Apt e Signatures

[PEA]

Ciao ho un problema con le firme di alquni pacchetti per la mia Suse. se per esempio provo ad installare mplayer ecco cosa viene fuori:

evilangel@linux:~> su
Password:
linux:/home/evilangel # apt-get install mplayer*
Lettura della lista di pacchetti... Done
Calcolo dell'albero delle dipendenze... Done
Selecting MPlayer-suite for 'mplayer*'
Selecting MPlayer for 'mplayer*'
Selecting mplayerplug-in for 'mplayer*'
Selecting xine-skin-mplayer for 'mplayer*'
Selecting import_mplayer.so for 'mplayer*'
Selecting transcode for 'import_mplayer.so'
Selecting mplayerplug-in.so for 'mplayer*'
Selecting mplayerplug-in for 'mplayerplug-in.so'
Verranno installati i seguenti pacchetti extra:
MPlayer MPlayer-suite a52dec faad2 lame libfame libtheora lzo mplayerplug-in
pvm transcode w32codec-all xine-skin-mplayer xvid
Saranno installati i seguenti pacchetti NUOVI:
MPlayer MPlayer-suite a52dec faad2 lame libfame libtheora lzo mplayerplug-in
pvm transcode w32codec-all xine-skin-mplayer xvid
0 upgraded, 14 newly installed, 0 removed and 485 not upgraded.
Need to get 0B/27,2MB of archives.
After unpacking 69,2MB of additional disk space will be used.
Vuoi proseguire? [S/n]
Checking GPG signatures...
Unsigned /var/cache/apt/archives/a52dec_0.7.4-3.pm.0_i686.rpm: sha1 md5 OK
Unknown signature /var/cache/apt/archives/faad2_2.0-0.pm.1_i686.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#cd3140cd)
Unsigned /var/cache/apt/archives/libfame_0.9.1-0.pm.2_i686.rpm: sha1 md5 OK
Unsigned /var/cache/apt/archives/libtheora_1.0alpha3-6.1_i586.rpm: sha1 md5 OK
Unknown signature /var/cache/apt/archives/w32codec-all_20040809-0.pm.0_i386.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#5277a2fa)
Unknown signature /var/cache/apt/archives/lame_3.96.1-1suse91_i686.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#58857177)
Unknown signature /var/cache/apt/archives/MPlayer_1.0pre5-pm.1_i686.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#5f6842a4)
Unknown signature /var/cache/apt/archives/mplayerplug-in_2.66-0.pm.1_i586.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#cd3140cd)
Unknown signature /var/cache/apt/archives/xvid_1.0.2-0.pm.0_i686.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#5277a2fa)
Unknown signature /var/cache/apt/archives/MPlayer-suite_1.0-rb3_i586.rpm: sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#8c9b4b0d)
Unsigned /var/cache/apt/archives/transcode_0.6.12-0.pm.2_i686.rpm: sha1 md5 OK
Unknown signature /var/cache/apt/archives/xine-skin-mplayer_4.0-0.pm.3_noarch.rpm: (SHA1) DSA sha1 md5 (GPG) NOT OK (MISSING KEYS: GPG#5277a2fa)
E: Error(s) while checking package signatures:
4 unsigned package(s)
8 package(s) with unknown signatures
0 package(s) with illegal/corrupted signatures



Non so come installare queste signature

[andy caps]

installa anche il -devel di apt
poi al limite controlla in apt-conf

mi ricordo che con un tipo di apt per suse avevo settatto da li di non controllare la sign dei pacchetti

--------------
oppure
----------
Public gpg keys for apt components

Most public gpg keys are delivered via rpms prefixed with rpmkey-. Those rpms are part of the apt repository and just like other rpms they can be installed with apt. The rpmkey rpms are provided via the component rpmkey, it is therefor adviced to add the component rpmkey to your sources.list file. Apt (version 0.15.5cnc6*rb5 and beyond (suse 9.0 and beyond)) will take care that the public gpg key is automatically imported into the rpm database! The second part of the 'public gpg key rpm' name is in most cases the name of apt component. There are for example; rpmkey-packman, rpmkey-suser-scorot, etc. Just use apt search rpmkey to find the available public gpg key rpms. After the desired rpmkey rpm has been found use: apt --no-checksig --no-post install <desired rpmkey rpm> to obtain the public gpg key.

Non apt users can install rpmkey- rpms too. They only need to import the public gpg key being delivered with the rpm manually into the rpm database with the command: rpm --import <public gpg key file>. The rpmkey rpms are hosted on gwdg.de
---------------------

con questo apt non chiede la sign perche se la scarica da solo
ftp://ftp.uni-erlangen.de/pub/Linux/...kages/SuSE-9.1

[smilyzeus]

http://forum.html.it/forum/showthrea...1&goto=newpost

Qui trovi la soluzione