GPG error on fresh install

W: GPG error: binary/ Release: The following signatures were invalid: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51 W: The repository ' binary/ Release' is not signed. N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use. N: See apt-secure(8) manpage for repository creation and user configuration details.

Looking at the install script, I have downloaded and readded the keys to apt, but I continue to get the same error. Did I somehow get the wrong key for the cloudmin? How I can resolve this issue, OS:Debian 9.3 Thanks in advance,

Closed (fixed)


Which specific install script are you running?

Cludmin GPL KVM script, direct downloaded the latest., and I tested with PRO version too, same issue

Can you post the /etc/apt/sources.list file from your system?

deb stretch main deb-src stretch main deb stretch-updates main deb-src stretch-updates main

deb stretch main deb-src stretch main deb stretch-updates main deb-src stretch-updates main

deb stretch/updates main deb-src stretch/updates main

deb binary/

Hi, you have update in this issue?

Hi, a receive again this issue on another server. Debian 9.3 x64 fresh install.

That's very unusual, as that whole repo has been re-built and signed recently.

Today on first server which have the issue to test again, I delete the keys from apt, and then I add again this keys, but the issue is same.

apt-key list

apt-key del A0BDBCF9

apt-key del 11F63C51

apt-key list

/usr/bin/wget -nv -O - "" >/tmp/RPM-GPG-KEY-virtualmin

/usr/bin/wget -nv -O - "" >/tmp/RPM-GPG-KEY-webmin

apt-key add /tmp/RPM-GPG-KEY-virtualmin && apt-key add /tmp/RPM-GPG-KEY-webmin

apt-get update

Hi, it is possible to resolve this problem someway?

Unfortunately I am having trouble re-producing it, and nobody else has reported it :-(

I think Debian does not accept anymore weak signatures, sha1 is no longer accepted by stretch's apt for repo signatures, SHA256 can be used instead.

I my error appear: W: A(z) „ binary/ Release” is not signed.

You don't need to create a new GPG key, just resign the Release file

I attach a photo, I try to add this repo to an new fresh server and again same issue, this is the fifth server with this issue.

I today I installed the twentieth server with cloudmin and same issue. I can not imagine that problem it appear just only for me. Please, please somebody install a Debian 9 with netinstall and just try to add the repos, it works or not? PLEASE PLEASE

root@vps03:/tmp# nano /etc/server-manager-license
root@vps03:/tmp# apt-get install curl
Csomaglisták olvasása... Kész
Függőségi fa építése
Állapotinformációk olvasása... Kész
A következő további csomagok lesznek telepítve:
Az alábbi csomagok frissítve lesznek:
  curl libcurl3
2 frissített, 0 újonnan telepített, 0 eltávolítandó és 17 nem frissített.
Letöltendő adatmennyiség: 518 kB.
A művelet után 0 B lemezterület kerül felhasználásra.
Folytatni akarja? [I/n] Y
Letöltés:1 stretch/updates/main amd64 curl amd64 7.52.1-5+deb9u4 [227 kB]
Letöltés:2 stretch/updates/main amd64 libcurl3 amd64 7.52.1-5+deb9u4 [291 kB]
Letöltve 518 kB 0mp alatt (894 kB/s)
(Adatbázis olvasása ... 35046 files and directories currently installed.)
Preparing to unpack .../curl_7.52.1-5+deb9u4_amd64.deb ...
Unpacking curl (7.52.1-5+deb9u4) over (7.52.1-5+deb9u3) ...
Preparing to unpack .../libcurl3_7.52.1-5+deb9u4_amd64.deb ...
Unpacking libcurl3:amd64 (7.52.1-5+deb9u4) over (7.52.1-5+deb9u3) ...
Beállítás: libcurl3:amd64 (7.52.1-5+deb9u4) ...
Processing triggers for libc-bin (2.24-11+deb9u1) ...
Beállítás: curl (7.52.1-5+deb9u4) ...
root@vps03:/tmp# /usr/bin/curl -s "" >/tmp/RPM-GPG-KEY-virtualmin
root@vps03:/tmp# /usr/bin/curl -s "" >/tmp/RPM-GPG-KEY-webmin
root@vps03:/tmp# apt-key add /tmp/RPM-GPG-KEY-virtualmin && apt-key add /tmp/RPM-GPG-KEY-webmin
root@vps03:/tmp# apt-get update
Mellőz:1 stretch InRelease
Letöltés:2 stretch-updates InRelease [91,0 kB]
Letöltés:3 stretch Release [118 kB]
Letöltés:4 stretch Release.gpg [2.434 B]
Mellőz:5 stretch InRelease
Letöltés:6 stretch/updates InRelease [63,0 kB]
Letöltés:7 stretch-updates InRelease [91,0 kB]
Mellőz:8 binary/ InRelease
Letöltés:9 stretch Release [118 kB]
Letöltés:10 stretch Release.gpg [2.434 B]
Letöltés:11 binary/ Release [1.382 B]
Letöltés:12 binary/ Release.gpg [173 B]
Letöltés:13 stretch/main Sources [6.756 kB]
Letöltés:15 stretch/updates/main Sources [125 kB]
Letöltés:16 stretch/updates/main amd64 Packages [340 kB]
Letöltés:17 stretch/updates/main Translation-en [151 kB]
Letöltés:14 jessie InRelease [23,2 kB]
Letöltés:18 stretch/main Sources [6.756 kB]
Letöltés:19 stretch/main amd64 Packages [7.122 kB]
Mellőz:12 binary/ Release.gpg
Letöltés:20 binary/ Packages [1.707 B]
Letöltés:21 jessie/main amd64 Packages [5.575 B]
Letöltés:22 stretch/main amd64 Packages [7.122 kB]
Letöltés:23 stretch/main Translation-en [5.394 kB]
Letöltés:24 stretch/main Translation-en [5.394 kB]
Letöltve 39,7 MB 13mp alatt (2.870 kB/s)
Csomaglisták olvasása... Kész
W: GPG hiba: binary/ Release: Az alábbi aláírások érvénytelenek voltak: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51
W: A(z) „ binary/ Release” tároló nincs aláírva.
N: Az ilyen tárolóból való adatok nem hitelesíthetők, így használatuk veszélyes lehet.
N: Lásd az apt-secure(8) kézikönyvoldalt a tárolólétrehozással és felhasználói beállításokkal kapcsolatos részletekért.

Can you give it another shot now? I updated the signature algorithm.

Looks like i can get over the signature error, but still the InRelease Channel for debian o is ignored and cloudmin Pro installation script still throws errors (see issue

It needs up to 3 runs to claim, Cloudmin was installed successfully but is missing some packages like dhcp3 etc.

Thanks and best

Downloading RPM-GPG-KEY-virtualmin-6 [ERROR] Failed with error: 60 [ ✘ ]

[ERROR] Something went wrong. Exiting. [ERROR] The last few log entries were: [2018-09-02 19:10:04 UTC] [DEBUG] version: 6.0.12 [2018-09-02 19:10:04 UTC] [DEBUG] Checking for fully qualified hostname... [2018-09-02 19:10:04 UTC] [DEBUG] Hostname OK: fully qualified as [2018-09-02 19:10:04 UTC] [DEBUG] Installing serial number and license key into /etc/virtualmin-license [2018-09-02 19:10:04 UTC] [DEBUG] Operating system name: Ubuntu [2018-09-02 19:10:04 UTC] [DEBUG] Operating system version: 18.04 [2018-09-02 19:10:04 UTC] [DEBUG] Operating system type: ubuntu [2018-09-02 19:10:04 UTC] [DEBUG] Operating system major: 18 [2018-09-02 19:10:04 UTC] [DEBUG] Configuring package manager for Ubuntu 18.04... [2018-09-02 19:10:04 UTC] [DEBUG] apt-get repos: virtualmin-bionic virtualmin-universal [2018-09-02 19:10:04 UTC] [DEBUG] Installing Webmin and Virtualmin package signing keys... Spin pid is: 1737 Downloading RPM-GPG-KEY-virtualmin-6: [2018-09-02 19:10:05 UTC] [ERROR] Failed with error: 60 [2018-09-02 19:10:05 UTC] [ERROR] Something went wrong. Exiting. [2018-09-02 19:10:05 UTC] [ERROR] The last few log entries were:

ive been trying for the past two days with ubuntu 16.04 / 18.04 lts but still the same error

Same issue here - fresh install of Debian 9.6

root@nasosu:/home/sparkx# apt update Hit:1 stretch/updates InRelease Ign:2 stretch InRelease Hit:3 stretch-updates InRelease Hit:4 stretch Release Ign:5 binary/ InRelease Hit:6 binary/ Release Get:7 binary/ Release.gpg [173 B] Ign:7 binary/ Release.gpg Reading package lists... Done W: GPG error: binary/ Release: The following signatures were invalid: 1719003ACE3E5A41E2DE70DFD97A3AE911F63C51 E: The repository ' binary/ Release' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

I'm getting the same problem on Ubuntu 18.04. Has anyone got this to work? Surely I don't have to downgrade apt security to get this working?

Ilia's picture
Submitted by Ilia on Sun, 12/29/2019 - 16:11

Try running:

apt-get clean and then apt-get update.

Thank you. I did manage to get this working by removing the source repositories and key files, rebooting and trying again.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.