DaemonForums  

Go Back   DaemonForums > OpenBSD > OpenBSD Packages and Ports

OpenBSD Packages and Ports Installation and upgrading of packages and ports on OpenBSD.

Reply
 
Thread Tools Display Modes
  #1   (View Single Post)  
Old 30th September 2016
fvgit's Avatar
fvgit fvgit is offline
Fdisk Soldier
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("SGVyZSBiZSBkcmFnb25zC")'
Posts: 72
Default unsigned package ... install anyway?

I'm getting the UNSIGNED PACKAGE warning when I try to install a package on a 9-day old current-snapshot (with no packages installed).

Is this a mere matter of mirrors and snapshot not being in sync anymore or should I suspect sth. more serious?

I was going to upgrade anyway, just wanted to know how to interpret the warning.
Reply With Quote
  #2   (View Single Post)  
Old 30th September 2016
jggimi's Avatar
jggimi jggimi is online now
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,800
Default

Is this a package YOU built? Those will be unsigned.

If not, double check the value of your $PKG_PATH if you use it, or your pkg.conf(5) installpath if you do not.
Reply With Quote
  #3   (View Single Post)  
Old 30th September 2016
fvgit's Avatar
fvgit fvgit is offline
Fdisk Soldier
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("SGVyZSBiZSBkcmFnb25zC")'
Posts: 72
Default

No, it's a pre-built package from the mirrors. The warning already appears when pkg_add wants to install the quirks package. It still worked a few days ago.

And the installpath values I'm using in /etc/pkg.conf are all ok.

Last edited by fvgit; 30th September 2016 at 12:37 AM. Reason: typo
Reply With Quote
  #4   (View Single Post)  
Old 30th September 2016
jggimi's Avatar
jggimi jggimi is online now
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,800
Default

I would not install it. All packages provided by the OpenBSD Project are signed. Either there was an error in the packaging process, or there is a security problem.
Reply With Quote
  #5   (View Single Post)  
Old 30th September 2016
fvgit's Avatar
fvgit fvgit is offline
Fdisk Soldier
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("SGVyZSBiZSBkcmFnb25zC")'
Posts: 72
Default

Hm, given that I barely used the thing network-wise I'm inclined to side with 'error in the packaging process' explanation. BTW, the error appears with all mirrors I tried (five or six in different countries).

I'll install a new snapshot tomorrow and will report back.
Reply With Quote
  #6   (View Single Post)  
Old 30th September 2016
TronDD TronDD is offline
Shell Scout
 
Join Date: Sep 2014
Posts: 138
Default

There have been changes to the signing process. If they've flipped the switch, you need a new snapshot and packages signed the new way. If your snapshot it older, you proably just need to update.

http://marc.info/?l=openbsd-tech&m=147283361813517&w=2
Reply With Quote
  #7   (View Single Post)  
Old 30th September 2016
jggimi's Avatar
jggimi jggimi is online now
More noise than signal
 
Join Date: May 2008
Location: USA
Posts: 5,800
Default

I just looked at the quirks packages for both amd64 and i386 -- since fvgit didn't mention what arch he's using at the moment, and has used both of these.

Both tarballs at my local mirror have the signature in the gzip header, rather than in the +CONTENTS file within the compressed tarball. You can see it with hexdump(1) or strings(1).

Thanks, TronDD!

Last edited by jggimi; 30th September 2016 at 01:42 AM. Reason: clarity/typo. Posted before reading.
Reply With Quote
  #8   (View Single Post)  
Old 1st October 2016
fvgit's Avatar
fvgit fvgit is offline
Fdisk Soldier
 
Join Date: May 2016
Location: perl -MMIME::Base64 -le 'print decode_base64("SGVyZSBiZSBkcmFnb25zC")'
Posts: 72
Default

I installed a new snapshot yesterday and the issue has been resolved. Thanks, TronDD & jggimi.


jggimi, I'm currently using i386 only. amd64 was on my macbook but I'm letting that issue rest until I have fully tested and upgraded my test machine and my firewall. Didn't want to push my luck too much messing with the laptop's partition table. Once I'm done with the other machines I'll attack it again with more vigour to see if I can get it to boot/multiboot.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Install a package from -current version? betweendayandnight OpenBSD Packages and Ports 16 17th July 2015 05:46 PM
Can't install package because of libraries yggdrasil OpenBSD Packages and Ports 6 29th November 2010 03:50 PM
How - To install GNOME vile I install OpenBSD ? looop OpenBSD Installation and Upgrading 6 24th April 2010 08:58 PM
Need help-binary package install bsdadmin NetBSD Installation and Upgrading 11 29th October 2009 05:08 AM
Package install error. delboy FreeBSD Ports and Packages 10 25th March 2009 05:54 PM


All times are GMT. The time now is 05:37 PM.


Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Content copyright © 2007-2010, the authors
Daemon image copyright ©1988, Marshall Kirk McKusick