Dotdeb packages are now signed!

July 11th, 2010 | by Guillaume Plessis |

After many requests from several users and after many months of promise, the Dotdeb repositories are GPG-signed. Yes, you can now get rid of the annoying “WARNING: The following packages cannot be authenticated!” message!

Waiting for a dotdeb-keyring package, you just have to get the key and add it to your trusted keys’ keyring :

gpg --keyserver keys.gnupg.net --recv-key 89DF5277
gpg -a --export 89DF5277 | sudo apt-key add -

I hope you’ll enjoy it.

Tags: ,

  1. 57 Responses to “Dotdeb packages are now signed!”

  2. By acid on Jul 11, 2010 | Reply

    I love you! Seriously, thanx for your work!!

  3. By daniel on Jul 11, 2010 | Reply

    gorgeous

  4. By danei on Jul 12, 2010 | Reply

    Yes I enjoy that :P

  5. By amine on Jul 12, 2010 | Reply

    nice

  6. By amine on Jul 12, 2010 | Reply

    Hi have a problem,

    i added in the /etc/apt/sources.list

    deb http://packages.dotdeb.org stable all
    deb-src http://packages.dotdeb.org stable all

    when i do apt-get update i have this error :

    W: GPG error: http://packages.dotdeb.org stable Release: Les signatures suivantes n’ont pas pu être vérifiées car la clé publique n’est pas disponible : NO_PUBKEY E9C74FEEA2098A6E

    any idea please ?

  7. By Guillaume Plessis on Jul 12, 2010 | Reply

    @amine : just fetch the GnuPG key and add it to your APT keyring, as explained in the above post.

  8. By gosi on Jul 12, 2010 | Reply

    Thanks for all your effort!

  9. By Jockl on Jul 12, 2010 | Reply

    Thank you! Everything worked fine…as always! :)

  10. By waiter on Jul 13, 2010 | Reply

    Cool! Thanks a lot!

  11. By Tyrael on Jul 13, 2010 | Reply

    thank you! :)

    Tyrael

  12. By The BLION Corp. on Jul 14, 2010 | Reply

    Hello,

    Great. With these signatures, I (or even my customers) can now upgrade directly from Virtualmin panel.

  13. By Pandark on Jul 14, 2010 | Reply

    Thank you very much.

    If it doesn’t work first, you may have to open the 11371 port as I did.

  14. By H.T on Jul 16, 2010 | Reply

    Bonjour,

    Merci pour la signature des paquets.
    Pour chipoter est il vraiment nécessaire d’inscrire “sudo” avant le apt-key add ?

    Pour ceux qui utilisent la puissance de root sans autre forme de procès ça peut être perturbant ;)

  15. By Joshaven Potter on Jul 16, 2010 | Reply

    I got the following error:
    W: GPG error: http://php53.dotdeb.org stable Release: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY E9C74FEEA2098A6E
    W: You may want to run apt-get update to correct these problems

    After trying the above I got:
    gpg: keyserver timed out
    gpg: keyserver receive failed: keyserver error

    and fixed everything with:
    wget http://packages.dotdeb.org/dotdeb.gpg && apt-key add dotdeb.gpg && rm dotdeb.gpg

  16. By Guillaume Plessis on Jul 17, 2010 | Reply

    @H.T. : à chacun d’adopter la politique de sécurité qui lui sied :)

  17. By Scott Grayban on Jul 19, 2010 | Reply

    oh hell ya !!!

  18. By Njko on Jul 19, 2010 | Reply

    Great news!

    honestly i tought lets go to see dotdeb if the packages are now signed.. and first message I see was this one.

    Thanks a lot man!

  19. By Vide on Jul 22, 2010 | Reply

    Thanks!

  20. By Adub on Jul 23, 2010 | Reply

    @Joshaven Potter
    Thank you so much! Your solution worked wonders for me.

  21. By JarekMk on Jul 24, 2010 | Reply

    Guillaume, did you checked mailbox?

  22. By Guillaume Plessis on Jul 24, 2010 | Reply

    @JarekMk : I’ll answer soon

  23. By JarekMk on Jul 25, 2010 | Reply

    OK I wait. Thank you.

  24. By petr on Jul 27, 2010 | Reply

    hello, file on http://packages.dotdeb.org/dotdeb.gpg is not found? :-( . this file is for download on another location? help.pls.

  25. By Guillaume Plessis on Jul 27, 2010 | Reply

    @petr : it’s back. Sorry. You could use keys.gnupg.net to receive the key instead.

  26. By petr on Jul 27, 2010 | Reply

    @Guillaume Plessis
    thx , all ok new :-)

  27. By kepi on Aug 13, 2010 | Reply

    Finally, thanks!

  28. By vixns on Aug 20, 2010 | Reply

    http://packages.dotdeb.org/dotdeb.gpg => 404

  29. By Guillaume Plessis on Aug 20, 2010 | Reply

    @vixns : Please use keys.gnupg.net tu get the key.

  30. By Speckles on Aug 30, 2010 | Reply

    Note: if your system doesn’t have the gpg command, the package to get it is called gnupg. Since it took me several hours to figure this out, I figured I should post this here to save any fellow newbs some time.

  31. By karfes on Sep 1, 2010 | Reply

    am new with this keyring issue, how do you fetch for the GnuPG key? i need some guide

  32. By Burn on Sep 3, 2010 | Reply

    > gpg –keyserver keys.gnupg.net –recv-key 89DF5277
    gpg: requesting key 89DF5277 from hkp server keys.gnupg.net
    gpg: keyserver timed out
    gpg: keyserver receive failed: keyserver error
    > wget http://packages.dotdeb.org/dotdeb.gpg && apt-key add dotdeb.gpg && rm dotdeb.gpg
    –2010-09-03 04:43:17– http://packages.dotdeb.org/dotdeb.gpg
    Resolving packages.dotdeb.org… 79.125.3.21
    Connecting to packages.dotdeb.org|79.125.3.21|:80… connected.
    HTTP request sent, awaiting response… 404 Not Found
    2010-09-03 04:43:17 ERROR 404: Not Found.

  33. By Mentalow on Sep 5, 2010 | Reply

    Hey
    The key isnt found with your guide! The key doesnt exist in the database

  34. By Scott Grayban on Sep 6, 2010 | Reply

    Wow people really do not read anything these days.

    The error was “keyserver timed out” doh !! So for the newbies with no education that means the keyserver is having a issue not “key not found”.

    Second read http://www.dotdeb.org/2010/07/11/dotdeb-packages-are-now-signed/#comment-2556

    Start reading instead of being spoon fed here.

  35. By Burn on Sep 6, 2010 | Reply

    after disabling the firewall, I got the key successufly

  36. By tim on Sep 7, 2010 | Reply

    sweet

  37. By kirk1h on Sep 17, 2010 | Reply

    i have no idea why the key is not on this server nor on keys.gnupg.net anymore. if anyone need the key, you can download it from my server:

    wget http://88.198.62.123/randomstuff/dotdeb.gpg
    sudo apt-key add dotdeb.gpg

  38. By Guillaume Plessis on Sep 17, 2010 | Reply

    Here it is : http://www.dotdeb.org/dotdeb.gpg

  39. By Scott Grayban on Sep 26, 2010 | Reply

    Gui are you going to make a signing package people can install instead ?

    I think that would be best if not having the key imported automatically when they update there apt.

    I think all you have to do is create Release.gpg with your pubkey in it.

  40. By Scott Grayban on Sep 26, 2010 | Reply

    Setting up a secure apt repository

    From man apt-secure

    If you want to provide archive signatures in an archive under your maintenance you have to:

    * Create a toplevel Release file. if it does not exist already. You can do this by running apt-ftparchive release (provided inftp apt-utils).
    * Sign it. You can do this by running gpg -abs -o Release.gpg Release.
    * Publish the key fingerprint, that way your users will know what key they need to import in order to authenticate the files in the archive.

    Whenever the contents of the archive changes (new packages are added or removed) the archive maintainer has to follow the first two steps previously outlined.

  41. By Guillaume Plessis on Sep 27, 2010 | Reply

    @Scott Grayban : the repository is signed using the two steps you described. I just have to make a dotdeb-keyring package but I need some more work on it.

  42. By Toxic292 on Sep 30, 2010 | Reply

    Ports used with command “gpg –keyserver [...]” are the followings :

    hkp 11371/tcp # OpenPGP HTTP Keyserver
    hkp 11371/udp # OpenPGP HTTP Keyserver

    For the lucky ones that can configure there firewall…

  43. By flo on Nov 25, 2010 | Reply

    Just use this:

    wget http://www.dotdeb.org/dotdeb.gpg && apt-key add dotdeb.gpg && rm dotdeb.gpg

  44. By JP on Jan 3, 2011 | Reply

    This took me a little while to figure out, so this is what worked for me:

    wget -q -O – http://www.dotdeb.org/dotdeb.gpg | sudo apt-key add -

  45. By Scott on Jan 3, 2011 | Reply

    There are a number of ways to import the key.

  46. By neissa on Jan 18, 2011 | Reply

    Open port out tpc 11371 ;-) for gpg

  47. By Scott on Jan 18, 2011 | Reply

    Port 11371 has nothing to do with gpg package signing.

  48. By Paulo Graça on Nov 3, 2011 | Reply

    For me it worked the following:
    > wget -q -O – http://www.dotdeb.org/dotdeb.gpg
    > sudo apt-key add dotdeb.gpg

  1. 10 Trackback(s)

  2. Jul 12, 2010: DotDeb: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY E9C74FEEA2098A6E | Admin Serveur
  3. Jul 20, 2010: MySQL-Installation unter Debian - Delphi-PRAXiS
  4. Aug 5, 2010: Dotdeb GPG zu Keyring hinzufügen
  5. Oct 7, 2010: mysql 5.1.51 sobre debian lenny (a lo fácil) — Mis Historias
  6. Nov 29, 2010: Where can I find the gpg key for dotdeb.org
  7. Jan 25, 2011: Installing PHP 5.3.x in Ubuntu through apt-get or aptitude - Night Dreaming (by Sudar)
  8. Jan 31, 2011: DEBIAN – MISE À JOUR DU SYSTÈME ET DOTDEB
  9. Feb 14, 2011: Ellis Software » Archives du blog » Debian – Mise à jour du système et Dotdeb
  10. Jul 19, 2011: Using Munin to monitor a Debian Squeeze server | Kevin Deldycke
  11. Aug 20, 2011: Where can I find the gpg key for dotdeb.org - Admins Goodies

Post a Comment