On Thu, Jul 07, 2005 at 01:39:57PM +0100, Steve Kemp wrote:
> On Thu, Jul 07, 2005 at 02:14:51PM +0200, Johann Spies wrote:
> 
> > Ok, but the archive on archive3.sun.ac.za is just a mirror from a
> > primary debian upstream source.  Do I have to generate a spesific key
> > for my server?
> 
>   Strange .. but no you need do nothing with your key(s).
> 
> > > > NO_PUBKEY 07DC563D1F41B907 W: You may want to update the package lists
> > > > to correct these missing files
> > > 
> > >   Find the key that the archive is signed with, import it as you
> > >  did for the main Sid/Etch archive and all should be well.
> > 
> > And where do I find this key?
> 
>    gpg --keyserver some.key.server --recv-keys 07DC563D1F41B907 
> 
>   (For keyservers I use:
>        keyring.debian.org 
>        pgp.mit.edu
>        pgpkeys.pgp.net
>        wwwkeys.uk.pgp.net
>     or wwwkeys.pgp.net )
> 

Thanks, I have done that with no error messages:
#  gpg --keyserver keyring.debian.org --recv-keys 07DC563D1F41B907
F1D53D8C4F368D
gpg: requesting key 4F368D5D from hkp server keyring.debian.org
gpg: requesting key 1F41B907 from hkp server keyring.debian.org
gpg: key 4F368D5D: "Debian Archive Automatic Signing Key (2005)
<[EMAIL PROTECTED]>" not changed
gpg: key 1F41B907: "Christian Marillat <[EMAIL PROTECTED]>" not
changed
gpg: Total number processed: 2
gpg:              unchanged: 2

I have also downloaded the script "apt-check-sigs" which reported the
following:

Checking sources in /etc/apt/sources.list:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

...
Source: deb ftp://archive3.sun.ac.za/pub/mirrors/debian unstable main contrib 
non-free
  o Origin: Debian/Debian
  o Suite: unstable/sid
  o Date: Tue, 05 Jul 2005 19:38:39 UTC
  o Description: Debian Unstable - Not Released
  * COULDN'T CHECK SIGNATURE BY KEYID: F1D53D8C4F368D5D
  * NO VALID SIGNATURE
  o Okay: main contrib non-free

Source: deb-src ftp://archive3.sun.ac.za/pub/mirrors/debian unstable main 
contrib non-free
  o Origin: Debian/Debian
  o Suite: unstable/sid
  o Date: Tue, 05 Jul 2005 19:38:39 UTC
  o Description: Debian Unstable - Not Released
  * COULDN'T CHECK SIGNATURE BY KEYID: F1D53D8C4F368D5D
  * NO VALID SIGNATURE
  o Okay: main contrib non-free

...

I am also the ftp-administrator of archive3.sun.ac.za so I have an
uneasy feeling about this...

Regards
Johann


-- 
Johann Spies          Telefoon: 021-808 4036
Informasietegnologie, Universiteit van Stellenbosch

     "Trust in the Lord with all your heart, and do not
      lean on your own understanding."
                                        Proverbs 3:5


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to