A strange issue with unauthenticated apt repositories

TheOneKEA · 01-09-2006, 08:40 AM

Lately I've noticed that many of the apt repositories I'm using are all failing to authenticate themselves correctly; the usual error message is as follows:

Code:

W: GPG error: ftp://ftp.uk.debian.org testing Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 010908312D230C5F

I have the UK, IE and US mirrors listed in my sources.list and all three fail to authenticate correctly. Does anyone know what the deal is, and whether or not any official repositories exist that are able to authenticate?

lestoil · 01-09-2006, 09:40 AM

see antiloaded post lower down in this forum. It 's a yrly thing.

TheOneKEA · 01-09-2006, 12:29 PM

Unfortunately, his instructions are slightly out of date - the key has changed again.

To fix this issue:

1. Import the apt repository key with this command:

Code:

gpg --keyserver keyring.debian.org --recv 010908312D230C5F

2. Export the key into the local apt keyring:

Code:

gpg --armor --export 2D230C5F | apt-key add -

3. Run apt-get update to make your local listings coherent.

Once I did that I was once again able to update.

anti.corp · 01-09-2006, 12:46 PM

Quote:

Originally Posted by TheOneKEA

Unfortunately, his instructions are slightly out of date - the key has changed again.

To fix this issue:

1. Import the apt repository key with this command:

Code:

gpg --keyserver keyring.debian.org --recv 010908312D230C5F

2. Export the key into the local apt keyring:

Code:

gpg --armor --export 2D230C5F | apt-key add -

3. Run apt-get update to make your local listings coherent.

Once I did that I was once again able to update.

Out of date? Would you be so kind to explain? (in case it's allready outdated).

Just read that you can also use the command to fix the problem:

Code:

# wget http://ftp-master.debian.org/ziyi_key_2006.asc -O - | apt-key add -

TheOneKEA · 01-10-2006, 03:40 AM

Quote:

Originally Posted by antiloaded

Out of date? Would you be so kind to explain? (in case it's allready outdated).

Your original commands included an old keyprint. The keyprint in the above commands is the key being used to authenticate the apt repositories now.

Quote:

Originally Posted by antiloaded

Just read that you can also use the command to fix the problem:

Code:

# wget http://ftp-master.debian.org/ziyi_key_2006.asc -O - | apt-key add -

Perhaps a thread like this ought to be sticky.

vpablos · 03-17-2011, 11:05 AM

Another solution that should not be used:

$ cat /etc/apt/apt.conf.d/02allowunauthenticated
APT::Get::AllowUnauthenticated "true";

But you must be carefull with the repositories/packages you install.