In the last week or so sa-update has been failing due to a gpg
cross-certification error:

[18306] dbg: gpg: Searching for 'gpg'
[18306] dbg: util: current PATH is: 
/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin:/usr/lib/java/bin
[18306] dbg: util: executable for gpg was found at /usr/bin/gpg
[18306] dbg: gpg: found /usr/bin/gpg
[18306] dbg: gpg: release trusted key id list: 
5E541DC959CB8BAC7C78DFDC4056A61A5244EC45 
26C900A46DD40CD5AD24F6D7DEE01987265FA05B 
0C2B1D7175B852C64B3CDC716C55397824F434CE
[18306] dbg: channel: attempting channel updates.spamassassin.org
[...]
[18306] dbg: generic: lint check of site pre files succeeded, continuing with 
channel updates
[18306] dbg: channel: reading MIRRORED.BY file
[18306] dbg: channel: found mirror http://daryl.dostech.ca/sa-update/asf/ 
weight=5
[18306] dbg: channel: found mirror http://www.sa-update.pccc.com/ weight=5
[18306] dbg: channel: selected mirror http://www.sa-update.pccc.com
[18306] dbg: http: GET request, http://www.sa-update.pccc.com/792712.tar.gz
[18306] dbg: http: GET request, http://www.sa-update.pccc.com/792712.tar.gz.sha1
[18306] dbg: http: GET request, http://www.sa-update.pccc.com/792712.tar.gz.asc
[18306] dbg: http: IMS GET request, http://www.sa-update.pccc.com/MIRRORED.BY, 
Mon, 30 Mar 2009 08:03:24 GMT
[18306] dbg: sha1: verification wanted: 58c1b218366fb49b287d8a63a39a7b130c0faab8
[18306] dbg: sha1: verification result: 58c1b218366fb49b287d8a63a39a7b130c0faab8
[18306] dbg: channel: populating temp content file
[18306] dbg: gpg: populating temp signature file
[18306] dbg: gpg: calling gpg
[18306] dbg: gpg: gpg: Signature made Thu 09 Jul 2009 05:32:21 PM EDT using RSA 
key ID 24F434CE
[18306] dbg: gpg: gpg: WARNING: signing subkey 24F434CE is not cross-certified
[18306] dbg: gpg: gpg: please see 
http://www.gnupg.org/faq/subkey-cross-certify.html for more information
[18306] dbg: gpg: [GNUPG:] ERRSIG 6C55397824F434CE 1 2 00 1247175141 1
[18306] dbg: gpg: gpg: Can't check signature: general error
error: GPG validation failed!
The update downloaded successfully, but the GPG signature verification
failed.
channel: GPG validation failed, channel failed
[18306] dbg: generic: cleaning up temporary directory/files
[18306] dbg: diag: updates complete, exiting with code 4

This means to me that the spamassassin key needs to be cross-certified
but since I haven't seen anyone else mention this I am thinking maybe
I need to update something, although I am not sure what.



Matt

-- 
GnuPG Key ID: 0xC33BD882
aim: beyondzero123                  yahoo msg: beyondzero123

I do not want to die without any scars.
     -Tyler Durden

Reply via email to