READ ONLY FORUM: m23 :: makes software distribution easy Forum Index READ ONLY FORUM: m23 :: makes software distribution easy
The m23 discussion forum
 
 FAQFAQ   SearchSearch   MemberlistMemberlist   UsergroupsUsergroups   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

m23.sourceforg.net public key

 
Post new topic   Reply to topic    READ ONLY FORUM: m23 :: makes software distribution easy Forum Index -> Problems with the server / Serverprobleme
View previous topic :: View next topic  
Author Message
TheGuv



Joined: 29 Oct 2010
Posts: 11

PostPosted: Fri Oct 29, 2010 8:42    Post subject: m23.sourceforg.net public key Reply with quote

Hi all,

I'm trying out m23 internally - from the m23.sf.net debian packages as installation is on an existing shared server.

Trying to assimilate another debian server, I'm having some problems with the running of the 'work.php' script. Particularly, apt-get is giving an error as the public key C6F0913D3305E63A isn't available. The one on the m23 home page seems to be different:

pub 1024D/68943878 2003-11-27
uid Hauke Goos-Habermann (m23.sf.net) <hhabermann>
sub 1024g/DC9D42CB 2003-11-27

Please could somebody advise where to fetch the real pubkey from - it doesn't appear to be available on any public keyservers.

'guv
Back to top
View user's profile Send private message
Hauke



Joined: 02 Mar 2003
Posts: 1072

PostPosted: Fri Oct 29, 2010 10:59    Post subject: Reply with quote

Hi,

I don't know a GPG key with the ID C6F0913D3305E63A, it is not part of m23.

Can you post the complete APT error?

The GPG key on the m23 page is for writing me encrypted eMails.
_________________
Hauke Goos-Habermann
- project leader m23 (http://m23.sf.net) -
Jabber: dodgerm23@jabber.org

Schulung, Entwicklung und Support zu m23 und anderen OpenSource-Produkten: www.goos-habermann.de

Auch DU kannst etwas gegen Softwarepatente tun! www.patentfrei.de
Back to top
View user's profile Send private message Send e-mail Visit poster's website
TheGuv



Joined: 29 Oct 2010
Posts: 11

PostPosted: Fri Oct 29, 2010 13:55    Post subject: Reply with quote

Hi,

Doing an apt-get update produces the following:

W: GPG error: http://m23.sourceforge.net ./ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY C6F0913D3305E63A

This is produced by the line added by m23 to /etc/apt/sources.list:

deb http://m23.sourceforge.net/m23debs/ ./

I've isolated that line to verify it is the cause of the error. Which it is.

I simply imported the gpg key from the SF page in case it was the one needed. Which as you already said isn't Smile
Back to top
View user's profile Send private message
Hauke



Joined: 02 Mar 2003
Posts: 1072

PostPosted: Fri Oct 29, 2010 14:55    Post subject: Reply with quote

Hi,

ok, now I found the correct key ID. This is 0x3305E63A and therefore the same key as you mentioned. I don't know why gpg uses a different ID format than apt-get, but it must make sense. Wink

This key can be imported (as root) with:
Code:
wget -T1 -t1 -q http://m23.sourceforge.net/m23-Sign-Key.asc -O - | apt-key add -

I will add this to the installation guide.

The import of the key is done in the postinst script of the m23 package. So it should be visible only, one time. If you ignore the apt-get warning and install the m23 package all should be fine.
_________________
Hauke Goos-Habermann
- project leader m23 (http://m23.sf.net) -
Jabber: dodgerm23@jabber.org

Schulung, Entwicklung und Support zu m23 und anderen OpenSource-Produkten: www.goos-habermann.de

Auch DU kannst etwas gegen Softwarepatente tun! www.patentfrei.de
Back to top
View user's profile Send private message Send e-mail Visit poster's website
TheGuv



Joined: 29 Oct 2010
Posts: 11

PostPosted: Mon Nov 01, 2010 12:16    Post subject: Reply with quote

Hauke wrote:

I don't know why gpg uses a different ID format than apt-get, but it must make sense.


If it used the same format, then life would be too easy!

Hauke wrote:

This key can be imported (as root) with:


Thanks, that was exactly what I was looking for, but...

Hauke wrote:

The import of the key is done in the postinst script of the m23 package. So it should be visible only, one time. If you ignore the apt-get warning and install the m23 package all should be fine.


Sure, but it was on a _client_ that I was having to import the key for. When I assimilated the client, the m23.sf line was added to the clients /etc/apt/sources.list. It was _this_ that was causing an error during running of the work.php script due to the source being untrusted without the key.

Many thanks for the clue Very Happy
Back to top
View user's profile Send private message
Hauke



Joined: 02 Mar 2003
Posts: 1072

PostPosted: Tue Nov 02, 2010 8:23    Post subject: Reply with quote

Ok, now I understand, I thought you are talking about the m23 server Wink

Edit the file /m23/inc/assimilate.php on the m23 server, to let the m23 clients import the m23 sign key before the installation of the m23 client packages.

Search for the function "ASSI_prepareClient" and place the following line
Code:
wget -T1 -t1 -q http://m23.sourceforge.net/m23-Sign-Key.asc -O - | apt-key add -

in a new line before the line "apt-get update".

Then all new assimilated clients should get the key.

Please try and report, if all works well.
_________________
Hauke Goos-Habermann
- project leader m23 (http://m23.sf.net) -
Jabber: dodgerm23@jabber.org

Schulung, Entwicklung und Support zu m23 und anderen OpenSource-Produkten: www.goos-habermann.de

Auch DU kannst etwas gegen Softwarepatente tun! www.patentfrei.de
Back to top
View user's profile Send private message Send e-mail Visit poster's website
TheGuv



Joined: 29 Oct 2010
Posts: 11

PostPosted: Tue Nov 09, 2010 9:09    Post subject: Reply with quote

Yes, that works nicely - thanks for the clue! I'm finding my way around m23 quite well doing this Smile

Would you like me to report any other issue I find along the way or would that be too much noise here?
Back to top
View user's profile Send private message
Hauke



Joined: 02 Mar 2003
Posts: 1072

PostPosted: Tue Nov 09, 2010 10:31    Post subject: Reply with quote

Hi,

please report all things you find. Only this way m23 can become better and better Wink
_________________
Hauke Goos-Habermann
- project leader m23 (http://m23.sf.net) -
Jabber: dodgerm23@jabber.org

Schulung, Entwicklung und Support zu m23 und anderen OpenSource-Produkten: www.goos-habermann.de

Auch DU kannst etwas gegen Softwarepatente tun! www.patentfrei.de
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic    READ ONLY FORUM: m23 :: makes software distribution easy Forum Index -> Problems with the server / Serverprobleme All times are GMT - 2 Hours
Page 1 of 1

 
Jump to:  
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group