Package: swupdate
Version: 2026.05.1+dfsg-1
Severity: grave
Justification: renders package unusable
X-Debbugs-Cc: [email protected]
Dear Maintainer,
SWUpdate is build for signed images by default. If I create a
certificate according to [1]. The following error occurs:
```
root@5c422e3506bf:/# swupdate
Error: SWUpdate is built for signed images, provide a public key file.
root@5c422e3506bf:/# openssl req -x509 -newkey rsa:4096 -noenc -keyout
mycert.key.pem \
-out mycert.cert.pem -subj "/O=SWUpdate/CN=target" \
-addext extendedKeyUsage=1.3.6.1.5.5.7.3.4 -addext keyUsage=digitalSignature
root@5c422e3506bf:/# swupdate -k mycert.cert.pem
SWUpdate v2026.05.1
Licensed under GPLv2. See source distribution for detailed copyright notices.
[ERROR] : SWUPDATE failed [0] ERROR : mbedtls_pk_parse_public_keyfile: -15714
[ERROR] : SWUPDATE failed [0] ERROR : Error: Crypto cannot be initialized.
```
Best regards
Quirin
[1]:
https://sbabic.github.io/swupdate/signed_images.html#generating-self-signed-certificates
-- System Information:
Debian Release: 13.5
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.95+deb13-amd64 (SMP w/16 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages swupdate depends on:
ii init-system-helpers 1.69~deb13u1
ii libarchive13t64 3.7.4-4+deb13u1
ii libblkid1 2.41-5
pn libbtrfsutil1t64 <none>
ii libc6 2.42-16
ii libconfig11 1.7.3-2
ii libcurl3t64-gnutls 8.20.0-5
ii libcurl4-gnutls 8.20.0-5
ii libext2fs2t64 1.47.2-3+b11
ii libfdisk1 2.41-5
ii libgpgme45 2.0.1-2
ii libgpiod3 2.2.1-2+deb13u1
ii libjson-c5 0.18+ds-1
ii liblua5.4-0 5.4.7-1+b2
pn liblua5.5-0 <none>
ii liblz4-1 1.10.0-4
ii liblzma5 5.8.1-1
ii libmbedcrypto16 3.6.5-0.1~deb13u1
ii libmbedtls21 3.6.5-0.1~deb13u1
ii libmbedx509-7 3.6.5-0.1~deb13u1
ii libp11-kit0 0.25.5-3
ii librsync2t64 2.3.4-1.1+b1
pn libswupdate0.1 <none>
ii libsystemd0 257.13-1~deb13u1
ii libubootenv0.1 0.3.5-0.1+b2
ii liburiparser1 0.9.8+dfsg-2
ii libuuid1 2.41-5
ii libwebsockets19t64 4.3.5-1+deb13u1
pn libwolfssl42t64 <none>
ii libzck1 1.5.1+ds1-1
ii libzstd1 1.5.7+dfsg-1
ii systemd [systemd-tmpfiles] 257.13-1~deb13u1
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1
Versions of packages swupdate recommends:
pn libebgenv0 <none>
swupdate suggests no packages.
