On Thu, 2003-06-12 at 06:19, Jack Coates wrote:
> login as root instead of using sudo or MandrakeUpdate as a user -- the
> keys are in root's keyring. Or find them on the web and add them to your
> own ring.

The other possibility is that is has a bad sig.  Let me test it out here
and see what I get.  Can't hurt.

James


Ok,

   I checked it and you are right.  My mirror ftp.club-internet.fr has
the same problem...  


   Vincent, if you are reading this I guess this kind of thing is in
your ballpark.  I checked two additional mirrors (mandrake.secsup.org
and slug.usc.edu  and got the same results.)  I don't have my disks
handy to check them out and see if it is the same on the disk set, but
it definitely is bad on the mirrors I've been to.

  Odds on it's a bad sig on the package, but to be on the safe side I'd
say to grab the source and build out from there.  To be consistent with
MDK and to get a working version the way you want (avoiding any chance
of a highjack.) do this one.  Download the src rpm  then do rpm -Uvh
chkrootkit-xxxxxx.src.rpm.  Also download the real src tarball  Replace
the one in /usr/src/RPM/SOURCES with the one you downloaded (make sure
that it's bzip not gz or the other way around if needed, then    
cd ../SPECS.  If you then do rpm -ba chkrootkit.spec (or whatever the
spec name is.) you will rebuild an rpm for yourself that you know is
from clean source and has all the proper MDK hooks.   Frankly I'd just
build from source as normal with the --prefix=/usr when running
configure and go from there. 

James

> 
> On Thu, 2003-06-12 at 04:59, Tango Echo wrote:
> > Thanks for the reply. Unfortunately, I'm still getting
> > the error after following your instructions...  The
> > gnu pg seemed to install fine. I'm also running mdk
> > 9.1 BTW.   Any other ideas??  
> > 
> > 
> > -----Original Message-----
> > From: James Sparenberg [mailto:[EMAIL PROTECTED] 
> > Sent: Wednesday, June 11, 2003 6:38 PM
> > To: Expert List
> > Subject: Re: [expert] Signatures on packages....
> > 
> > 
> > On Wed, 2003-06-11 at 05:52, Tango Echo wrote:
> > > Guys, Please don't flame me for cross-posting.  I'm
> > > only doing so becuase I did not receive a solution
> > > from the Newbie List (maybe got overlooked).  Below
> > is
> > > my problem...  Thanks in advance...
> > > 
> > > ================================
> > > 
> > > Hi all,
> > > 
> > > I have recently decided to install the package
> > > chkrootkit after hearing it can be a useful tool
> > with security.  
> > > However when I do so I receive an error:
> > > 
> > > The following packaages have bad signatures:
> > > <full path> ../chkrootkit-0.39-1mdk.i586.rpm
> > > 
> > > I have been told I need the "keys for the contrib
> > > packages".  I'm not sure this is accurate.  But I am
> > > sure that I do not want any errors like this when
> > > installing chkrootkit (plz dont' tell me to just
> > > ignore it) Thanks in advance!!!!
> > > 
> > 
> > the package gnupg-1.2.2-1.1mdk for 9.1 supplies the
> > contrib and main signatures for MDK.  Do a rpm -Uvh
> > --force gnupg-1.2.2-1.1mdk.i586.rpm to get it back..
> > IF you are on 9.1 ... if you are on say 9.0 then that
> > is the reason it's complaining about the signature.
> > It's different between any two distro's. Grab the one
> > for the distro you are on. 
> > 
> > James
> > 
> > 
> > 
> > he distro you are on. 
> > 
> > James
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > 
> > __________________________________
> > Do you Yahoo!?
> > Yahoo! Calendar - Free online calendar with sync to Outlook(TM).
> > http://calendar.yahoo.com
> > 
> > 
> > ______________________________________________________________________
> > 
> > Want to buy your Pack or Services from MandrakeSoft? 
> > Go to http://www.mandrakestore.com


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to