[newbie] bad signatures
Why Do I get bad signatures when attempting to upgrade packages using mandrakelinux update ? shouldn't this be the safest plave to get the software from Carlton Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] bad signatures
Carlton Matthew wrote: Why Do I get bad signatures when attempting to upgrade packages using mandrakelinux update ? shouldn't this be the safest plave to get the software from Carlton It should be. Do you get it for all packages? One thing to watch for - it will give you the bad signature error, and go on to say that it could not open the package. This error could be worded better. What actualy happened is that the download of the package failed, so the signature could not be tested. I think it is two standard error messages, generated by two different parts of the program. The bad signature error is true, but is not the real problem. Mikkel -- Do not meddle in the affairs of dragons, for you are crunchy and taste good with Ketchup! Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
RE: [newbie] Bad signatures when trying to update via Rpmdrake.
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dennis Myers Sent: 24 December 2004 16:07 To: newbie@linux-mandrake.com Subject: Re: [newbie] Bad signatures when trying to update via Rpmdrake. [EMAIL PROTECTED] wrote: Hello, I have been updating 10.1 OE via the rpmdrake tool with no problems till now. On several packages I am now getting bad signature errors. For example:- The following packages have bad signatures: kdebase-common-3.2.3-134.3.101mdk.i586.rpm: Missing signature (Unable to read rpm file) Is this telling me the rpm file is screwed? Any help would be appreciated. Thanks. Steve Goodey --- - Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com No, it just means the package sig is not there or you don't have the signature key. I have used all of the packages and no problems. HTH -- Dennis M. linux user #180842 Thanks for the help. It turned out I had a bad update source. Once I changed that using easyurpmi and had deleted the cached files it updated ok. -- Regards, Steve Goodey Colchester, England. mailto:[EMAIL PROTECTED] http://www.stevegoodey.com http://www.bbcfactual.com Registered Linux user #372670 http://counter.li.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
[newbie] Bad signatures when trying to update via Rpmdrake.
Hello, I have been updating 10.1 OE via the rpmdrake tool with no problems till now. On several packages I am now getting bad signature errors. For example:- The following packages have bad signatures: kdebase-common-3.2.3-134.3.101mdk.i586.rpm: Missing signature (Unable to read rpm file) Is this telling me the rpm file is screwed? Any help would be appreciated. Thanks. Steve Goodey Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures when trying to update via Rpmdrake.
[EMAIL PROTECTED] wrote: Hello, I have been updating 10.1 OE via the rpmdrake tool with no problems till now. On several packages I am now getting bad signature errors. For example:- The following packages have bad signatures: kdebase-common-3.2.3-134.3.101mdk.i586.rpm: Missing signature (Unable to read rpm file) Is this telling me the rpm file is screwed? Any help would be appreciated. Thanks. Steve Goodey Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com No, it just means the package sig is not there or you don't have the signature key. I have used all of the packages and no problems. HTH -- Dennis M. linux user #180842 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Monday 02 August 2004 17:17, [EMAIL PROTECTED] wrote: I'm getting a lot of bad signature messages when I try to install packages from the CD's. Should I be worried? Or is this simply a matter of bad packaging? Brenda Bell Henniker (the only one on earth) What is a Henniker. I dont worry about 'bad signature messages. -- Regards; Hoyt Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004 17:48:20 -0500 Hoyt Bailey [EMAIL PROTECTED] wrote: On Monday 02 August 2004 17:17, [EMAIL PROTECTED] wrote: I'm getting a lot of bad signature messages when I try to install packages from the CD's. Should I be worried? Or is this simply a matter of bad packaging? Brenda Bell Henniker (the only one on earth) What is a Henniker. I dont worry about 'bad signature messages. -- Regards; Hoyt Me too. I don't worry about bad sigs and what's a Henniker? Lee Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004 18:58:02 + Lee Wiggers disseminated the following: Brenda Bell Henniker (the only one on earth) What is a Henniker. I dont worry about 'bad signature messages. -- Regards; Hoyt Me too. I don't worry about bad sigs and what's a Henniker? As always, Google is your best friend: http://www.hennikerhistory.org/ -- JoeHill RLU #282046 / www.freeyourmachine.org 19:40:57 up 19 days, 11:55, 6 users, load average: 1.57, 1.58, 1.44 +++ Saddam killed his own people, just like general Pinochet, and once upon a time both these evil men were supported by the U.S.A.; and whisper it, even Bin Laden once drank from America's cup just like that election down in Florida this shit doesn't all add up.. -- Billy Bragg, 'The Price of Oil' Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004, Lee Wiggers wrote: LW: what's a Henniker? Google says it is a town in New Hampshire - and apparently the only town in the world with the name Henniker http://www.hennikerhistory.org/ -- Job Evers -- Anyone who cannot cope with mathematics is not fully human. At best he is a tolerable subhuman who has learned to wear shoes, bathe and not make messes in the house. -- Lazarus Long, Time Enough for Love Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004 19:42:25 -0400 (EDT) Job Evers disseminated the following: Google says it is a town in New Hampshire - and apparently the only town in the world with the name Henniker http://www.hennikerhistory.org/ Ha! Beatcha by 1 minute! Do I win a trip to...Henniker? -- JoeHill RLU #282046 / www.freeyourmachine.org 19:48:07 up 19 days, 12:03, 7 users, load average: 1.61, 1.56, 1.47 +++ It is the world that has been pulled over your eyes, to blind you from the truth... -- Morpheus, in The Matrix, describing Fox News Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004 19:49:38 -0400 JoeHill wrote: Do I win a trip to...Henniker? Why? We don't have anything against Brenda and you are a punishment of last resort Charles -- I can't complain, but sometimes I still do. -- Joe Walsh -- Mandrake Linux 10.0 on BigBoy #184142 Registered Linux user #182463 *http://www.eslrahc.com* 2.6.5-1.tmb.6mdkenterprise -- pgpVPytY0a70C.pgp Description: PGP signature
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004 20:05:59 -0400 Charles A Edwards wrote: On Mon, 2 Aug 2004 19:49:38 -0400 JoeHill wrote: Do I win a trip to...Henniker? Why? We don't have anything against Brenda and you are a punishment of last resort I mention shooting tourists in my sig and someone wants to win a trip here!?!? Just because it's illegal doesn't mean we don't do it anyway :) Brenda Bell Henniker (the only one on earth) New Hampshire (the state with 5 seasons: black fly, tourist, foliage, ski and mud) ... but we're not allowed to shoot the tourists :) Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Tue, 2004-08-03 at 08:17, [EMAIL PROTECTED] wrote: I'm getting a lot of bad signature messages when I try to install packages from the CD's. Should I be worried? Or is this simply a matter of bad packaging? Brenda Bell Henniker (the only one on earth) New Hampshire (the state with 5 seasons: black fly, tourist, foliage, ski and mud) ... but we're not allowed to shoot the tourists :) The issue is that in New HampSHER, ya ain't allowed to run linux. stephen kuhn - proprietor __ illawarra computer services :: a kuhn media australia venture http://kma.0catch.com :: mobile 0410.728.389 Serving Sydney, The Illawarra, South Coast and Rural NSW __ * This message was composed on a 100% Microsoft free computer * We expressly refuse to utilise Microsoft DRM encoded documents __ Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. You can't survive by sucking the juice from a wet mitten. -- Charles Schulz, Things I've Had to Learn Over and Over and Over Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Tue, 2004-08-03 at 09:42, Job Evers wrote: On Mon, 2 Aug 2004, Lee Wiggers wrote: LW: what's a Henniker? Google says it is a town in New Hampshire - and apparently the only town in the world with the name Henniker http://www.hennikerhistory.org/ Friggin far out - and where else does one find Windan or Wollongong? stephen kuhn - proprietor __ illawarra computer services :: a kuhn media australia venture http://kma.0catch.com :: mobile 0410.728.389 Serving Sydney, The Illawarra, South Coast and Rural NSW __ * This message was composed on a 100% Microsoft free computer * We expressly refuse to utilise Microsoft DRM encoded documents __ Mandrake GNU/Linux 10.0 OE/Kernel 2.6.3-7/ No Viruses here. Illiterate? Write today, for free help! Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 2 Aug 2004 20:05:59 -0400 Charles A Edwards disseminated the following: Do I win a trip to...Henniker? Why? We don't have anything against Brenda and you are a punishment of last resort Zzing! -- JoeHill RLU #282046 / www.freeyourmachine.org 20:48:35 up 19 days, 13:03, 7 users, load average: 1.91, 1.58, 1.44 +++ The Chretien government's decision not to enter the Iraq war is a defining moment in Canada's foreign-policy history. It is now supported, according to a recent CBC poll, by a staggering 79 per cent of the population. -- Globe and Mail, June 3, 2004 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Mon, 02 Aug 2004 20:17:25 -0400 [EMAIL PROTECTED] disseminated the following: We don't have anything against Brenda and you are a punishment of last resort I mention shooting tourists in my sig and someone wants to win a trip here!?!? Just because it's illegal doesn't mean we don't do it anyway :) Reminds me of a funny I heard long ago, in reference to another place not so blessed as your home: 1st prize: A trip to Henniker 2nd prize: Two trips to Henniker! -- JoeHill RLU #282046 / www.freeyourmachine.org 20:49:46 up 19 days, 13:04, 7 users, load average: 1.64, 1.58, 1.45 +++ It is the world that has been pulled over your eyes, to blind you from the truth... -- Morpheus, in The Matrix, describing Fox News Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
JoeHill wrote: On Mon, 02 Aug 2004 20:17:25 -0400 [EMAIL PROTECTED] disseminated the following: We don't have anything against Brenda and you are a punishment of last resort I mention shooting tourists in my sig and someone wants to win a trip here!?!? Just because it's illegal doesn't mean we don't do it anyway :) Reminds me of a funny I heard long ago, in reference to another place not so blessed as your home: 1st prize: A trip to Henniker 2nd prize: Two trips to Henniker! 3d prize three weeks with Stephen Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures
On Tue, Aug 03, 2004 at 10:19:28AM +1000, Stephen Kühn wrote: On Tue, 2004-08-03 at 08:17, [EMAIL PROTECTED] wrote: I'm getting a lot of bad signature messages when I try to install packages from the CD's. Should I be worried? Or is this simply a matter of bad packaging? Brenda Bell Henniker (the only one on earth) New Hampshire (the state with 5 seasons: black fly, tourist, foliage, ski and mud) ... but we're not allowed to shoot the tourists :) The issue is that in New HampSHER, ya ain't allowed to run linux. Hell if ya ain't, ain't the state motto Live free or die? Sounds like a good match to me :) Todd -- Zinn-Chomsky 2004 Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com
Re: [newbie] Bad signatures in 9.2
On Friday 28 Nov 2003 2:19 pm, Jerry Barton wrote: On Fri, 28 Nov 2003 15:15:57 + Charles A Edwards [EMAIL PROTECTED] wrote: You will get that error if you are not using ../base for your contrib source. The whatever/contrib/i586/ contains a synthesis.hdlist2.cz and the rpms can be installed using such, But, it does not contain a list or hdlist as does base so you get the 'invalid list' Thanks Charles, My original contrib url is ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/9.2/contrib/i586 path to hdlist: ../../i586/Mandrake/base/hdlist2.cz (this was the urpmi.addmedia given by easy urpmi on plf) that path to hdlist was the only /base dir i could find. So as far as I can tell it was reading the right hdlist. I'll mess around with it and see. I even tried updating the contrib source or using a different one and it still gives me that error when installing from contrib. I'll report back after trying a few things. Jerry. Thanks for the information, Charles. I was just about to reply, when I read Jerry's reply to you. I use rediris, but its path to hdlist is the same as the one Jerry gave. I too will experiment over the week-end. Cheers Keith Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
On Wednesday 26 Nov 2003 8:54 am, Jerry Barton wrote: On Wed, 26 Nov 2003 14:18:48 + Keith Powell [EMAIL PROTECTED] wrote: I was wondering why the Contrib repository was giving the error messages with Mandrake9.2, when it didn't with earlier versions. Should I try to solve the bad signature message problem, or ignore it? That was the reason for my posting. I hadn't seen anyone else reporting this happening. Keith, same thing happens here. I just didn't think much of it since i got so used to texstar and plf rpms doing it. I too haven't ever had a signature problem with contrib before until now. That and i get some kind of mirror uses invalid list trying alternate method message when I install packages from contrib. but so far i haven't had any that haven't installed. Jerry I too get the Mirror uses invalid list try alternative method message when installing packages from contrib. I didn't mention it, though, as I did not want to confuse things even more! It's still there after a contrib update. Things install OK, so I ignore it. Cheers Keith Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
On Wednesday 26 Nov 2003 7:48 pm, Dick Gevers wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 26 Nov 2003 14:18:48 +, Keith Powell [EMAIL PROTECTED] wrote about Re: [newbie] Bad signatures in 9.2: I installed the download edition of 9.2 from magazine cover disks, but KPPP did not install. So I installed it from the CDs using MCC. When I installed it, there was the bad signature message, which I ignored. I could not understand why there was this message with a package which was on the CDs. I then downloaded and installed the security updates (which were clear of the error message). Next I downloaded and installed a package from Contrib and got the error message. Then I downloaded and installed all the other updates. These too were clear of the signature error message. Now, installing packages from the CDs don't give the bad signature message, but installing packages from Contrib do. I was wondering why the Contrib repository was giving the error messages with Mandrake9.2, when it didn't with earlier versions. Should I try to solve the bad signature message problem, or ignore it? That was the reason for my posting. I hadn't seen anyone else reporting this happening. Hope this is a bit clearer. Okay clear. There are 2 separate things here: packages on CD for which the signature checks and packages on the same CD`s for which the signature does not check. In principle that ought not to be possible, but, I have the same CD`s and see on Installation CD No. 2: kdenetwork-kppp-3.1.3-37mdk.i586.rpm when I go to /mnt/cdrom/Mandrake/RPMS and type (as root) rpm -K *kppp* I get: kdenetwork-kppp-3.1.3-37mdk.i586.rpm: (sha1) dsa sha1 md5 gpg OK so the signature *is* okay. If I go into MCC - Software management - Software Media Manager - Manage Keys I see that CD # 2 has the original MD key # 70771FF3 next to it. So I can only assume that if and when you have bad signature message that at that time your rpm database was corrupt or the key was not associated to CD # 2. As far as the Contrib Cooker packages are concerned, I understood that had been a lot of discussion about those, and it will apparently not be possible to authenticate them all (this isn`t new, the same applied to 9.1 packages in these categories). However if you look at the information page per rpm in rpmsearch (e.g. on MandrakeClub) you should see already mention of the key with which it has been signed, if any and if so which. In the latter case you can obtain the key as previously described and add it to your rpm-keyring. If it is not signed at all, you should consider whether or not you want to install it. If it has a high securety impact for you, you should not install an unsigned package. In such case, PH you might ask the contributor to add his personal GnuPG signature to the package. Thanks for the extra information, Dick. I'll work on it over the week-end and see follow your advice. Been too busy the last couple of days to do anything about it. Cheers Keith Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
On Fri, 28 Nov 2003 19:37:35 + Keith Powell [EMAIL PROTECTED] wrote: I too get the Mirror uses invalid list try alternative method message when installing packages from contrib. I didn't mention it, though, as I did not want to confuse things even more! You will get that error if you are not using ../base for your contrib source. The whatever/contrib/i586/ contains a synthesis.hdlist2.cz and the rpms can be installed using such, But, it does not contain a list or hdlist as does base so you get the 'invalid list' Charles -- Fortune's real live weird band names #130: Cherry Poppin' Daddies - Mandrake Linux 10.0 on PurpleDragon Kernel-2.6.0-0.1mdkenterprise http://www.eslrahc.com - pgp0.pgp Description: PGP signature
Re: [newbie] Bad signatures in 9.2
On Fri, 28 Nov 2003 15:15:57 + Charles A Edwards [EMAIL PROTECTED] wrote: You will get that error if you are not using ../base for your contrib source. The whatever/contrib/i586/ contains a synthesis.hdlist2.cz and the rpms can be installed using such, But, it does not contain a list or hdlist as does base so you get the 'invalid list' Thanks Charles, My original contrib url is ftp://mirrors.secsup.org/pub/linux/mandrake/Mandrake/9.2/contrib/i586 path to hdlist: ../../i586/Mandrake/base/hdlist2.cz (this was the urpmi.addmedia given by easy urpmi on plf) that path to hdlist was the only /base dir i could find. So as far as I can tell it was reading the right hdlist. I'll mess around with it and see. I even tried updating the contrib source or using a different one and it still gives me that error when installing from contrib. I'll report back after trying a few things. Jerry. -- _||_ Registered linux user #300600 (o_ Registered linux machine # 185855 //\at V_/_ http://counter.li.org Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 26 Nov 2003 14:18:48 +, Keith Powell [EMAIL PROTECTED] wrote about Re: [newbie] Bad signatures in 9.2: I installed the download edition of 9.2 from magazine cover disks, but KPPP did not install. So I installed it from the CDs using MCC. When I installed it, there was the bad signature message, which I ignored. I could not understand why there was this message with a package which was on the CDs. I then downloaded and installed the security updates (which were clear of the error message). Next I downloaded and installed a package from Contrib and got the error message. Then I downloaded and installed all the other updates. These too were clear of the signature error message. Now, installing packages from the CDs don't give the bad signature message, but installing packages from Contrib do. I was wondering why the Contrib repository was giving the error messages with Mandrake9.2, when it didn't with earlier versions. Should I try to solve the bad signature message problem, or ignore it? That was the reason for my posting. I hadn't seen anyone else reporting this happening. Hope this is a bit clearer. Okay clear. There are 2 separate things here: packages on CD for which the signature checks and packages on the same CD`s for which the signature does not check. In principle that ought not to be possible, but, I have the same CD`s and see on Installation CD No. 2: kdenetwork-kppp-3.1.3-37mdk.i586.rpm when I go to /mnt/cdrom/Mandrake/RPMS and type (as root) rpm -K *kppp* I get: kdenetwork-kppp-3.1.3-37mdk.i586.rpm: (sha1) dsa sha1 md5 gpg OK so the signature *is* okay. If I go into MCC - Software management - Software Media Manager - Manage Keys I see that CD # 2 has the original MD key # 70771FF3 next to it. So I can only assume that if and when you have bad signature message that at that time your rpm database was corrupt or the key was not associated to CD # 2. As far as the Contrib Cooker packages are concerned, I understood that had been a lot of discussion about those, and it will apparently not be possible to authenticate them all (this isn`t new, the same applied to 9.1 packages in these categories). However if you look at the information page per rpm in rpmsearch (e.g. on MandrakeClub) you should see already mention of the key with which it has been signed, if any and if so which. In the latter case you can obtain the key as previously described and add it to your rpm-keyring. If it is not signed at all, you should consider whether or not you want to install it. If it has a high securety impact for you, you should not install an unsigned package. In such case, PH you might ask the contributor to add his personal GnuPG signature to the package. Regards, =Dick Gevers= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Encryption is an envelope - the contents are private. iD8DBQE/xQOZwC/zk+cxEdMRAmj/AKCB98v5S0+b+GhiHG+3mHUr9UYjnACgiSR6 IyXG6GniGqAKCJGgfxdXKI8= =VhDI -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
On Sunday 23 Nov 2003 7:40 pm, Dick Gevers wrote: On Sun, 23 Nov 2003 09:56:07 +, Keith Powell [EMAIL PROTECTED] wrote about [newbie] Bad signatures in 9.2: However, if I try to install anything from the rediris contrib mirror, I get the Invalid Signature message on each package. But they will install if I ignore the message. I didn't get these errors with 9.1 First of all you might want to check out the errata page. Then you could use the trusted method (as root) of rpm -K foobar.rpm, which will tell you if the signature is there or not and valid or not, and the md5 sum is okay or not. If you urpmi packages, any signatures they contain should automagically be added to the keyring, which is now in a database managed by rpm, and no longer uses root`s GnuPG keyring. Moreover, it might help to update the rpm* packages, which have been published since 9.2 was distributed, should you not have done so yet. Under Mandrake Control Center the keys can be managed via `Software Manager` - -- `Software Media Manager` -- Manage keys... If you use rpm on the console, obtain the key (or export to file from keyring) and import the key to the rpm-keyring with: rpm --import foo.bar(.asc). HTH =Dick Gevers= Dick, thanks for your reply. The help is appreciated. I have now installed all the updates (which took several hours - hence the delay in replying to you) and have then installed a package from the CDs. There is still the same bad signature message. As I wrote before, I haven't had this with the CDs from earlier versions. Not tried installing any more packages from Contrib yet. So I will now go through all you have suggested and see if it can be solved. Otherwise I will have to ignore the error messages, but I would rather not get them! Cheers and thanks again. Keith Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 25 Nov 2003 08:44:59 +, Keith Powell [EMAIL PROTECTED] wrote about Re: [newbie] Bad signatures in 9.2: However, if I try to install anything from the rediris contrib mirror, I get the Invalid Signature message on each package. But they will install if I ignore the message. I didn't get these errors with 9.1 Dick, thanks for your reply. The help is appreciated. I have now installed all the updates (which took several hours - hence the delay in replying to you) and have then installed a package from the CDs. There is still the same bad signature message. As I wrote before, I haven't had this with the CDs from earlier versions. Not tried installing any more packages from Contrib yet. So I will now go through all you have suggested and see if it can be solved. Otherwise I will have to ignore the error messages, but I would rather not get them! Maybe I`m daft, but I don`t understand what you`re trying to do: you say you have already installed the updates (presumably ignoring the error messages for absebce of sigs.) and now you want to check the signatures *afterward*? I understand it will give a sense of comfort afterward, but the security would be in checking during (or in my previous example before) installing the package. If rpm does not have the sig. in the keyring it must be imported, otherwise the sig. can`t be checked. You asked for the simplest way, so that`s what I gave you, IMO. But you might also manage the keys via MCC -- Software management -- Software media manager-- Manage keys. HTH regards, =Dick Gevers= . Mandrake visibility? See header . -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Encryption is an envelope - the contents are private. iD8DBQE/w87mwC/zk+cxEdMRAuz6AKCqqq7AnNYXdsi6c9F/M/UWHKAyXwCeMgLR jSPAvxBxz7wnagi7M4QcgtA= =Uuzi -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
[newbie] Bad signatures in 9.2
Greetings all. For family reasons, I have been off the list (and rarely on the computer) for about ten weeks, and have just joined again. I wanted to try Mandrake9.2 so, before spending my hard-earned pension on the package, I have installed it from three magazine cover disks just to test. KPPP wasn't installed, so when I installed it from the CD, I got the error message that the signature was invalid. I ignored the message. I have downloaded and installed all the upgrades and they were without errors. However, if I try to install anything from the rediris contrib mirror, I get the Invalid Signature message on each package. But they will install if I ignore the message. I didn't get these errors with 9.1 My query is, are the errors likely to be caused by some file missing on the cover disks, or is it a known problem with 9.2? I can't find anything in the archives about it. What do I need to do to overcome this little problem, or do I just always ignore it? Otherwise, I am very impressed with 9.2 and will save up my pennies for the package version!!! Many thanks for any help. Keith Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
On Sunday 23 November 2003 09:56, Keith Powell wrote: snip However, if I try to install anything from the rediris contrib mirror, I get the Invalid Signature message on each package. But they will install if I ignore the message. I didn't get these errors with 9.1 My query is, are the errors likely to be caused by some file missing on the cover disks, or is it a known problem with 9.2? I can't find anything in the archives about it. What do I need to do to overcome this little problem, or do I just always ignore it? /snip That's a well known issued with the Contrib mirrors. The contrib packages aren't supported by Mandrake and thusly do not contain the signature. You can do two things : 1. Ignore it. As long as the md5sum is OK it doesn't matter. 2. Get the Signature from the server. I don't know how, and don't care, but others on this list know the procedure. HTH Kaj Haulrich. Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
Re: [newbie] Bad signatures in 9.2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 23 Nov 2003 09:56:07 +, Keith Powell [EMAIL PROTECTED] wrote about [newbie] Bad signatures in 9.2: However, if I try to install anything from the rediris contrib mirror, I get the Invalid Signature message on each package. But they will install if I ignore the message. I didn't get these errors with 9.1 First of all you might want to check out the errata page. Then you could use the trusted method (as root) of rpm -K foobar.rpm, which will tell you if the signature is there or not and valid or not, and the md5 sum is okay or not. If you urpmi packages, any signatures they contain should automagically be added to the keyring, which is now in a database managed by rpm, and no longer uses root`s GnuPG keyring. Moreover, it might help to update the rpm* packages, which have been published since 9.2 was distributed, should you not have done so yet. Under Mandrake Control Center the keys can be managed via `Software Manager` - -- `Software Media Manager` -- Manage keys... If you use rpm on the console, obtain the key (or export to file from keyring) and import the key to the rpm-keyring with: rpm --import foo.bar(.asc). HTH =Dick Gevers= -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3 (GNU/Linux) Comment: Encryption is an envelope - the contents are private. iD8DBQE/wQ0/wC/zk+cxEdMRArWuAKDrJreKuCLp9XTNnZAclpsvv+7SswCgpGAS wfavRXpWz15/toiz0PfNubU= =+MzV -END PGP SIGNATURE- Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
