://ftp.de.debian.org testing/non-free Packages
Ign  ftp://ftp.de.debian.org testing/non-free Packages
....

but

$ apt-key lispub   1024R/1DB114E0 2004-01-15 [expired: 2005-01-27)]
uid                  Debian Archive Automatic Signing Key (2004) <ftpmaster@debian.org>

pub   1024D/4F368D5D 2005-01-31 [expires: 2006-01-31]
uid                  Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>

pub   1024D/C54F7FB0 2002-07-28
uid                  Elimar Riesebieter <riesebie@lxtec.de>
uid                  Elimar Riesebieter (Schorsch) <elimar.riesebieter@t-online.de>
uid                  Elimar Riesebieter <elpahe@gmx.de>
uid                  Schorsch <er@lxtec.de>
uid                  Elimar <riesebie@lxtec.de>


> apt-get -o Debug::Acquire::gpgv=true install $pkg

Reading package lists... Done
Building dependency tree... Done
vim is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 37 not upgraded.



-- 
  Excellent day for drinking heavily. 
  Spike the office water cooler;-)

Attachment: pgpNAijeIOnle.pgp
Description: PGP signature


Reply to: