Gpg error - virtualmin repos debian 8 and 9

Virtualmin
1

hi, well I have issue to update my home server box where I am running debian 8 and other server where I am running debian 9

example of error:

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://software.virtualmin.com/gpl/debian virtualmin-jessie Release: The following signatures were invalid: BADSIG E8DD3FA0A0BDBCF9 Virtualmin, Inc. <security@virtualmin.com>
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://software.virtualmin.com/gpl/debian virtualmin-universal Release: The following signatures were invalid: 31D2B18872EAF68EFB81F81DE8DD3FA0A0BDBCF9
W: Failed to fetch http://software.virtualmin.com/gpl/debian/dists/virtualmin-jessie/Release.gpg  The following signatures were invalid: BADSIG E8DD3FA0A0BDBCF9 Virtualmin, Inc. <security@virtualmin.com>
W: Failed to fetch http://software.virtualmin.com/gpl/debian/dists/virtualmin-universal/Release.gpg  The following signatures were invalid: 31D2B18872EAF68EFB81F81DE8DD3FA0A0BDBCF9

now apt clean or apt clean all not work and

wget -qO - http://software.virtualmin.com/gpl/debian/dists/virtualmin-jessie/Release.gpg | apt-key add -

wont work as well… - does anyone have fix for this? I’ve seen post about repo maintenance but info about how to fix this issue is not valid or incomplete, basically suggested fix does not work.

Thanks.

2

I found the fix in other joes reply in other post actually which I did not seen before :slight_smile:

what fixed me was on debian 9 (ive upgraded debian 8 on home server to 9 today):
add new repo new key: wget -qO - http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin-6 | apt-key add - and then edit sourcelist: nano /etc/apt/sources.list there change virtualmins entries to new repo:

deb http://software.virtualmin.com/vm/6/gpl/apt virtualmin-buster main
deb http://software.virtualmin.com/vm/6/gpl/apt virtualmin-universal main

then just to be sure run apt clean and finally apt update && apt upgrade -y

everything worked, tested with reboot.

3 Likes
3

Ah, fantastic! I just found I am having the same problem… Wish there was a way for that to happen automatically using apt upgrade, or a notice when the key changes would also be helpful.

Although, I cannot find a buster repo anywhere there, and there is no gpl under http://software.virtualmin.com/vm/6/

Edit… Spoke too soon, the key update did not solve my problem. I will open another issue in the forum…

Edit the second: guess I should read a bit more closely. I was browsing the wrong directory tree at software.virtualmin.com…

4

The key did not change. Your operating system version did, and the newer version of apt-get doesn’t like the old key algorithm. The newer repository uses a newer signing algorithm which makes apt-get happy.

If I changed the key on the old repos, that’d be a breaking change, so I haven’t changed the key on the old repos (and won’t). I can’t control what happens on the Debian/Ubuntu side, but I feel like if you’re upgrading your OS, it’s reasonable to change the Virtualmin repo URLs to new ones.

Of course there is.

Debian/Ubuntu repos are in: Index of /vm/6/gpl/apt

5

@tripkin hi mate, well as I know you, you usually look left when told right :wink: BTW even in my previous post if you look at list entries, you’ll see buster word right there.

@Joe sure thing you’re absolutely right. I am thinking about that next distro upgrade I would do full fresh install… Im kindly lazy when it comes to fresh installs, been sitting down from initial debian 6 install on all my servers meh.

6

This topic was automatically closed 4 days after the last reply. New replies are no longer allowed.