Repository is not signed

If sometime something does not work...
Post Reply
bigby
Posts: 2
Joined: Fri Jan 08, 2016 21:22

Repository is not signed

Post by bigby » Fri Jan 08, 2016 21:29

Since today I'm getting following warning, when I want to update my system:

Code: Select all

W: The repository 'http://debian.anonymous-proxy-servers.net sid Release' is not signed.
Maybe the reason is Release.gpg file is missing?

akwala
Posts: 2
Joined: Fri Jan 25, 2013 3:45

Re: Repository is not signed

Post by akwala » Fri Jan 08, 2016 22:49

That would explain why I get the following warning when I try to update using apt-get:
The following packages will be upgraded:
jondofox-en (2.12.0 => 2.14.0)
WARNING: The following packages cannot be authenticated!
jondofox-en

User avatar
GiHimp
Posts: 73
Joined: Sat May 03, 2014 14:19
Location: China
Contact:

Re: Repository is not signed

Post by GiHimp » Sun Jan 10, 2016 6:16

Packet managers of several Linux machines announce an update of JondoFox to the version 2.14.0.

However, the JondoFox package can't be authenticated by any of the systems.

I'll put the JondoFox update on hold until I get confirmation of it's verified origin.

User avatar
jondos
Posts: 1241
Joined: Thu May 24, 2007 14:52

Re: Repository is not signed

Post by jondos » Wed Jan 13, 2016 16:00

We are working on the problem. COuld you please re-check and send us a bug report, if it does not work, yet?

User avatar
GiHimp
Posts: 73
Joined: Sat May 03, 2014 14:19
Location: China
Contact:

Re: Repository is not signed

Post by GiHimp » Thu Jan 14, 2016 2:46

jondos wrote:We are working on the problem. COuld you please re-check and send us a bug report, if it does not work, yet?
nope, didn't work for me:

W: GPG error: https://debian.anonymous-proxy-servers.net jessie Release: The following signatures were invalid: BADSIG 2146D0CD2B3CAA3E JonDos GmbH (Software Signing Key) <software@jondos.de>

bigby
Posts: 2
Joined: Fri Jan 08, 2016 21:22

Re: Repository is not signed

Post by bigby » Fri Jan 15, 2016 22:57

@jondos, @GiHimp:

confirmed!
I have the very same issue, apt seems to have the correct fingerprint:

Code: Select all

$ apt-key finger 2B3CAA3E
pub   4096R/2B3CAA3E 2014-10-20 [expires: 2024-10-17]
      Key fingerprint = 6899 5C53 D2CE E11B 0E41  82F6 2146 D0CD 2B3C AA3E
uid                  JonDos GmbH (Software Signing Key) <software@jondos.de>
sub   4096R/F9115DBF 2014-10-20 [expires: 2024-10-17]
Maybe the following output will be helpful:

Code: Select all

$ sed -n "s,main/binary-amd64/Packages$,,p" debian.anonymous-proxy-servers.net_dists_sid_Release
 ea972ca978b1b6ac3ffbcea1c777a405            10035 
 09013e5c9d3b6954475db67bed932a5938d2675d            10035 
 d67dfc371e719a62327299a3f96eb6e1f4291a3a92f3562aa09853f41b42a6eb            10035 
 41e20103e10a5413587c745eb685fe020a38692e7e2bc010fc065c217f43cc615e1fd3cf1261b7c87b03483dfa7465d81093a9a564e3a491b0f8e025693e38ce            10035 

$ sed -n "s,main/binary-i386/Packages$,,p" debian.anonymous-proxy-servers.net_dists_sid_Release
 c385056f602dba5495f13a55cb7d1f5f            10030 
 aea08985508cebeb2d1f37a22631b7b56035fdf0            10030 
 cb6fcdde204f05d32cdaf41b088263df2c65afd8dbbd92f3ef0c9f8ea55fded9            10030 
 092a6d55158609be75f7eaa07fef8872a55e957511549c06b6a4d3004b1f65ed10c51d6d3f4aca4bd88c16fad48c19c75564bcfae797d1c468bf148ef0478c69            10030
For the time being I recommend everyone who's facing the same issue to set the jondo package on hold, just like GiHimp did.
When it comes to issues like this in software handling such sensitive data, one should always be picky. ;)

@jondos
Could you please point me to the correct URL for the bug tracker? Maybe I'm a dunce, but I couldn't find any link.

User avatar
jondos
Posts: 1241
Joined: Thu May 24, 2007 14:52

Re: Repository is not signed

Post by jondos » Tue Jan 26, 2016 16:11

Thank you for your feedback! The repository should now work as expected, but you will need to download a new verification key, as explained here:

https://anonymous-proxy-servers.net/blo ... y-GPG.html

Post Reply