Package Sign Error

gzmorell · 2012-06-22 12:55:49

Hi,

I have noticed the next error:
(1/1) checking package integrity [#############################################################] 100%
error: ddd: signature from "Eric Belanger <eric@archlinux.org>" is invalid
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

This happens with some packages, while others installs/upgrades normally without an error.
It does not depend on the mainteiner, since others packages from the same maintainer installs correctly.
I have reported a bug with one of this packages: "vlc" and the bug was closed as the maintainer told the package was correct.
It also does not depends on the repo, since the problem arises in different repos.
I have also tried to delete the "/etc/pacman.d/gnupg" directory, and follow the instruction to get it again.
I have also tried to change the keyserver in "gpg.conf".
The problem remains.
Is there any way to manually check the signature of the package?

thanks,

gzmorell · 2012-06-22 13:24:25

Some more failures:

error: glibc: signature from "Allan McRae <me@allanmcrae.com>" is invalid
error: imagemagick: signature from "Eric Belanger <eric@archlinux.org>" is invalid
error: krb5: signature from "Stéphane Gaudreault <stephane@archlinux.org>" is invalid
error: sane: signature from "Tobias Powalowski <tobias.powalowski@googlemail.com>" is invalid
error: failed to commit transaction (invalid or corrupted package (PGP signature))
Errors occurred, no packages were upgraded.

A package correctly upgraded:
Targets (1): iptables-1.4.14-2

Total Installed Size: 1.66 MiB
Net Upgrade Size: 0.77 MiB

Proceed with installation? [Y/n] y
(1/1) checking package integrity [#############################################################] 100%
(1/1) loading package files [#############################################################] 100%
(1/1) checking for file conflicts [#############################################################] 100%
(1/1) checking available disk space [#############################################################] 100%
(1/1) upgrading iptables [#############################################################] 100%

Archdevil · 2012-06-22 13:36:11

Did you use pacman-key --init?

And did you use pacman-key --populate afterwards?

That solved my problems.

Good luck!

Archie

Terminator · 2012-06-22 14:13:34

You should read the news (on the main arch linux page). Also, you should use code-tags.

edit: If you did read the news (and ran pacman-key --populate archlinux), then I assume you didn't enter 'y' for every key.

Last edited by Terminator (2012-06-22 14:15:10)

Inxsible · 2012-06-22 14:27:45

also use [ code ] tags to post snippets.

gzmorell · 2012-06-22 14:54:56

Yes I have read the news.
Yes I have run :
[ #pacman-key --init
#pacman-key --populate archlinux
]
Yes I have answered "y" for the keys.
I have also merged pacman.conf and pacman.conf.new
In fact everything was working fine till 2 days ago.

Inxsible · 2012-06-22 14:56:35

using code tags means you actually write [ code ] [/ code ] around the snippet (without the spaces of course).

On topic, can you post your pacman.conf

gzmorell · 2012-06-22 16:24:11

#
# /etc/pacman.conf
#
# See the pacman.conf(5) manpage for option and repository directives

#
# GENERAL OPTIONS
#
[options]
# The following paths are commented out with their default values listed.
# If you wish to use different paths, uncomment and update the paths.
#RootDir     = /
#DBPath      = /var/lib/pacman/
CacheDir    = /dev/shm/pkg/
#LogFile     = /var/log/pacman.log
#GPGDir      = /etc/pacman.d/gnupg/
HoldPkg     = pacman glibc
# If upgrades are available for these packages they will be asked for first
SyncFirst   = pacman
#XferCommand = /usr/bin/curl -C - -f %u > %o
#XferCommand = /usr/bin/wget --passive-ftp -c -O %o %u
#CleanMethod = KeepInstalled
Architecture = auto

# Pacman won't upgrade packages listed in IgnorePkg and members of IgnoreGroup
#IgnorePkg   =
#IgnoreGroup =

#NoUpgrade   =
#NoExtract   =

# Misc options
#UseSyslog
#UseDelta
#TotalDownload
CheckSpace
#VerbosePkgLists

# By default, pacman accepts packages signed by keys that its local keyring
# trusts (see pacman-key and its man page), as well as unsigned packages.
#SigLevel = Optional TrustedOnly

# NOTE: You must run `pacman-key --init` before first using pacman; the local
# keyring can then be populated with the keys of all official Arch Linux
# packagers with `pacman-key --populate archlinux`.

#
# REPOSITORIES
#   - can be defined here or included from another file
#   - pacman will search repositories in the order defined here
#   - local/custom mirrors can be added here or in separate files
#   - repositories listed first will take precedence when packages
#     have identical names, regardless of version number
#   - URLs will have $repo replaced by the name of the current repo
#   - URLs will have $arch replaced by the name of the architecture
#
# Repository entries are of the format:
#       [repo-name]
#       Server = ServerName
#       Include = IncludePath
#
# The header [repo-name] is crucial - it must be present and
# uncommented to enable the repo.
#

# The testing repositories are disabled by default. To enable, uncomment the
# repo name header and Include lines. You can add preferred servers immediately
# after the header, and they will be used before the default mirrors.

#[testing]
#SigLevel = PackageRequired
#Include = /etc/pacman.d/mirrorlist

[core]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

[extra]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

#[community-testing]
#SigLevel = PackageRequired
#Include = /etc/pacman.d/mirrorlist

[community]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

# If you want to run 32 bit applications on your x86_64 system,
# enable the multilib repositories as required here.

#[multilib-testing]
#SigLevel = PackageRequired
#Include = /etc/pacman.d/mirrorlist

[multilib]
SigLevel = PackageRequired
Include = /etc/pacman.d/mirrorlist

# An example of a custom package repository.  See the pacman manpage for
# tips on creating your own repositories.
#[custom]
#SigLevel = Optional TrustAll
#Server = file:///home/custompkgs
[archlinuxfr]
SigLevel = Optional TrustAll
Server = http://repo.archlinux.fr/$arch

gzmorell · 2012-06-22 16:36:45

It seems to be some problem with the downloaded packages.
Now every package have been correctly installed except for glibc.
I have checked both the disk and the memory, without finding any error.
Memory was tested with memtes86+
Then I have changed the cache of pacman to /dev/shm which is mounted using memory.
I have tried to upgrade two times and calculated the downloaded md5sum of the package in the cachedir.
I have also tried to download the package from ; http://www.archlinux.org/packages/core/ … /download/ and calculate the md5sum. With firefox there was an error trying to download. Finally I have used "jdownloader"
The result is:

"First Attempt"
gzmorell@ArchGz pkg]$ md5sum glibc-2.15-12-x86_64.pkg.tar.xz 
69e449d3ea44e3379cf99f7486900d22  glibc-2.15-12-x86_64.pkg.tar.xz
"Second Attempt after deleting glibc-2.15-12-x86_64.pkg.tar.xz"
[gzmorell@ArchGz pkg]$ md5sum glibc-2.15-12-x86_64.pkg.tar.xz 
fe34df9f7b156c68a1a2d48005345f39  glibc-2.15-12-x86_64.pkg.tar.xz
"Package manually downloaded with jdownloder"
[gzmorell@ArchGz shm]$ md5sum glibc-2.15-12-x86_64.pkg.tar.xz 
50e03514713d7a1447356b64c3f306d2  glibc-2.15-12-x86_64.pkg.tar.xz

It has none sense.
Could anyone try to download the package and calculate the md5sum?
Thanks in advance.

gzmorell · 2012-06-22 16:45:26

Just to add that

$ xz -t glibc-2.15-12-x86_64.pkg.tar.xz
xz: glibc-2.15-12-x86_64.pkg.tar.xz: Compressed data is corrupt

for all the downloaded packages.

ethail · 2012-06-22 16:54:50

What mirror are you using? Have you tried with another one?

PD: instead of posting three times in a row, use the edit button to edit your post

gzmorell · 2012-06-22 17:26:21

Yes I have tried with different mirrors.
Any case it has nothing to do with pacman nor signing.
Now I have been able to upgrade everything. No idea what the matter is, probably some problem in my computer.
Anyway thanks for the answers.

Arch Linux

#1 2012-06-22 12:55:49

Package Sign Error

#2 2012-06-22 13:24:25

Re: Package Sign Error

#3 2012-06-22 13:36:11

Re: Package Sign Error

#4 2012-06-22 14:13:34

Re: Package Sign Error

#5 2012-06-22 14:27:45

Re: Package Sign Error

#6 2012-06-22 14:54:56

Re: Package Sign Error

#7 2012-06-22 14:56:35

Re: Package Sign Error

#8 2012-06-22 16:24:11

Re: Package Sign Error

#9 2012-06-22 16:36:45

Re: Package Sign Error

#10 2012-06-22 16:45:26

Re: Package Sign Error

#11 2012-06-22 16:54:50

Re: Package Sign Error

#12 2012-06-22 17:26:21

Re: Package Sign Error

Board footer