Derek Jennings wrote:
On Sunday 12 December 2004 11:00, Martin Hardie wrote:
Hi
I have been trying for days to install mplayer and kmplayer using the rpm
drake without luck - always bad signatures etc on files needed.
so I tried urpmi and it tells ema fter failign i need to update my data
base:
"You may want to update your urpmi database"
how do I do that??
Martin
urpmi.update -a
That will refresh your urpmi database from all the online sources you have
defined. You should run this command before you attempt to install anything.
Running the MandrakeUpdate GUI will run it automatically.
As for bad signatures - A bad signature simply means that the signature the
packager signed the package with does not match the signature key you have
stored for that source, and so you cannot be confident you know who actually
created the package.
This could be because of a number of reasons.
1/ You do not have a signature key stored for that source.
2/ The packager was careless and either did not sign the package or signed it
with the wrong signature.
3/ Someone has tampered with the server and inserted a malicious package on
the server.
1/ and 2/ are by far the most likely reasons. So do not immediately assume the
servers have been tampered with every time you see a bad signature message.
(I can only recall one instance of a Linux software server being tampered with
when the Openssh project's download site was tampered with a few years ago.
It was discovered and fixed within 24 hours)
Normally it is quite safe to accept the bad signature and continue with the
install so long as you trust the source you have defined. (And if you do not
trust your sources what are doing installing software on your computer from
them?)
If you do have bad or missing keys you can fix it.
Open MandrakeControlCentre>Software>MediaManagement
You will see a list of your sources.
Click on 'Manage keys' and you will see which keys are associated with each
source and you can see if a key is missing.
To re-add a key click on 'Edit' in the media management menu and click on
'Save changes' The source will be refreshed and if the key is available it
should be re-added automatically.
For some sources such as Charles Edwards' site this procedure does not seem to
work in which case you can add the key manually.
wget http://www.eslrahc.com/10.1/CAE.asc && rpm --import CAE.asc
Then go to MCC>Software>MediaManager and associate the newly imported key with
Charles' source.
derek
One more reasion for getting the "bad signature" error. It is easy to
miss it if you are using the GUI, but if the mirror you are using is
busy, you may not get a connection, so the RPM was not downloaded. Then
there is a could not open file message first, and then the bad signature
message. Using wget to download the RPMs tends to cut down on these,
but it can take a while if it has to do a lot of retrys to get a connection.
Mikkel
--
Do not meddle in the affairs of dragons,
for you are crunchy and taste good with Ketchup!
____________________________________________________
Want to buy your Pack or Services from MandrakeSoft?
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com
____________________________________________________
