GPG error on fresh install

W: GPG error: http://cloudmin.virtualmin.com/kvm/debian binary/ Release: The following signatures were invalid: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51 W: The repository 'http://cloudmin.virtualmin.com/kvm/debian binary/ Release' is not signed. N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use. N: See apt-secure(8) manpage for repository creation and user configuration details.

Looking at the install script, I have downloaded and readded the keys to apt, but I continue to get the same error. Did I somehow get the wrong key for the cloudmin? How I can resolve this issue, OS:Debian 9.3 Thanks in advance,

Status: 
Closed (fixed)

Comments

Which specific install script are you running?

Cludmin GPL KVM script, direct downloaded the latest., and I tested with PRO version too, same issue

Can you post the /etc/apt/sources.list file from your system?

deb http://ftp.hu.debian.org/debian/ stretch main deb-src http://ftp.hu.debian.org/debian/ stretch main deb http://ftp.hu.debian.org/debian/ stretch-updates main deb-src http://ftp.hu.debian.org/debian/ stretch-updates main

deb http://ftp.de.debian.org/debian/ stretch main deb-src http://ftp.de.debian.org/debian/ stretch main deb http://ftp.de.debian.org/debian/ stretch-updates main deb-src http://ftp.de.debian.org/debian/ stretch-updates main

deb http://security.debian.org/ stretch/updates main deb-src http://security.debian.org/ stretch/updates main

deb http://cloudmin.virtualmin.com/kvm/debian binary/

Hi, you have update in this issue?

Hi, a receive again this issue on another server. Debian 9.3 x64 fresh install.

That's very unusual, as that whole repo has been re-built and signed recently.

Today on first server which have the issue to test again, I delete the keys from apt, and then I add again this keys, but the issue is same.

apt-key list

apt-key del A0BDBCF9

apt-key del 11F63C51

apt-key list

/usr/bin/wget -nv -O - "http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin" >/tmp/RPM-GPG-KEY-virtualmin

/usr/bin/wget -nv -O - "http://software.virtualmin.com/lib/RPM-GPG-KEY-webmin" >/tmp/RPM-GPG-KEY-webmin

apt-key add /tmp/RPM-GPG-KEY-virtualmin && apt-key add /tmp/RPM-GPG-KEY-webmin

apt-get update

Hi, it is possible to resolve this problem someway?

Unfortunately I am having trouble re-producing it, and nobody else has reported it :-(

I think Debian does not accept anymore weak signatures, sha1 is no longer accepted by stretch's apt for repo signatures, SHA256 can be used instead.

I my error appear: W: A(z) „http://cloudmin.virtualmin.com/kvm/debian binary/ Release” is not signed.

You don't need to create a new GPG key, just resign the Release file

I attach a photo, I try to add this repo to an new fresh server and again same issue, this is the fifth server with this issue.

I today I installed the twentieth server with cloudmin and same issue. I can not imagine that problem it appear just only for me. Please, please somebody install a Debian 9 with netinstall and just try to add the repos, it works or not? PLEASE PLEASE

root@vps03:/tmp# nano /etc/server-manager-license
root@vps03:/tmp# apt-get install curl
Csomaglisták olvasása... Kész
Függőségi fa építése
Állapotinformációk olvasása... Kész
A következő további csomagok lesznek telepítve:
  libcurl3
Az alábbi csomagok frissítve lesznek:
  curl libcurl3
2 frissített, 0 újonnan telepített, 0 eltávolítandó és 17 nem frissített.
Letöltendő adatmennyiség: 518 kB.
A művelet után 0 B lemezterület kerül felhasználásra.
Folytatni akarja? [I/n] Y
Letöltés:1 http://security.debian.org stretch/updates/main amd64 curl amd64 7.52.1-5+deb9u4 [227 kB]
Letöltés:2 http://security.debian.org stretch/updates/main amd64 libcurl3 amd64 7.52.1-5+deb9u4 [291 kB]
Letöltve 518 kB 0mp alatt (894 kB/s)
(Adatbázis olvasása ... 35046 files and directories currently installed.)
Preparing to unpack .../curl_7.52.1-5+deb9u4_amd64.deb ...
Unpacking curl (7.52.1-5+deb9u4) over (7.52.1-5+deb9u3) ...
Preparing to unpack .../libcurl3_7.52.1-5+deb9u4_amd64.deb ...
Unpacking libcurl3:amd64 (7.52.1-5+deb9u4) over (7.52.1-5+deb9u3) ...
Beállítás: libcurl3:amd64 (7.52.1-5+deb9u4) ...
Processing triggers for libc-bin (2.24-11+deb9u1) ...
Beállítás: curl (7.52.1-5+deb9u4) ...
root@vps03:/tmp# /usr/bin/curl -s "http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin" >/tmp/RPM-GPG-KEY-virtualmin
root@vps03:/tmp# /usr/bin/curl -s "http://software.virtualmin.com/lib/RPM-GPG-KEY-webmin" >/tmp/RPM-GPG-KEY-webmin
root@vps03:/tmp# apt-key add /tmp/RPM-GPG-KEY-virtualmin && apt-key add /tmp/RPM-GPG-KEY-webmin
OK
OK
root@vps03:/tmp# apt-get update
Mellőz:1 http://ftp.hu.debian.org/debian stretch InRelease
Letöltés:2 http://ftp.hu.debian.org/debian stretch-updates InRelease [91,0 kB]
Letöltés:3 http://ftp.hu.debian.org/debian stretch Release [118 kB]
Letöltés:4 http://ftp.hu.debian.org/debian stretch Release.gpg [2.434 B]
Mellőz:5 http://ftp.de.debian.org/debian stretch InRelease
Letöltés:6 http://security.debian.org stretch/updates InRelease [63,0 kB]
Letöltés:7 http://ftp.de.debian.org/debian stretch-updates InRelease [91,0 kB]
Mellőz:8 http://cloudmin.virtualmin.com/kvm/debian binary/ InRelease
Letöltés:9 http://ftp.de.debian.org/debian stretch Release [118 kB]
Letöltés:10 http://ftp.de.debian.org/debian stretch Release.gpg [2.434 B]
Letöltés:11 http://cloudmin.virtualmin.com/kvm/debian binary/ Release [1.382 B]
Letöltés:12 http://cloudmin.virtualmin.com/kvm/debian binary/ Release.gpg [173 B]
Letöltés:13 http://ftp.hu.debian.org/debian stretch/main Sources [6.756 kB]
Letöltés:15 http://security.debian.org stretch/updates/main Sources [125 kB]
Letöltés:16 http://security.debian.org stretch/updates/main amd64 Packages [340 kB]
Letöltés:17 http://security.debian.org stretch/updates/main Translation-en [151 kB]
Letöltés:14 https://packagecloud.io/grafana/stable/debian jessie InRelease [23,2 kB]
Letöltés:18 http://ftp.de.debian.org/debian stretch/main Sources [6.756 kB]
Letöltés:19 http://ftp.hu.debian.org/debian stretch/main amd64 Packages [7.122 kB]
Mellőz:12 http://cloudmin.virtualmin.com/kvm/debian binary/ Release.gpg
Letöltés:20 http://cloudmin.virtualmin.com/kvm/debian binary/ Packages [1.707 B]
Letöltés:21 https://packagecloud.io/grafana/stable/debian jessie/main amd64 Packages [5.575 B]
Letöltés:22 http://ftp.de.debian.org/debian stretch/main amd64 Packages [7.122 kB]
Letöltés:23 http://ftp.hu.debian.org/debian stretch/main Translation-en [5.394 kB]
Letöltés:24 http://ftp.de.debian.org/debian stretch/main Translation-en [5.394 kB]
Letöltve 39,7 MB 13mp alatt (2.870 kB/s)
Csomaglisták olvasása... Kész
W: GPG hiba: http://cloudmin.virtualmin.com/kvm/debian binary/ Release: Az alábbi aláírások érvénytelenek voltak: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51
W: A(z) „http://cloudmin.virtualmin.com/kvm/debian binary/ Release” tároló nincs aláírva.
N: Az ilyen tárolóból való adatok nem hitelesíthetők, így használatuk veszélyes lehet.
N: Lásd az apt-secure(8) kézikönyvoldalt a tárolólétrehozással és felhasználói beállításokkal kapcsolatos részletekért.
root@vps03:/tmp#

Can you give it another shot now? I updated the signature algorithm.

Looks like i can get over the signature error, but still the InRelease Channel for debian o is ignored and cloudmin Pro installation script still throws errors (see issue https://virtualmin.com/node/56711)

It needs up to 3 runs to claim, Cloudmin was installed successfully but is missing some packages like dhcp3 etc.

Thanks and best

Downloading RPM-GPG-KEY-virtualmin-6 [ERROR] Failed with error: 60 [ ✘ ]

[ERROR] Something went wrong. Exiting. [ERROR] The last few log entries were: [2018-09-02 19:10:04 UTC] [DEBUG] install.sh version: 6.0.12 [2018-09-02 19:10:04 UTC] [DEBUG] Checking for fully qualified hostname... [2018-09-02 19:10:04 UTC] [DEBUG] Hostname OK: fully qualified as gtwebreports.gtwebreports.co.uk [2018-09-02 19:10:04 UTC] [DEBUG] Installing serial number and license key into /etc/virtualmin-license [2018-09-02 19:10:04 UTC] [DEBUG] Operating system name: Ubuntu [2018-09-02 19:10:04 UTC] [DEBUG] Operating system version: 18.04 [2018-09-02 19:10:04 UTC] [DEBUG] Operating system type: ubuntu [2018-09-02 19:10:04 UTC] [DEBUG] Operating system major: 18 [2018-09-02 19:10:04 UTC] [DEBUG] Configuring package manager for Ubuntu 18.04... [2018-09-02 19:10:04 UTC] [DEBUG] apt-get repos: virtualmin-bionic virtualmin-universal [2018-09-02 19:10:04 UTC] [DEBUG] Installing Webmin and Virtualmin package signing keys... Spin pid is: 1737 Downloading RPM-GPG-KEY-virtualmin-6: [2018-09-02 19:10:05 UTC] [ERROR] Failed with error: 60 [2018-09-02 19:10:05 UTC] [ERROR] Something went wrong. Exiting. [2018-09-02 19:10:05 UTC] [ERROR] The last few log entries were:

ive been trying for the past two days with ubuntu 16.04 / 18.04 lts but still the same error

Same issue here - fresh install of Debian 9.6

root@nasosu:/home/sparkx# apt update Hit:1 http://security.debian.org/debian-security stretch/updates InRelease Ign:2 http://ftp.ro.debian.org/debian stretch InRelease Hit:3 http://ftp.ro.debian.org/debian stretch-updates InRelease Hit:4 http://ftp.ro.debian.org/debian stretch Release Ign:5 http://cloudmin.virtualmin.com/gpl/debian binary/ InRelease Hit:6 http://cloudmin.virtualmin.com/gpl/debian binary/ Release Get:7 http://cloudmin.virtualmin.com/gpl/debian binary/ Release.gpg [173 B] Ign:7 http://cloudmin.virtualmin.com/gpl/debian binary/ Release.gpg Reading package lists... Done W: GPG error: http://cloudmin.virtualmin.com/gpl/debian binary/ Release: The following signatures were invalid: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51 E: The repository 'http://cloudmin.virtualmin.com/gpl/debian binary/ Release' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

I'm getting the same problem on Ubuntu 18.04. Has anyone got this to work? Surely I don't have to downgrade apt security to get this working?

Ilia's picture
Submitted by Ilia on Sun, 12/29/2019 - 16:11

Try running:

apt-get clean and then apt-get update.

Thank you. I did manage to get this working by removing the source repositories and key files, rebooting and trying again.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.