ubuntu 16.04 gpg keys not working.

Sebastian Muñiz <[email protected]>
Newsgroups gmane.linux.mondo.devel
Message-ID <CAMBB+ZyHxx8qSVL+nv9wk2LDcSC6N3d-tuVoVH=U4B-qreCZww@mail.gmail.com>
Hello,
I am trying to test Mondorescue in an ubuntu server 16.04 totally patched
to today.
I added the repo list from:
ftp://ftp.mondorescue.org/ubuntu/16.04/mondorescue.sources.list

seba@ubuntu:~$ wget
ftp://ftp.mondorescue.org/ubuntu/16.04/mondorescue.sources.list
--2017-10-10 01:06:19--
ftp://ftp.mondorescue.org/ubuntu/16.04/mondorescue.sources.list
           => ‘mondorescue.sources.list’
Resolving ftp.mondorescue.org (ftp.mondorescue.org)... ^C
seba@ubuntu:~$ wget -q
ftp://ftp.mondorescue.org/ubuntu/16.04/mondorescue.sources.list
seba@ubuntu:~$ sudo cp mondorescue.sources.list /etc/apt/sources.list.d/
seba@ubuntu:~$ sudo apt update
Get:1 http://security.ubuntu.com/ubuntu xenial-security InRelease [102 kB]
Hit:2 http://ar.archive.ubuntu.com/ubuntu xenial InRelease
Hit:3 http://ar.archive.ubuntu.com/ubuntu xenial-updates InRelease
Hit:4 http://ar.archive.ubuntu.com/ubuntu xenial-backports InRelease
Get:5 ftp://ftp.mondorescue.org//ubuntu 16.04 InRelease
Ign:5 ftp://ftp.mondorescue.org//ubuntu 16.04 InRelease
Get:6 ftp://ftp.mondorescue.org//ubuntu 16.04 Release [7,753 B]
Get:7 ftp://ftp.mondorescue.org//ubuntu 16.04 Release.gpg [931 B]
Ign:7 ftp://ftp.mondorescue.org//ubuntu 16.04 Release.gpg
Reading package lists... Done
W: GPG error: ftp://ftp.mondorescue.org//ubuntu 16.04 Release: The
following signatures couldn't be verified because the public key is not
available: *NO_PUBKEY 6BA8C2D220EBFB0*E
E: The repository 'ftp://ftp.mondorescue.org//ubuntu 16.04 Release' is not
signed.
N: Updating from such a repository can't be done securely, and is therefore
disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration
details.


As per:
https://sourceforge.net/p/mondo/mailman/message/35699246/

I recv the keys (both)
sudo gpg --recv-keys 8AB63AFD171EFF9E && sudo gpg -a --export
8AB63AFD171EFF9E | apt-key add -
sudo gpg --recv-keys 6BA8C2D220EBFB0E && sudo gpg -a --export
6BA8C2D220EBFB0E | sudo apt-key add -

seba@ubuntu:~$ sudo gpg --recv-keys 8AB63AFD171EFF9E && sudo gpg -a
--export 8AB63AFD171EFF9E | sudo apt-key add -
gpg: requesting key 171EFF9E from hkp server keys.gnupg.net
gpg: /home/seba/.gnupg/trustdb.gpg: trustdb created
gpg: key 171EFF9E: public key "Bruno Cornec <[email protected]>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1
OK
seba@ubuntu:~$ sudo gpg --recv-keys 6BA8C2D220EBFB0E && sudo gpg -a
--export 6BA8C2D220EBFB0E | sudo apt-key add -
gpg: requesting key 20EBFB0E from hkp server keys.gnupg.net
gpg: key 20EBFB0E: public key "Bruno Cornec (FLOSS & Early Music) <
[email protected]>" imported
gpg: no ultimately trusted keys found
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
OK

seba@ubuntu:~$ apt-key list
/etc/apt/trusted.gpg
--------------------
pub   1024D/437D05B5 2004-09-12
uid                  Ubuntu Archive Automatic Signing Key <
[email protected]>
sub   2048g/79164387 2004-09-12

pub   4096R/C0B21F32 2012-05-11
uid                  Ubuntu Archive Automatic Signing Key (2012) <
[email protected]>

pub   4096R/EFE21092 2012-05-11
uid                  Ubuntu CD Image Automatic Signing Key (2012) <
[email protected]>

pub   1024D/FBB75451 2004-12-30
uid                  Ubuntu CD Image Automatic Signing Key <
[email protected]>

pub   1024D/171EFF9E 2002-09-20
uid                  Bruno Cornec <[email protected]>
uid                  Bruno Cornec <[email protected]>
sub   1024g/0A4B9E57 2002-09-20

pub   4096R/20EBFB0E 2017-01-04
uid                  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec <[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
uid                  Bruno Cornec <[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
uid                  Bruno Cornec (Early Music) <[email protected]>
sub   4096R/9955AC07 2017-01-04

If I:
seba@ubuntu:~$ sudo gpg --list-sigs
/home/seba/.gnupg/pubring.gpg
-----------------------------
pub   1024D/171EFF9E 2002-09-20
uid                  Bruno Cornec <[email protected]>
sig 3        171EFF9E 2007-05-14  Bruno Cornec <[email protected]>
uid                  Bruno Cornec <[email protected]>
sig          B5BD5831 2004-11-18  [User ID not found]
sig          37DB9883 2007-05-15  [User ID not found]
sig 3        171EFF9E 2002-09-20  Bruno Cornec <[email protected]>
sub   1024g/0A4B9E57 2002-09-20
sig          171EFF9E 2002-09-20  Bruno Cornec <[email protected]>

pub   4096R/20EBFB0E 2017-01-04
uid                  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
sig          37DB9883 2017-01-05  [User ID not found]
sig 3        20EBFB0E 2017-01-05  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec <[email protected]>
sig 3        20EBFB0E 2017-06-07  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
sig          37DB9883 2017-01-05  [User ID not found]
sig 3        20EBFB0E 2017-01-05  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec <[email protected]>
sig 3        20EBFB0E 2017-06-07  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
sig          37DB9883 2017-01-05  [User ID not found]
sig 3        20EBFB0E 2017-01-05  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
sig          37DB9883 2017-01-05  [User ID not found]
sig 3        20EBFB0E 2017-01-05  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec (FLOSS) <[email protected]>
sig          37DB9883 2017-01-05  [User ID not found]
sig 3        20EBFB0E 2017-01-05  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
uid                  Bruno Cornec (Early Music) <[email protected]>
sig          37DB9883 2017-01-05  [User ID not found]
sig 3        20EBFB0E 2017-01-05  Bruno Cornec (FLOSS & Early Music) <
[email protected]>
sub   4096R/9955AC07 2017-01-04
sig          20EBFB0E 2017-01-04  Bruno Cornec (FLOSS & Early Music) <
[email protected]>

Notice the [User ID not found] entries.


At this point the apt update command shows BADSIG:
seba@ubuntu:~$ sudo apt update
Get:1 http://security.ubuntu.com/ubuntu xenial-security InRelease [102 kB]
Hit:2 http://ar.archive.ubuntu.com/ubuntu xenial InRelease
Hit:3 http://ar.archive.ubuntu.com/ubuntu xenial-updates InRelease
Hit:4 http://ar.archive.ubuntu.com/ubuntu xenial-backports InRelease
Get:5 ftp://ftp.mondorescue.org//ubuntu 16.04 InRelease
Ign:5 ftp://ftp.mondorescue.org//ubuntu 16.04 InRelease
Get:7 ftp://ftp.mondorescue.org//ubuntu 16.04 Release.gpg [931 B]
Ign:7 ftp://ftp.mondorescue.org//ubuntu 16.04 Release.gpg
Reading package lists... Done
W: GPG error: ftp://ftp.mondorescue.org//ubuntu 16.04 Release: The
following signatures were invalid: *BADSIG 6BA8C2D220EBFB0E Bruno Cornec
(FLOSS & Early Music) <[email protected] <[email protected]>>*
E: The repository 'ftp://ftp.mondorescue.org//ubuntu 16.04 Release' is not
signed.
N: Updating from such a repository can't be done securely, and is therefore
disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration
details.


And I haven't been able to quite understand what is going on.

Could someone explain me what am I doing wrong?
THanks in advance,
Sebastian



-- 
i prefer to wear my pants backwards, because it is more thrilling to me,
intellectually ( @billwurtz )

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot

_______________________________________________
Mondo-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/mondo-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.