Bug 28560

Summary: updates fail due to bad signatures
Product: Mageia Reporter: Ben McMonagle <westel>
Component: RPM PackagesAssignee: Mageia Bug Squad <bugsquad>
Status: RESOLVED WORKSFORME QA Contact:
Severity: normal    
Priority: Normal CC: davidwhodgins, fri, ouaurelien
Version: 8   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Source RPM: CVE:
Status comment:
Attachments: journal of 1st boot setting up online repos.

Description Ben McMonagle 2021-03-08 20:42:11 CET 
Description of problem: 
after a new Mga8 install and reboot to desktop. I added online repos(mirror:  http://mirror.aarnet.edu.au/pub/mageia/distrib/8/x86_64) via Mageia Welcome tab/ Media sources. 
I enabled repos in the GUI:
medium "Core Release (distrib1)" 
medium "Core Updates (distrib3)" 
medium "Nonfree Release (distrib11)"
medium "Nonfree Updates (distrib13)" 
medium "Tainted Release (distrib21)" 
medium "Tainted Updates (distrib23)" 
medium "Core 32bit Release (distrib31)"
medium "Core 32bit Updates (distrib32)" 
medium "Nonfree 32bit Release (distrib36)" 
medium "Nonfree 32bit Updates (distrib37)" 
medium "Tainted 32bit Release (distrib41)" 
medium "Tainted 32bit Updates (distrib42)"

by checking the boxes provided.
I attempted update via terminal : urpmi --auto-update , which then failed with: 

The following packages have bad signatures:                                
/var/cache/urpmi/rpms/ffmpeg-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:37, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64avcodec58-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:46, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64avfilter7-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:25, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64avformat58-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:16, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64avresample4-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:40, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64avutil56-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:28, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64dca0-0.0.7-1.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sat 28 Mar 2020 04:10:51, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64dvdcss2-1.4.2-3.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sat 22 Feb 2020 04:05:09, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64opencore-amr0-0.1.5-3.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sat 22 Feb 2020 04:08:21, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64postproc55-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:32, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64swresample3-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:25, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64swscaler5-4.3.1-6.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Wed 03 Feb 2021 13:11:26, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64vo-amrwbenc0-0.1.3-4.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sat 22 Feb 2020 04:12:52, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64x264_157-0.157-0.20191217.stable.2.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Tue 07 Jul 2020 03:06:38, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64x265_192-3.4-1.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sun 12 Jul 2020 19:46:06, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/lib64xvidcore4-1.3.7-1.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Thu 19 Nov 2020 10:12:27, Key ID b742fa8b80420f66))
/var/cache/urpmi/rpms/libdca-tools-0.0.7-1.mga8.tainted.x86_64.rpm: Medium without key (OK (RSA/SHA256, Sat 28 Mar 2020 04:10:52, Key ID b742fa8b80420f66))
Do you want to continue installation ? (y/N)

I chose to not to proceed.

I ran: urpmi --clean and re-attempted the update, same fail.

the next day I again ran: urpmi --clean and retried the update - failed.

i then removed the repos, and reinstalled the same from the same mirror.
update proceeded without issue.

checking the journal, shows that there are some curl exits with error WRT some repos.
In Mga7, attempting to enable such repos would have returned an info-box advising that the repo needed to be updated



Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
Comment 1 Ben McMonagle 2021-03-08 20:44:31 CET 
Created attachment 12437 [details]
journal of 1st boot setting up online repos.
Comment 2 Dave Hodgins 2021-03-08 21:41:28 CET 
$ grep failed bug
Mar 07 20:22:13 localhost drakrpm-editmedia[3595]: failed to download mirror list
Mar 07 20:22:33 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 52
Mar 07 20:24:36 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 22
Mar 07 20:28:16 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 22
Mar 07 20:30:25 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 28
Mar 07 20:31:47 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 28
Mar 07 20:33:43 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 28
Mar 07 20:34:42 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 28
Mar 07 20:34:57 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 22
Mar 07 20:40:29 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 22
Mar 07 20:41:02 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 22
Mar 07 20:41:37 localhost /usr/libexec/gdm-x-session[3595]: error: curl failed: exited with 22

From man curl ...
       22     HTTP page not retrieved. The requested url was not found or returned another error with the HTTP error code being 400 or above. This return  code
              only appears if -f, --fail is used.
       28     Operation timeout. The specified time-out period was reached according to the conditions.
       52     The server didn't reply anything, which here is considered an error.

Whether there is a problem with the network connection, or a problem at the
mirror during the upgrade, I'm not sure, but I'm pretty sure the problems
were all caused by the curl failures.

As you're using urpmi commands, try changing the downloader to wget ...
$ head -n 6 /etc/urpmi/urpmi.cfg
{
  downloader: wget
  resume: 1
  verify-rpm: 1
  xml-info: always
}

Make sure the screen locker has been disabled, killall mgaapplet, and stop
crond.service, then try again.

Check /etc/urpmi/urpmi.cfg right after adding the Mageia 8 mirrors, to ensure
every Mageia repo has the line with ...
  key-ids: 80420f66

CC: (none) => davidwhodgins

Morgan Leijström 2021-03-09 10:40:39 CET

CC: (none) => fri

Comment 3 Aurelien Oudelet 2021-03-13 17:32:45 CET 
What the status of this?

CC: (none) => ouaurelien

Comment 4 Aurelien Oudelet 2021-03-21 16:10:02 CET 
Closing. Feel free to repoen if reproduced.

Status: NEW => RESOLVED
Resolution: (none) => WORKSFORME