Submitted by rubenzsolt on Sat, 12/30/2017 - 13:09
W: GPG error: http://cloudmin.virtualmin.com/kvm/debian binary/ Release: The following signatures were invalid: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51 W: The repository 'http://cloudmin.virtualmin.com/kvm/debian binary/ Release' is not signed. N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use. N: See apt-secure(8) manpage for repository creation and user configuration details.
Looking at the install script, I have downloaded and readded the keys to apt, but I continue to get the same error. Did I somehow get the wrong key for the cloudmin? How I can resolve this issue, OS:Debian 9.3 Thanks in advance,
Files:
Status:
Closed (fixed)
Comments
Submitted by JamieCameron on Sat, 12/30/2017 - 15:35 Comment #1
Which specific install script are you running?
Submitted by rubenzsolt on Sat, 12/30/2017 - 17:20 Comment #2
Cludmin GPL KVM script, direct downloaded the latest., and I tested with PRO version too, same issue
Submitted by JamieCameron on Mon, 01/01/2018 - 21:21 Comment #3
Can you post the
/etc/apt/sources.listfile from your system?Submitted by rubenzsolt on Mon, 01/01/2018 - 23:51 Comment #4
deb http://ftp.hu.debian.org/debian/ stretch main deb-src http://ftp.hu.debian.org/debian/ stretch main deb http://ftp.hu.debian.org/debian/ stretch-updates main deb-src http://ftp.hu.debian.org/debian/ stretch-updates main
deb http://ftp.de.debian.org/debian/ stretch main deb-src http://ftp.de.debian.org/debian/ stretch main deb http://ftp.de.debian.org/debian/ stretch-updates main deb-src http://ftp.de.debian.org/debian/ stretch-updates main
deb http://security.debian.org/ stretch/updates main deb-src http://security.debian.org/ stretch/updates main
deb http://cloudmin.virtualmin.com/kvm/debian binary/
Submitted by rubenzsolt on Wed, 01/03/2018 - 05:19 Comment #5
Hi, you have update in this issue?
Submitted by rubenzsolt on Thu, 01/11/2018 - 17:26 Comment #6
Hi, a receive again this issue on another server. Debian 9.3 x64 fresh install.
Submitted by JamieCameron on Fri, 01/12/2018 - 17:00 Comment #7
That's very unusual, as that whole repo has been re-built and signed recently.
Submitted by rubenzsolt on Sat, 01/13/2018 - 06:10 Comment #8
Today on first server which have the issue to test again, I delete the keys from apt, and then I add again this keys, but the issue is same.
apt-key list
apt-key del A0BDBCF9
apt-key del 11F63C51
apt-key list
/usr/bin/wget -nv -O - "http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin" >/tmp/RPM-GPG-KEY-virtualmin
/usr/bin/wget -nv -O - "http://software.virtualmin.com/lib/RPM-GPG-KEY-webmin" >/tmp/RPM-GPG-KEY-webmin
apt-key add /tmp/RPM-GPG-KEY-virtualmin && apt-key add /tmp/RPM-GPG-KEY-webmin
apt-get update
Submitted by rubenzsolt on Sat, 01/20/2018 - 18:40 Comment #9
Hi, it is possible to resolve this problem someway?
Submitted by JamieCameron on Sun, 01/21/2018 - 17:57 Comment #10
Unfortunately I am having trouble re-producing it, and nobody else has reported it :-(
Submitted by rubenzsolt on Sun, 01/21/2018 - 18:25 Comment #11
I think Debian does not accept anymore weak signatures, sha1 is no longer accepted by stretch's apt for repo signatures, SHA256 can be used instead.
I my error appear: W: A(z) „http://cloudmin.virtualmin.com/kvm/debian binary/ Release” is not signed.
You don't need to create a new GPG key, just resign the Release file
I attach a photo, I try to add this repo to an new fresh server and again same issue, this is the fifth server with this issue.
Submitted by rubenzsolt on Wed, 03/14/2018 - 10:30 Comment #12
I today I installed the twentieth server with cloudmin and same issue. I can not imagine that problem it appear just only for me. Please, please somebody install a Debian 9 with netinstall and just try to add the repos, it works or not? PLEASE PLEASE
root@vps03:/tmp# nano /etc/server-manager-licenseroot@vps03:/tmp# apt-get install curl
Csomaglisták olvasása... Kész
Függőségi fa építése
Állapotinformációk olvasása... Kész
A következő további csomagok lesznek telepítve:
libcurl3
Az alábbi csomagok frissítve lesznek:
curl libcurl3
2 frissített, 0 újonnan telepített, 0 eltávolítandó és 17 nem frissített.
Letöltendő adatmennyiség: 518 kB.
A művelet után 0 B lemezterület kerül felhasználásra.
Folytatni akarja? [I/n] Y
Letöltés:1 http://security.debian.org stretch/updates/main amd64 curl amd64 7.52.1-5+deb9u4 [227 kB]
Letöltés:2 http://security.debian.org stretch/updates/main amd64 libcurl3 amd64 7.52.1-5+deb9u4 [291 kB]
Letöltve 518 kB 0mp alatt (894 kB/s)
(Adatbázis olvasása ... 35046 files and directories currently installed.)
Preparing to unpack .../curl_7.52.1-5+deb9u4_amd64.deb ...
Unpacking curl (7.52.1-5+deb9u4) over (7.52.1-5+deb9u3) ...
Preparing to unpack .../libcurl3_7.52.1-5+deb9u4_amd64.deb ...
Unpacking libcurl3:amd64 (7.52.1-5+deb9u4) over (7.52.1-5+deb9u3) ...
Beállítás: libcurl3:amd64 (7.52.1-5+deb9u4) ...
Processing triggers for libc-bin (2.24-11+deb9u1) ...
Beállítás: curl (7.52.1-5+deb9u4) ...
root@vps03:/tmp# /usr/bin/curl -s "http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin" >/tmp/RPM-GPG-KEY-virtualmin
root@vps03:/tmp# /usr/bin/curl -s "http://software.virtualmin.com/lib/RPM-GPG-KEY-webmin" >/tmp/RPM-GPG-KEY-webmin
root@vps03:/tmp# apt-key add /tmp/RPM-GPG-KEY-virtualmin && apt-key add /tmp/RPM-GPG-KEY-webmin
OK
OK
root@vps03:/tmp# apt-get update
Mellőz:1 http://ftp.hu.debian.org/debian stretch InRelease
Letöltés:2 http://ftp.hu.debian.org/debian stretch-updates InRelease [91,0 kB]
Letöltés:3 http://ftp.hu.debian.org/debian stretch Release [118 kB]
Letöltés:4 http://ftp.hu.debian.org/debian stretch Release.gpg [2.434 B]
Mellőz:5 http://ftp.de.debian.org/debian stretch InRelease
Letöltés:6 http://security.debian.org stretch/updates InRelease [63,0 kB]
Letöltés:7 http://ftp.de.debian.org/debian stretch-updates InRelease [91,0 kB]
Mellőz:8 http://cloudmin.virtualmin.com/kvm/debian binary/ InRelease
Letöltés:9 http://ftp.de.debian.org/debian stretch Release [118 kB]
Letöltés:10 http://ftp.de.debian.org/debian stretch Release.gpg [2.434 B]
Letöltés:11 http://cloudmin.virtualmin.com/kvm/debian binary/ Release [1.382 B]
Letöltés:12 http://cloudmin.virtualmin.com/kvm/debian binary/ Release.gpg [173 B]
Letöltés:13 http://ftp.hu.debian.org/debian stretch/main Sources [6.756 kB]
Letöltés:15 http://security.debian.org stretch/updates/main Sources [125 kB]
Letöltés:16 http://security.debian.org stretch/updates/main amd64 Packages [340 kB]
Letöltés:17 http://security.debian.org stretch/updates/main Translation-en [151 kB]
Letöltés:14 https://packagecloud.io/grafana/stable/debian jessie InRelease [23,2 kB]
Letöltés:18 http://ftp.de.debian.org/debian stretch/main Sources [6.756 kB]
Letöltés:19 http://ftp.hu.debian.org/debian stretch/main amd64 Packages [7.122 kB]
Mellőz:12 http://cloudmin.virtualmin.com/kvm/debian binary/ Release.gpg
Letöltés:20 http://cloudmin.virtualmin.com/kvm/debian binary/ Packages [1.707 B]
Letöltés:21 https://packagecloud.io/grafana/stable/debian jessie/main amd64 Packages [5.575 B]
Letöltés:22 http://ftp.de.debian.org/debian stretch/main amd64 Packages [7.122 kB]
Letöltés:23 http://ftp.hu.debian.org/debian stretch/main Translation-en [5.394 kB]
Letöltés:24 http://ftp.de.debian.org/debian stretch/main Translation-en [5.394 kB]
Letöltve 39,7 MB 13mp alatt (2.870 kB/s)
Csomaglisták olvasása... Kész
W: GPG hiba: http://cloudmin.virtualmin.com/kvm/debian binary/ Release: Az alábbi aláírások érvénytelenek voltak: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51
W: A(z) „http://cloudmin.virtualmin.com/kvm/debian binary/ Release” tároló nincs aláírva.
N: Az ilyen tárolóból való adatok nem hitelesíthetők, így használatuk veszélyes lehet.
N: Lásd az apt-secure(8) kézikönyvoldalt a tárolólétrehozással és felhasználói beállításokkal kapcsolatos részletekért.
root@vps03:/tmp#
Submitted by just_me on Fri, 03/30/2018 - 15:50 Comment #13
Same here with Debian 9.4 Would appreciate a fix, see also this issue:
https://www.virtualmin.com/node/56711
Submitted by JamieCameron on Sat, 03/31/2018 - 01:02 Comment #14
Can you give it another shot now? I updated the signature algorithm.
Submitted by just_me on Mon, 04/02/2018 - 15:09 Comment #15
Looks like i can get over the signature error, but still the InRelease Channel for debian o is ignored and cloudmin Pro installation script still throws errors (see issue https://virtualmin.com/node/56711)
It needs up to 3 runs to claim, Cloudmin was installed successfully but is missing some packages like dhcp3 etc.
Thanks and best
Submitted by kahs on Sun, 09/02/2018 - 14:24 Comment #16
Downloading RPM-GPG-KEY-virtualmin-6 [ERROR] Failed with error: 60 [ ✘ ]
[ERROR] Something went wrong. Exiting. [ERROR] The last few log entries were: [2018-09-02 19:10:04 UTC] [DEBUG] install.sh version: 6.0.12 [2018-09-02 19:10:04 UTC] [DEBUG] Checking for fully qualified hostname... [2018-09-02 19:10:04 UTC] [DEBUG] Hostname OK: fully qualified as gtwebreports.gtwebreports.co.uk [2018-09-02 19:10:04 UTC] [DEBUG] Installing serial number and license key into /etc/virtualmin-license [2018-09-02 19:10:04 UTC] [DEBUG] Operating system name: Ubuntu [2018-09-02 19:10:04 UTC] [DEBUG] Operating system version: 18.04 [2018-09-02 19:10:04 UTC] [DEBUG] Operating system type: ubuntu [2018-09-02 19:10:04 UTC] [DEBUG] Operating system major: 18 [2018-09-02 19:10:04 UTC] [DEBUG] Configuring package manager for Ubuntu 18.04... [2018-09-02 19:10:04 UTC] [DEBUG] apt-get repos: virtualmin-bionic virtualmin-universal [2018-09-02 19:10:04 UTC] [DEBUG] Installing Webmin and Virtualmin package signing keys... Spin pid is: 1737 Downloading RPM-GPG-KEY-virtualmin-6: [2018-09-02 19:10:05 UTC] [ERROR] Failed with error: 60 [2018-09-02 19:10:05 UTC] [ERROR] Something went wrong. Exiting. [2018-09-02 19:10:05 UTC] [ERROR] The last few log entries were:
ive been trying for the past two days with ubuntu 16.04 / 18.04 lts but still the same error
Submitted by Sparkx on Thu, 01/10/2019 - 23:52 Comment #17
Same issue here - fresh install of Debian 9.6
root@nasosu:/home/sparkx# apt update Hit:1 http://security.debian.org/debian-security stretch/updates InRelease Ign:2 http://ftp.ro.debian.org/debian stretch InRelease Hit:3 http://ftp.ro.debian.org/debian stretch-updates InRelease Hit:4 http://ftp.ro.debian.org/debian stretch Release Ign:5 http://cloudmin.virtualmin.com/gpl/debian binary/ InRelease Hit:6 http://cloudmin.virtualmin.com/gpl/debian binary/ Release Get:7 http://cloudmin.virtualmin.com/gpl/debian binary/ Release.gpg [173 B] Ign:7 http://cloudmin.virtualmin.com/gpl/debian binary/ Release.gpg Reading package lists... Done W: GPG error: http://cloudmin.virtualmin.com/gpl/debian binary/ Release: The following signatures were invalid: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51 E: The repository 'http://cloudmin.virtualmin.com/gpl/debian binary/ Release' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.
Submitted by Sean Magee on Sat, 12/28/2019 - 06:02 Pro Licensee Comment #18
I'm getting the same problem on Ubuntu 18.04. Has anyone got this to work? Surely I don't have to downgrade apt security to get this working?
Try running:
apt-get cleanand thenapt-get update.Submitted by Sean Magee on Sun, 12/29/2019 - 16:15 Pro Licensee Comment #20
Thank you. I did manage to get this working by removing the source repositories and key files, rebooting and trying again.
Submitted by IssueBot on Sun, 01/12/2020 - 16:30 Comment #21
Automatically closed - issue fixed for 2 weeks with no activity.