Project

General

Profile

Actions
Copy link

Bug #2890

closed

Repository "www.rudder-project.org/apt-2.3/" is not signed

Added by Vincent MEMBRÉ over 11 years ago. Updated about 9 years ago.

Status:
Released
Priority:
2
Assignee:
Nicolas PERRON
Category:
-
Target version:
-
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

When I install a stable Rudder 2.3 (repository: www.rudder-project.org/apt-2.3/),
I got this message:

WARNING: untrusted versions of the following packages will be installed!

Untrusted packages could compromise your system's security.
You should only proceed with the installation if you are certain that
this is what you want to do.

  rudder-server-root rudder-policy-templates rudder-jetty 
  rudder-inventory-endpoint rudder-cfengine-community rudder-inventory-ldap 
  rudder-webapp rudder-reports 

Do you want to ignore this warning and proceed anyway?
To continue, enter "Yes"; to abort, enter "No":

I added the key following the standard procedure: 

 wget --quiet -O- "http://keyserver.ubuntu.com/pks/lookup?op=get&search=0x474A19E8" | sudo apt-key add -

Actions
Copy link
 #1

Updated by Nicolas PERRON over 11 years ago

You're right, none of our packages seems to be signed since Rudder 2.3.6. I will correct this as soon as possible

Actions
Copy link
 #2

Updated by Nicolas PERRON over 11 years ago

  • Status changed from New to In progress
  • Assignee set to Nicolas PERRON

What is strange, is that even the signed packages seems to not be signed:

# dpkg-sig -c rudder-server-root_2.3.6-squeeze0_all.de

May be an other tool should be used.

Actions
Copy link
 #3

Updated by Nicolas PERRON over 11 years ago

  • Status changed from In progress to Pending technical review
  • % Done changed from 0 to 100

Nicolas PERRON wrote:

What is strange, is that even the signed packages seems to not be signed:
[...]

May be an other tool should be used.

A better approach was to search for *.gpg in every repositories.

All packages are signed, now.

Actions
Copy link
 #4

Updated by Nicolas PERRON over 11 years ago

  • Category changed from 11 to 13
Actions
Copy link
 #5

Updated by Jonathan CLARKE over 11 years ago

  • Status changed from Pending technical review to Released
Actions
Copy link
 #6

Updated by Benoît PECCATTE about 9 years ago

  • Project changed from Rudder to Rudder websites
  • Category deleted (13)
Actions
Copy link
 #7

Updated by Benoît PECCATTE about 9 years ago

  • Target version deleted (2.3.9)
Actions
Copy link

Also available in: Atom PDF