I found an issue while using slackpkg where the following error presented itself:
ERROR: Verification of the gpg signature on CHECKSUMS.md5
failed! This could mean that the file is out of date
or has been tampered with. If you use mirrors.slackware.com
as your mirror, this could also mean that the mirror to
which you got redirected is not yet updated with the most
recent changes in the Slackware tree.
After some digging, this was down to the network having recently required the installation of a Zscaler root CA certificate, to which this particular machine had not yet installed. Interestingly, another identical machine did not present itself with this error, when both were connected to the same network and neither had the CA certificate installed. I concluded that this was due to the working machine having run slackpkg update or at least been used in some fashion, thus being able to download the GPG-KEY from https://www.slackware.com/infra/keys/GPG-KEY prior to the Zscaler service being implemented. Running slackpkg update gpg should retrieve and install the GPG-KEY but this did not resolve on the machine in question, neither did it show that the command had failed to retrieve the key.
Running gpg --list-keys should show the system keys and in the case of the suspect machine, this was empty, compared to the identical machine which worked and showed the installed keys.
To resolve, I downloaded the key manually but to do this, given the CA was not present on this machine, I had to use the --no-check-certificates option with wget, so as below:
wget --no-check-certificate https://www.slackware.com/infra/keys/GPG-KEY
We can then do, as root: gpg --import GPG-KEY
verifying with gpg --list-keys
slackpkg could now be used as expected, or indeed my check4updates script.
It is worth noting that as these boxes do not have the above mentioned Zscaler CA certificate installed, the selected mirror in /etc/slackpkg/mirrors should be http and not https
No comments:
Post a Comment
Note: only a member of this blog may post a comment.