debmirror - Release signature does not verify, use -v to see the gpg error.

[StyleWarZ]

Hallo zusammen

ich bin gerade daran einen debian mirror im lan zu integrieren. die installation usw. lief problemlos.

kleine angaben:
debian sarge
HowTo

wenn ich das script ./mirror-debian.bash laufen lasse kommt folgendes heraus.

bibdebmirrir:~# ./mirror-debian.bash
Mirroring to /var/www/mirror/debian from ftp://anonymous:ftp2.de.debian.org//debian/
Arches: i386
Dists: sarge,etch,sid
Sections: main,contrib,non-free
Passive mode on.
Attempting to get lock, this might take 2 minutes before it fails.
Get Release files.
[0%] Keeping: dists/sarge/Release
[0%] Keeping: dists/sarge/Release.gpg
Release signature does not verify, use -v to see the gpg error.
[0%] Keeping: dists/etch/Release
[0%] Keeping: dists/etch/Release.gpg
Release signature does not verify, use -v to see the gpg error.
[0%] Keeping: dists/sid/Release
[0%] Keeping: dists/sid/Release.gpg
Release signature does not verify, use -v to see the gpg error.
Get Packages and Sources files and other miscellany.
Errors:
 Release signature does not verify, use -v to see the gpg error.
 Release signature does not verify, use -v to see the gpg error.
 Release signature does not verify, use -v to see the gpg error.
Failed to download some Package, Sources, Contents or release files!
WARNING: releasing 1 pending lock...
bibdebmirrir:~#

man muss ja mit su mirror -c "gpg --import /usr/share/keyrings/debian-role-keys.gpg" die key's importieren.
das wäre die ausgabe davon:

bibdebmirrir:~# su mirror -c "gpg --import /usr/share/keyrings/debian-role-keys.gpg"
gpg: key 38C6029A: "Debian Archive Automatic Signing Key (2003) <ftpmaster@debian.org>" not changed
gpg: key 30B34DD5: "Debian Archive Automatic Signing Key (2003 v2) <ftpmaster@debian.org>" not changed
gpg: key 1DB114E0: "Debian Archive Automatic Signing Key (2004) <ftpmaster@debian.org>" not changed
gpg: key 4F368D5D: "Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>" not changed
gpg: Total number processed: 4
gpg:              unchanged: 4
bibdebmirrir:~#

meiner ansicht nach also erfolgreich (schon beim ersten mal)

hat irgendwer ne ahnung was ich ändern muss damit das skript richtig durchläuft?

gruss style

EDIT
****
alle erwähnten sachen wie z.b. den key von hand herunterladen und integrieren gingen schief und endeten mit dem selben fehler. (bin schon seit heute morgen an dem)

EDIT EDIT
*******
wenn ich alles in meinem mirror verzeichnis lösche und dann das bash skript ausführe kommt:

bibdebmirrir:~# ./mirror-debian.bash
Mirroring to /var/www/mirror/debian from ftp://anonymous:ftp2.de.debian.org/debian/
Arches: i386
Dists: sarge,etch,sid
Sections: main,contrib,non-free
Passive mode on.
Attempting to get lock, this might take 2 minutes before it fails.
Get Release files.
[0%] Getting: dists/sarge/Release        #
[0%] Getting: dists/sarge/Release.gpg    #
Release signature does not verify, use -v to see the gpg error.
[0%] Getting: dists/etch/Release         #
[0%] Getting: dists/etch/Release.gpg     #
Release signature does not verify, use -v to see the gpg error.
[0%] Getting: dists/sid/Release  #
[0%] Getting: dists/sid/Release.gpg      #
Release signature does not verify, use -v to see the gpg error.
Get Packages and Sources files and other miscellany.
dists/sarge/main/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/sarge/main/binary-i386/Packages.gz   #################################
dists/sarge/main/binary-i386/Release needs fetch
[0%] Getting: dists/sarge/main/binary-i386/Release       #
dists/sarge/contrib/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/sarge/contrib/binary-i386/Packages.gz        #
dists/sarge/contrib/binary-i386/Release needs fetch
[0%] Getting: dists/sarge/contrib/binary-i386/Release    #
dists/sarge/non-free/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/sarge/non-free/binary-i386/Packages.gz       #
dists/sarge/non-free/binary-i386/Release needs fetch
[0%] Getting: dists/sarge/non-free/binary-i386/Release   #
dists/etch/main/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/etch/main/binary-i386/Packages.gz    ######################################
dists/etch/main/binary-i386/Release needs fetch
[0%] Getting: dists/etch/main/binary-i386/Release        #
dists/etch/contrib/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/etch/contrib/binary-i386/Packages.gz         #
dists/etch/contrib/binary-i386/Release needs fetch
[0%] Getting: dists/etch/contrib/binary-i386/Release     #
dists/etch/non-free/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/etch/non-free/binary-i386/Packages.gz        #
dists/etch/non-free/binary-i386/Release needs fetch
[0%] Getting: dists/etch/non-free/binary-i386/Release    #
dists/sid/main/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/sid/main/binary-i386/Packages.gz     ########################################
dists/sid/main/binary-i386/Release needs fetch
[0%] Getting: dists/sid/main/binary-i386/Release         #
dists/sid/contrib/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/sid/contrib/binary-i386/Packages.gz  #
dists/sid/contrib/binary-i386/Release needs fetch
[0%] Getting: dists/sid/contrib/binary-i386/Release      #
dists/sid/non-free/binary-i386/Packages.gz needs fetch
[0%] Getting: dists/sid/non-free/binary-i386/Packages.gz         #
dists/sid/non-free/binary-i386/Release needs fetch
[0%] Getting: dists/sid/non-free/binary-i386/Release     #
Errors:
 Release signature does not verify, use -v to see the gpg error.
 Release signature does not verify, use -v to see the gpg error.
 Release signature does not verify, use -v to see the gpg error.
Failed to download some Package, Sources, Contents or release files!
WARNING: releasing 1 pending lock...
bibdebmirrir:~#

 

[Goodspeed]

O.k. ... ignorieren kannst Du die Fehler, indem Du debmirror "--ignore-release-gpg" mitgiebst.

Um das "Beheben" kümmer ich mich gleich

 

[StyleWarZ]

hehe. jo ignorieren würd auch gehen. aber es steht das man sich einen gefallen tun soll und nicht ignorieren. bin gespannt wie man das löst.

 

[Goodspeed]

"Lösung":
Scheinbar ist einer der GPG-Keys vom ftpmaster veraltet ...
Schreib mal in das Script die Option "-v" hinter das debmirror, dann siehste wo es klemmt und kannst die per

"gpg --recv-keys 0xKEY_NUMBER"

nachziehen ... dann soltle es gehen.

 

[StyleWarZ]

werd ich mal versuchen sobald ich wieder an den lan mirror komme. (sehr warscheinlich nächste woche)

danke vorerst. werd dann posten was es war.

Gruss Style

 

[wesPe56]

Das Problem mit den Schlüsseln habe ich nach dieser Anleitung bei mir gelöst.
http://blog.madduck.net/debian/2006.01.08-apt-updates.html

wesPe56

 

[Goodspeed]

Der Ansatz ist schon richtig, nur dürfte das hier nicht helfen. APT bringt nicht den Fehler sondern debmirror bzw. gpg ...

 

[StyleWarZ]

Also ich kriege das nicht in den Griff. Habe aber das Gefühl das ich die Schlüssel nicht ziehen kann weil mich dieses Netz hier etwas einschränkt. Über welchen Port geht gpg --recv-keys raus? Werde es bei gelegenheit einmal Zuhause versuchen.

 

[Goodspeed]

Von welchem Keyserver holst Du Dir den Schlüssel?

~# grep ^keyserver .gnupg/gpg.conf 
keyserver hkp://subkeys.pgp.net