Uploaded image for project: 'Core Server'
  1. Core Server
  2. SERVER-25422

Debian Wheezy mongodb 3.2 repository signed with a bad key

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major - P3
    • Resolution: Duplicate
    • 3.2.8
    • None
    • Packaging
    • None
    • ALL
    • Hide

      This seems to be SERVER-22144 happening again

      $ curl http://repo.mongodb.org/apt/debian/dists/wheezy/mongodb-org/3.2/Release > Release
      $ curl http://repo.mongodb.org/apt/debian/dists/wheezy/mongodb-org/3.2/Release.gpg > Release.gpg
      shasum *
      a4f86ac7fe5581db025a60f8aadeeb288f8a142a  Release
      2cb1424a220dfccb3eec6ef4cea6590729131979  Release.gpg
      (reverse-i-search)`re': curl http://repo.mongodb.org/apt/debian/dists/wheezy/mongodb-org/3.2/Release.gpg > Release.gpg
      $ gpg --recv-key EA312927
      ..
      $ gpg --verify Release.gpg Release
      gpg: Signature made Tue Aug  2 04:21:56 2016 CEST using RSA key ID EA312927
      gpg: BAD signature from "MongoDB 3.2 Release Signing Key <packaging@mongodb.com>" [unknown]
      

      apt-get is printing:
      W: GPG error: http://repo.mongodb.org wheezy/mongodb-org/3.2 Release: The following signatures were invalid: BADSIG D68FA50FEA312927 MongoDB 3.2 Release Signing Key <packaging@mongodb.com>

      Show
      This seems to be SERVER-22144 happening again $ curl http://repo.mongodb.org/apt/debian/dists/wheezy/mongodb-org/3.2/Release > Release $ curl http://repo.mongodb.org/apt/debian/dists/wheezy/mongodb-org/3.2/Release.gpg > Release.gpg shasum * a4f86ac7fe5581db025a60f8aadeeb288f8a142a Release 2cb1424a220dfccb3eec6ef4cea6590729131979 Release.gpg (reverse-i-search)`re': curl http://repo.mongodb.org/apt/debian/dists/wheezy/mongodb-org/3.2/Release.gpg > Release.gpg $ gpg --recv-key EA312927 .. $ gpg --verify Release.gpg Release gpg: Signature made Tue Aug 2 04:21:56 2016 CEST using RSA key ID EA312927 gpg: BAD signature from "MongoDB 3.2 Release Signing Key <packaging@mongodb.com>" [unknown] apt-get is printing: W: GPG error: http://repo.mongodb.org wheezy/mongodb-org/3.2 Release: The following signatures were invalid: BADSIG D68FA50FEA312927 MongoDB 3.2 Release Signing Key <packaging@mongodb.com>

    Description

      W: GPG error: http://repo.mongodb.org wheezy/mongodb-org/3.2 Release: The following signatures were invalid: BADSIG D68FA50FEA312927 MongoDB 3.2 Release Signing Key <packaging@mongodb.com>

      with todays update. A new (invalid?) signature has been made yesterday.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              hfreyther Holger Freyther
              Votes:
              1 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: