The following signatures couldn't be verified

From Strugglers
Jump to: navigation, search

The last two days I've been getting the following breakage email from the daily updates script on one of my etch Xen domains:

/etc/cron.daily/local-apt:
W: GPG error: http://admin.curacao.strugglers.net etch Release: \
The following signatures couldn't be verified because the \
public key is not available: NO_PUBKEY 010908312D230C5F
W: You may want to run apt-get update to correct these problems 

On further investigaton it seems to be because etch's APT is now checking signatures against a GPG key I do not have configured. Thanks to JackieBrown's post at DebCentral (and Google), a solution is found:

$ gpg --keyserver subkeys.pgp.net --recv-keys 2D230C5F
gpg: requesting key 2D230C5F from hkp server subkeys.pgp.net
gpg: /home/andy/.gnupg/trustdb.gpg: trustdb created
gpg: key 2D230C5F: public key "Debian Archive Automatic Signing Key (2006) " imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1
$ gpg --armor --export 2D230C5F | sudo apt-key add -
gpg: no ultimately trusted keys found
OK
$ sudo apt-get update
Get:1 http://admin.curacao.strugglers.net etch Release.gpg [378B]
Get:2 http://admin.curacao.strugglers.net etch/updates Release.gpg [189B]
Hit http://admin.curacao.strugglers.net etch Release
Hit http://admin.curacao.strugglers.net etch/updates Release
Hit http://admin.curacao.strugglers.net etch/main Packages
Hit http://admin.curacao.strugglers.net etch/main Sources
Ign http://admin.curacao.strugglers.net etch/updates/main Packages
Hit http://admin.curacao.strugglers.net etch/updates/main Packages
Fetched 567B in 9s (58B/s)
Reading package lists... Done
$ sudo apt-get upgrade
Reading package lists... Done
Building dependency tree... Done
The following packages will be upgraded:
  libsensors3 libssl-dev libssl0.9.8 manpages manpages-dev openssl
6 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 8068kB of archives.
After unpacking 32.8kB of additional disk space will be used.
Do you want to continue [Y/n]?
Get:1 http://admin.curacao.strugglers.net etch/main libssl-dev 0.9.8a-5 [2837kB] Get:2 http://admin.curacao.strugglers.net etch/main openssl 0.9.8a-5 [977kB]
Get:3 http://admin.curacao.strugglers.net etch/main libssl0.9.8 0.9.8a-5 [2645kB] Get:4 http://admin.curacao.strugglers.net etch/main manpages 2.17-1 [411kB]
Get:5 http://admin.curacao.strugglers.net etch/main manpages-dev 2.17-1 [1118kB] Get:6 http://admin.curacao.strugglers.net etch/main libsensors3 1:2.9.2-7 [80.4kB] Fetched 8068kB in 6s (1165kB/s)
Reading changelogs... Done
Preconfiguring packages ...
(Reading database ... 23620 files and directories currently installed.)
Preparing to replace libssl-dev 0.9.8a-3 (using .../libssl-dev_0.9.8a-5_i386.deb) ...
Unpacking replacement libssl-dev ...
Preparing to replace openssl 0.9.8a-3 (using .../openssl_0.9.8a-5_i386.deb) ... Unpacking replacement openssl ...
Preparing to replace libssl0.9.8 0.9.8a-3 (using .../libssl0.9.8_0.9.8a-5_i386.deb) ...
Unpacking replacement libssl0.9.8 ...
Preparing to replace manpages 2.10-1 (using .../manpages_2.17-1_all.deb) ... Unpacking replacement manpages ...
Preparing to replace manpages-dev 2.10-1 (using .../manpages-dev_2.17-1_all.deb) ...
Unpacking replacement manpages-dev ...
Preparing to replace libsensors3 1:2.9.2-6 (using .../libsensors3_1%3a2.9.2-7_i386.deb) ...
Unpacking replacement libsensors3 ...
Setting up libssl0.9.8 (0.9.8a-5) ...

Setting up libssl-dev (0.9.8a-5) ...

Setting up openssl (0.9.8a-5) ...

Setting up manpages (2.17-1) ...
Setting up manpages-dev (2.17-1) ...
Setting up libsensors3 (2.9.2-7) ... 

It all seems to be working again now!