Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2021-07-28 Thread Andrea Giudiceandrea

Hi Eva and QGIS users,
finally the server at gibs.earthdata.nasa.gov was upgraded in order to 
support SHA256 (instead of SHA1) as peer signing digest algorithm.


So, it is now possible to properly connect to it using QGIS on Ubuntu 
20.04 without the need to lower the default SECURITY LEVEL from 2 to 1.


Regards.

Andrea Giudiceandrea


Wed, 26 Aug 2020 14:51:30 -0700, andreaer...@libero.it wrote:

Hi all,
I've reported the issue to supp...@earthdata.nasa.gov and it seems they are
committed to fix it:

"After looking into it, we recognize that this is an issue on our side and
will be addressing it within the next few weeks."


___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user


Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-26 Thread Andrea Giudiceandrea
Andrea Giudiceandrea wrote
> the problem is not related to QGIS but:
> - to a misconfigured security connection protocol used by the WMS server
> at
> gibs.earthdata.nasa.gov (it uses an insecure SHA-1 hash function in some
> circumstances)
> - to a default higher security level connection (SHA-1 is not allowed)
> requested by the version of the openssl library (1.1.1f) shipped with
> Ubuntu
> 20.04

Hi all,
I've reported the issue to supp...@earthdata.nasa.gov and it seems they are
committed to fix it:

"After looking into it, we recognize that this is an issue on our side and
will be addressing it within the next few weeks."

Regards.

Andrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-26 Thread evaroben

Thank you so much!

Eva

Am 26.08.2020 19:50 schrieb Andrea Giudiceandrea:

Andrea Giudiceandrea wrote

the problem is not related to QGIS but:
- to a misconfigured security connection protocol used by the WMS 
server

at
gibs.earthdata.nasa.gov (it uses an insecure SHA-1 hash function in 
some

circumstances)
- to a default higher security level connection (SHA-1 is not allowed)
requested by the version of the openssl library (1.1.1f) shipped with
Ubuntu
20.04


Hi all,
I've reported the issue to supp...@earthdata.nasa.gov and it seems they 
are

committed to fix it:

"After looking into it, we recognize that this is an issue on our side 
and

will be addressing it within the next few weeks."

Regards.

Andrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread Andrea Giudiceandrea
evaroben wrote
> So it's the combination of two brand new versions that creates the
> problem?

Hi Eva,
after some other research about your issue and thanks to Richard
Duivenvoorde that checked and confirmed the issue on his system using other
tools, is now clear that the problem is not related to QGIS but:

- to a misconfigured security connection protocol used by the WMS server at
gibs.earthdata.nasa.gov (it uses an insecure SHA-1 hash function in some
circumstances)

- to a default higher security level connection (SHA-1 is not allowed)
requested by the version of the openssl library (1.1.1f) shipped with Ubuntu
20.04

You can workaround the issue following the advice provided at
https://askubuntu.com/a/1233456

Although it's not recommended to lower the security level of https
connections, I've personally tested that solution and it works on my Ubuntu
20.04, allowing QGIS to connect via SSL with the WMS server at
gibs.earthdata.nasa.gov.


Hi Richard,
you can also confirm the source of the issue checking that

curl -v
"https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi?SERVICE=WMS=GetCapabilities;
--cipher "DEFAULT@SECLEVEL=1"

works.

And also directly using openssl to connect to the server, checking that

openssl s_client -connect gibs.earthdata.nasa.gov:443

do not works, while

openssl s_client -connect gibs.earthdata.nasa.gov:443 -cipher
DEFAULT@SECLEVEL=1

works.

For further reference, see
https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1864689


Regards.

Andrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread Andrea Giudiceandrea
evaroben wrote
> gpg: key F7E06F06199EF2F2: 1 Beglaubigung wegen fehlendem Schlüssel nicht
> geprüft 
> gpg: Schlüssel F7E06F06199EF2F2: "QGIS Archive Automatic Signing Key 
> (2020) 

> qgis-developer@.osgeo

> " nicht geändert gpg: Anzahl 
> insgesamt bearbeiteter Schlüssel: 1 gpg:  unverändert: 1"

Dear Eva,
"1 Beglaubigung wegen fehlendem Schlüssel nicht geprüft " (="1 signature not
checked due to a missing key") just means the imported gpg key with id
F7E06F06199EF2F2 has 1 signature non verifiable. This is not a problem and
you can ignore it and it does not prevent to correctly import the key into
the apt keyring. Moreover, the key F7E06F06199EF2F2 is already in your apt
keyring ("Schlüssel ... nicht geändert", "unverändert: 1"). You can check
this running "sudo apt-key list F7E06F06199EF2F2".

Anyway AFAIK this gpg key is only needed for the QGIS installation and
update process and is not related with your SSL protocol connection error.

Which QGIS version are you using? I suppose 3.14.1, isn't it?

I can connect to the WMS sever at
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi using:
QGIS 3.14.0 on Windows 10
QGIS 3.14.1 on Ubuntu 18.04
QGIS 3.12.3 (Flatpak) on Ubuntu 20.04

but I cannot connect to the WMS sever using QGIS 3.14.0 on Ubuntu 20.04 as
you reported:

WMS PROVIDER
Failed to download capabilities:
Download of capabilities failed: SSL handshake failed


Instead i can connect to other WMS servers using https (e.g.
https://wms.cartografia.agenziaentrate.gov.it/inspire/wms/ows01.php) with
QGIS 3.14.0 on Ubuntu 20.04.

Could you please check if you can connect to other WMS servers using https
(e.g. https://wms.cartografia.agenziaentrate.gov.it/inspire/wms/ows01.php)?

It's probably worth reporting the bug on the qgis-developer ml or on GitHub
if other user can check if they can or cannot use that WMS server at
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi.

Regards.

Andrea Giudiceandrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread Richard Duivenvoorde
(not this is NOT related to earlier certificate issue around installing!!)

FYI, I get the same message (running master AND 3.14 on Debian Testing):

../src/core/qgsowsconnection.cpp:85 : (QgsOwsConnection) [0ms] encoded uri: 
'dpiMode=7=https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi'.
../src/providers/wms/qgswmscapabilities.cpp:40 : (parseUri) [0ms] uriString = 
dpiMode=7=https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi
../src/providers/wms/qgswmscapabilities.cpp:126 : (parseUri) [0ms] mBaseUrl = 
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi?
../src/providers/wms/qgswmscapabilities.cpp:139 : (parseUri) [0ms] Entering: 
layers:, styles:
../src/providers/wms/qgswmscapabilities.cpp:142 : (parseUri) [0ms] Setting 
image encoding to .
../src/providers/wms/qgswmscapabilities.cpp:193 : (parseUri) [0ms] Contextual 
legend: 0
../src/providers/wms/qgswmscapabilities.cpp:2348 : (downloadCapabilities) 
[25ms] entering: forceRefresh=1
../src/providers/wms/qgswmscapabilities.cpp:2357 : (downloadCapabilities) [0ms] 
url = 
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi?SERVICE=WMS=GetCapabilities
../src/core/qgsnetworkaccessmanager.cpp:231 : (createRequest) [0ms] Adding 
trusted CA certs to request
../src/core/qgsnetworkaccessmanager.cpp:112 : (queryProxy) [1ms] using fallback 
proxy for 
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi?SERVICE=WMS=GetCapabilities
../src/core/qgsnetworkaccessmanager.cpp:288 : (createRequest) [0ms] Created 
[reply:55c59ecc2d10]
../src/providers/wms/qgswmscapabilities.cpp:2404 : (capabilitiesReplyProgress) 
[216ms] 0 of 0 bytes of capabilities downloaded.
../src/core/qgsmessagelog.cpp:29 : (logMessage) [0ms] 2020-08-11T16:27:44 
WMS[1] Download of capabilities failed: SSL handshake failed

You can make an issue for this, because it is strange that some versions of Qt 
accept this certificate, and others do not.

Note that if I try to retrieve the capabilities using curl, I also get an error:

$ curl -v 
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi?SERVICE=WMS=GetCapabilities
[1] 443262
[richard@oost ~]$ *   Trying 2001:4d0:241a:442::5:443...
* TCP_NODELAY set
* Connected to gibs.earthdata.nasa.gov (2001:4d0:241a:442::5) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.2 (IN), TLS handshake, Certificate (11):
* TLSv1.2 (IN), TLS handshake, Server key exchange (12):
* TLSv1.2 (OUT), TLS alert, handshake failure (552):
* error:1414D172:SSL routines:tls12_check_peer_sigalg:wrong signature type
* Closing connection 0
curl: (35) error:1414D172:SSL routines:tls12_check_peer_sigalg:wrong signature 
type

So my guess is that there is an certificate error on the WMS-site?

Some version info for those who maybe can figure out this:

$ curl --version
curl 7.68.0 (x86_64-pc-linux-gnu) libcurl/7.68.0 OpenSSL/1.1.1g zlib/1.2.11 
brotli/1.0.7 libidn2/2.3.0 libpsl/0.21.0 (+libidn2/2.3.0) libssh2/1.8.0 
nghttp2/1.41.0 librtmp/2.3
Release-Date: 2020-01-08
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 
pop3s rtmp rtsp scp sftp smb smbs smtp smtps telnet tftp 
Features: AsynchDNS brotli GSS-API HTTP2 HTTPS-proxy IDN IPv6 Kerberos 
Largefile libz NTLM NTLM_WB PSL SPNEGO SSL TLS-SRP UnixSockets


QGIS version
3.15.0-Master
QGIS code revision
68e8e233f5
Compiled against Qt
5.14.2
Running against Qt
5.14.2
Compiled against GDAL/OGR
3.1.2
Running against GDAL/OGR
3.1.2
Compiled against GEOS
3.8.1-CAPI-1.13.3
Running against GEOS
3.8.1-CAPI-1.13.3
Compiled against SQLite
3.32.3
Running against SQLite
3.32.3
PostgreSQL Client Version
12.3 (Debian 12.3-1+b1)
SpatiaLite Version
4.3.0a
QWT Version
6.1.4
QScintilla2 Version
2.11.2
Compiled against PROJ
7.1.0
Running against PROJ
Rel. 7.1.0, August 1st, 2020


Regards,

Richard Duivenvoorde



On 8/11/20 4:21 PM, Andrea Giudiceandrea wrote:
> evaroben wrote
>> gpg: key F7E06F06199EF2F2: 1 Beglaubigung wegen fehlendem Schlüssel nicht
>> geprüft 
>> gpg: Schlüssel F7E06F06199EF2F2: "QGIS Archive Automatic Signing Key 
>> (2020) 
> 
>> qgis-developer@.osgeo
> 
>> " nicht geändert gpg: Anzahl 
>> insgesamt bearbeiteter Schlüssel: 1 gpg:  unverändert: 1"
> 
> Dear Eva,
> "1 Beglaubigung wegen fehlendem Schlüssel nicht geprüft " (="1 signature not
> checked due to a missing key") just means the imported gpg key with id
> F7E06F06199EF2F2 has 1 signature non verifiable. This is not a problem and
> you can ignore it and it does not prevent to correctly import the key into
> the apt keyring. Moreover, the key F7E06F06199EF2F2 is already in your apt
> keyring ("Schlüssel ... nicht geändert", "unverändert: 1"). You can check
> this running "sudo apt-key list F7E06F06199EF2F2".
> 
> Anyway AFAIK this gpg key is only needed for the QGIS 

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread evaroben

Dear Andrea,

yes, I verified with your Italian address, and it works. I somehow 
thought that the SSL failure had something to do with the keys not being 
deemed trustworthy.
And yes, I use QGIS version 3.14.1, and Ubuntu 20.04. So it's the 
combination of two brand new versions that creates the problem?


Being a complete newbie to QGIS, I found it quite disheartening not to 
be able to install and use the system properly...


Thanks a lot for your explanations!

Eva


Am 11.08.2020 16:21 schrieb Andrea Giudiceandrea:

evaroben wrote
gpg: key F7E06F06199EF2F2: 1 Beglaubigung wegen fehlendem Schlüssel 
nicht

geprüft
gpg: Schlüssel F7E06F06199EF2F2: "QGIS Archive Automatic Signing Key
(2020) 



qgis-developer@.osgeo



" nicht geändert gpg: Anzahl
insgesamt bearbeiteter Schlüssel: 1 gpg:  unverändert: 1"


Dear Eva,
"1 Beglaubigung wegen fehlendem Schlüssel nicht geprüft " (="1 
signature not

checked due to a missing key") just means the imported gpg key with id
F7E06F06199EF2F2 has 1 signature non verifiable. This is not a problem 
and
you can ignore it and it does not prevent to correctly import the key 
into
the apt keyring. Moreover, the key F7E06F06199EF2F2 is already in your 
apt
keyring ("Schlüssel ... nicht geändert", "unverändert: 1"). You can 
check

this running "sudo apt-key list F7E06F06199EF2F2".

Anyway AFAIK this gpg key is only needed for the QGIS installation and
update process and is not related with your SSL protocol connection 
error.


Which QGIS version are you using? I suppose 3.14.1, isn't it?

I can connect to the WMS sever at
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi using:
QGIS 3.14.0 on Windows 10
QGIS 3.14.1 on Ubuntu 18.04
QGIS 3.12.3 (Flatpak) on Ubuntu 20.04

but I cannot connect to the WMS sever using QGIS 3.14.0 on Ubuntu 20.04 
as

you reported:

WMS PROVIDER
Failed to download capabilities:
Download of capabilities failed: SSL handshake failed


Instead i can connect to other WMS servers using https (e.g.
https://wms.cartografia.agenziaentrate.gov.it/inspire/wms/ows01.php) 
with

QGIS 3.14.0 on Ubuntu 20.04.

Could you please check if you can connect to other WMS servers using 
https
(e.g. 
https://wms.cartografia.agenziaentrate.gov.it/inspire/wms/ows01.php)?


It's probably worth reporting the bug on the qgis-developer ml or on 
GitHub

if other user can check if they can or cannot use that WMS server at
https://gibs.earthdata.nasa.gov/wms/epsg4326/best/wms.cgi.

Regards.

Andrea Giudiceandrea



--
Sent from: http://osgeo-org.1560.x6.nabble.com/QGIS-User-f4125267.html
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread evaroben

Dear Ben,

thank you so very much for your prompt answer. It made me very hopeful 
when seeing it, and I immediately tried, but unfortunatley to no avail.


That's the reaction of my terminal :

"neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ wget -O - 
https://qgis.org/downloads/qgis-2020.gpg.key | gpg --import

--2020-08-11 14:27:17--  https://qgis.org/downloads/qgis-2020.gpg.key
Auflösen des Hostnamens qgis.org (qgis.org) … 104.27.139.220, 
172.67.167.146, 104.27.138.220, ...
Verbindungsaufbau zu qgis.org (qgis.org)|104.27.139.220|:443 … 
verbunden.

HTTP-Anforderung gesendet, auf Antwort wird gewartet … 200 OK
Länge: 1839 (1,8K) [application/pgp-keys]
Wird in »STDOUT« gespeichert.

-   100%[===>]   1,80K  --.-KB/sin 
0s


2020-08-11 14:27:17 (12,4 MB/s) - auf die Standardausgabe geschrieben 
[1839/1839]


gpg: key F7E06F06199EF2F2: 1 Beglaubigung wegen fehlendem Schlüssel 
nicht geprüft
gpg: Schlüssel F7E06F06199EF2F2: Öffentlicher Schlüssel "QGIS Archive 
Automatic Signing Key (2020) " 
importiert

gpg: Anzahl insgesamt bearbeiteter Schlüssel: 1
gpg:   importiert: 1
gpg: keine ultimativ vertrauenswürdigen Schlüssel gefunden"

The system imported one key, but indicated that it did not find any 
ultimately trustworthy keys.


THEN I ran the reminder:

"neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ gpg --fingerprint 
F7E06F06199EF2F2

pub   rsa4096 2020-08-08 [SCEA] [verfällt: 2021-08-08]
  3987 7635 093F 2656 0197  11FA F7E0 6F06 199E F2F2
uid[ unbekannt] QGIS Archive Automatic Signing Key (2020) 



neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ pub   rsa4096 2020-08-08 
[SCEA] [expires: 2021-08-08]


Der Befehl 'pub' wurde nicht gefunden, meinten Sie:

  Befehl 'dub' aus dem Snap dub (1.18.0)
  Befehl 'hub' aus dem Snap hub (v2.14.1)
  Befehl 'hub' aus dem deb hub (2.7.0~ds1-1)
  Befehl 'puf' aus dem deb puf (1.0.0-7build1)
  Befehl 'pcb' aus dem deb pcb-gtk (1:4.2.2-1)
  Befehl 'pcb' aus dem deb pcb-lesstif (1:4.2.2-1)
  Befehl 'publ' aus dem deb atfs (1.4pl6-14)
  Befehl 'dub' aus dem deb dub (1.19.0-1build2)

Informationen zu neuen Versionen sind mit 'snap info ' zu 
finden.


neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$   3987 7635 093F 
2656 0197  11FA F7E0 6F06 199E F2F2

3987: Befehl nicht gefunden.
neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ uid   [unknown] 
QGIS Archive Automatic Signing Key (2020) 


bash: Syntaxfehler beim unerwarteten Wort »(«
neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ ^C
neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$"

The system did not like the command "pub", and did  not accept the 
brackets.

I also deinstalled a previous key from 2019, doesn't help.

And I deinstalled the manually installed QGIS, and installed it via the 
Ubuntu Software centre, to no avail.


Your explanation that the 2020 key is very recent, so do you think that 
in some days some certificate will be added, and it works?


Best regards, and thank you very much again!

Eva






Am 11.08.2020 13:43 schrieb Ben Hur Pintor:

Hi Eva,

AFAIK, the 2019 keys have recently expired thus a new one was added
fairly recently for 2020 (a few days ago if I'm not mistaken).

The error you're mentioning also happens to me when I try to download
the key from a keyserver and add the key to apt in without manual
fingerprint verification.

When I use the longer method to add the key, that is to verify the key
first and add it afterwards, the error doesn't occur on my machine.

From the QGIS website:
_Get and verify the key_

wget -O - https://qgis.org/downloads/qgis-2020.gpg.key | gpg --import
gpg --fingerprint F7E06F06199EF2F2

pub rsa4096 2020-08-08 [SCEA] [expires: 2021-08-08]
 3987 7635 093F 2656 0197 11FA F7E0 6F06 199E F2F2
uid [unknown] QGIS Archive Automatic Signing Key (2020)


_Add key_

gpg --export --armor F7E06F06199EF2F2 | sudo gpg --no-default-keyring
--keyring gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg --import
sudo chmod a+r /etc/apt/trusted.gpg.d/qgis-archive.gpg

What I've noticed is that the TRUST of the new key is [UNKNOWN]
instead of [ULTIMATE] which could be the cause why adding it in one
command fails. I'm not sure as well if this has any repercussions as
to the validity of the keys. Probably they still need to be signed as
trusted since they are new. P.S. I'm not an expert with GPG or keys.

Try to use the longer method for adding the keys and see if it works
for you.

All the best,
Ben Hur

On Tue, Aug 11, 2020 at 6:28 PM  wrote:


Dear QGIS and Ubuntu users,

I installed QGIS on Ubuntu 20.04, and it doesn't really work. I
used the
advice on the QGIS website:
https://qgis.org/en/site/forusers/alldownloads.html#debian-ubuntu
[1]

On the terminal, I have a problem with the QGIS key and keystrings.
When
entering these commands
"wget -qO - https://qgis.org/downloads/qgis-2020.gpg.key [2] | sudo
gpg
--no-default-keyring --keyring
gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg --import sudo
chmod

Re: [Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread Ben Hur Pintor
Hi Eva,

AFAIK, the 2019 keys have recently expired thus a new one was added fairly
recently for 2020 (a few days ago if I'm not mistaken).

The error you're mentioning also happens to me when I try to download the
key from a keyserver and add the key to apt in without manual fingerprint
verification.

When I use the longer method to add the key, that is to verify the key
first and add it afterwards, the error doesn't occur on my machine.

>From the QGIS website:
*Get and verify the key*

wget -O - https://qgis.org/downloads/qgis-2020.gpg.key | gpg
--importgpg --fingerprint F7E06F06199EF2F2

pub   rsa4096 2020-08-08 [SCEA] [expires: 2021-08-08]
  3987 7635 093F 2656 0197  11FA F7E0 6F06 199E F2F2uid
[unknown] QGIS Archive Automatic Signing Key (2020)



*Add key*

gpg --export --armor F7E06F06199EF2F2 | sudo gpg --no-default-keyring
--keyring gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg
--importsudo chmod a+r /etc/apt/trusted.gpg.d/qgis-archive.gpg


What I've noticed is that the *trust* of the new key is *[unknown]* instead
of *[ultimate]* which could be the cause why adding it in one command
fails. I'm not sure as well if this has any repercussions as to the
validity of the keys. Probably they still need to be signed as trusted
since they are new. P.S. I'm not an expert with GPG or keys.

Try to use the longer method for adding the keys and see if it works for
you.


All the best,
Ben Hur

On Tue, Aug 11, 2020 at 6:28 PM  wrote:

> Dear QGIS and Ubuntu users,
>
> I installed QGIS on Ubuntu 20.04, and it doesn't really work. I used the
> advice on the QGIS website:
> https://qgis.org/en/site/forusers/alldownloads.html#debian-ubuntu
>
> On the terminal, I have a problem with the QGIS key and keystrings. When
> entering these commands
> "wget -qO - https://qgis.org/downloads/qgis-2020.gpg.key | sudo gpg
> --no-default-keyring --keyring
> gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg --import sudo chmod
> a+r /etc/apt/trusted.gpg.d/qgis-archive.gpg"
>   the system tells me:
>
> "neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ wget -qO -
> https://qgis.org/downloads/qgis-2020.gpg.key | sudo gpg
> --no-default-keyring --keyring
> gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg --import gpg: key
> F7E06F06199EF2F2: 1 Beglaubigung wegen fehlendem Schlüssel nicht geprüft
> gpg: Schlüssel F7E06F06199EF2F2: "QGIS Archive Automatic Signing Key
> (2020) " nicht geändert gpg: Anzahl
> insgesamt bearbeiteter Schlüssel: 1 gpg:  unverändert: 1"
>
> You can see that my sytem is in German. It means something like: key
> F7E06F06199EF2F2: 1 authentification not verified because of missing
> key. When looking at the list of authentifications, the key in question
> is there:
>
> (screenshot attached)
>
> What can be the problem? QGIS is installed, but when wanting to connect
> to a map server, it indicates that this is not possible due to an error
> in the SSL protocol. I want to use the GIS data from this site:
>
> https://wiki.earthdata.nasa.gov/display/GIBS/Geographic+Information+System+%28GIS%29+Usage#expand-QGIS
>
> Thanks a lot for helping me!
>
> Eva___
> Qgis-user mailing list
> Qgis-user@lists.osgeo.org
> List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
> Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user



-- 
---
*Ben Hur S. Pintor*
bnhr.xyz
h...@bnhr.xyz


open spatial & data solutions
___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user

[Qgis-user] Problem installing QGIS on Ubuntu 20.04 - key authentification

2020-08-11 Thread evaroben

Dear QGIS and Ubuntu users,

I installed QGIS on Ubuntu 20.04, and it doesn't really work. I used the 
advice on the QGIS website: 
https://qgis.org/en/site/forusers/alldownloads.html#debian-ubuntu


On the terminal, I have a problem with the QGIS key and keystrings. When 
entering these commands
"wget -qO - https://qgis.org/downloads/qgis-2020.gpg.key | sudo gpg 
--no-default-keyring --keyring 
gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg --import sudo chmod 
a+r /etc/apt/trusted.gpg.d/qgis-archive.gpg"

 the system tells me:

"neisolsayaparizabi@neisolsayaparizabi-N2x0WU:~$ wget -qO - 
https://qgis.org/downloads/qgis-2020.gpg.key | sudo gpg 
--no-default-keyring --keyring 
gnupg-ring:/etc/apt/trusted.gpg.d/qgis-archive.gpg --import gpg: key 
F7E06F06199EF2F2: 1 Beglaubigung wegen fehlendem Schlüssel nicht geprüft 
gpg: Schlüssel F7E06F06199EF2F2: "QGIS Archive Automatic Signing Key 
(2020) " nicht geändert gpg: Anzahl 
insgesamt bearbeiteter Schlüssel: 1 gpg:  unverändert: 1"


You can see that my sytem is in German. It means something like: key 
F7E06F06199EF2F2: 1 authentification not verified because of missing 
key. When looking at the list of authentifications, the key in question 
is there:


(screenshot attached)

What can be the problem? QGIS is installed, but when wanting to connect 
to a map server, it indicates that this is not possible due to an error 
in the SSL protocol. I want to use the GIS data from this site:

https://wiki.earthdata.nasa.gov/display/GIBS/Geographic+Information+System+%28GIS%29+Usage#expand-QGIS

Thanks a lot for helping me!

Eva___
Qgis-user mailing list
Qgis-user@lists.osgeo.org
List info: https://lists.osgeo.org/mailman/listinfo/qgis-user
Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-user