[Bug 1961864] Re: fwupd daemon failed verifying firmware signature

2022-02-23 Thread Crag Wang 
It works well with libjcat 0.1.4 from comment #7, we need uprev libjcat
as mentioned in the bug description to fulfilling the runtime
dependency.

0.1.4 as a minimum version of libjcat is now required by upstream fwupd,
details at
https://github.com/fwupd/fwupd/commit/7157ca79e4d6b13d82b0a21f8586b86be0cbb80e

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1961864

Title:
  fwupd daemon failed verifying firmware signature

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1961864/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1961864] Re: fwupd daemon failed verifying firmware signature

2022-02-23 Thread Crag Wang 
With newer libjcat installed from given ppa in comment #4, and restarted
the daemon now I can update firmware successfully. Thanks.

$ fwupdmgr --version
runtime   org.freedesktop.fwupd 1.7.5
runtime   com.dell.libsmbios2.4
compile   org.freedesktop.gusb  0.3.4
runtime   org.kernel5.11.0-49-generic
compile   org.freedesktop.fwupd 1.7.5
runtime   org.freedesktop.gusb  0.3.5

$ dpkg -l | grep libjcat
ii  gir1.2-jcat-1.0:amd64 0.1.9-1~20.04.1
ii  libjcat-dev:amd64 0.1.9-1~20.04.1
ii  libjcat1:amd640.1.9-1~20.04.1

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1961864

Title:
  fwupd daemon failed verifying firmware signature

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1961864/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1961864] Re: fwupd daemon failed verifying firmware signature

2022-02-23 Thread Crag Wang 
Can you please paste your output from running below?
$ gcab -x 
4e3f12fc1901c05790ab17ff2223a79631477aa87979498874c4c262cfafc144-WD19FirmwareUpdateLinux_01.00.21.cab
$ jcat-tool verify ./firmware.jcat --public-keys /etc/pki/fwupd

package.bin:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
ec.bin:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
vmm5331.bin:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
rts5413.bin:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
rts5487.bin:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
titanridge.bin:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
package.metainfo.xml:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
ec.metainfo.xml:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
vmm5331.metainfo.xml:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
rts5413.metainfo.xml:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
rts5487.metainfo.xml:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
titanridge.metainfo.xml:
FAILED sha1: verifying data is not supported
FAILED sha256: verifying data is not supported
PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
FAILED: Validation failed
Validation failed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1961864

Title:
  fwupd daemon failed verifying firmware signature

To manage notifications about this bug go to:
https://bugs.launchpad.net/oem-priority/+bug/1961864/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 1961864] [NEW] fwupd daemon failed verifying firmware signature

2022-02-22 Thread Crag Wang 
Public bug reported:

The firmware blobs in cabinet archive are presently LVFS signed with gpg
and pkcs7, if libjcat at compilation time without one then the blobs
signed with both can't be verified.

Impact is fwupd daemon will fail the firmware install immediately
because OnlyTrusted=true is defaulted to verifying the signature for
daemon.

We need uprev libjcat at least 0.1.4 onward to fix this issue.

Issue is reproducible with fwupd 1.7.4
-> https://launchpad.net/~ycheng-twn/+archive/ubuntu/fwupd174

$ fwupdmgr --version
client version: 1.7.4
compile-time dependency versions
gusb:   0.3.4

daemon version: 1.7.4

$ dpkg -l | grep libjcat
ii  libjcat1:amd640.1.3-2   amd64   JSON catalog library

** Affects: fwupd (Ubuntu)
 Importance: Undecided
 Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1961864

Title:
  fwupd daemon failed verifying firmware signature

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fwupd/+bug/1961864/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs