Details

    • Type: Bug
    • Status: Closed
    • Priority: Blocker
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: 2017/08/02
    • Component/s: None
    • Labels:
      None
    • Template:
      MODULES Bug Template
    • Team:
      Release Engineering
    • Story Points:
      1
    • Sprint:
      RE 2017-05-03
    • QA Risk Assessment:
      Needs Assessment

      Description

      Using the following repository

      deb https://apt.puppetlabs.com xenial PC1
      

      With the following operative system:

      NAME="Ubuntu"
      VERSION="16.04.2 LTS (Xenial Xerus)"
      ID=ubuntu
      ID_LIKE=debian
      PRETTY_NAME="Ubuntu 16.04.2 LTS"
      VERSION_ID="16.04"
      HOME_URL="http://www.ubuntu.com/"
      SUPPORT_URL="http://help.ubuntu.com/"
      BUG_REPORT_URL="http://bugs.launchpad.net/ubuntu/"
      VERSION_CODENAME=xenial
      UBUNTU_CODENAME=xenial
      

      When we run an apt-get update then I have the following error:

      Reading package lists... Done
      W: GPG error: http://apt.puppetlabs.com xenial Release: The following signatures were invalid: BADSIG 7F438280EF8D349F Puppet, Inc. Release Key (Puppet, Inc. Release Key) <release@puppet.com>
      W: The repository 'http://apt.puppetlabs.com xenial Release' is not signed.
      N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
      N: See apt-secure(8) manpage for repository creation and user configuration details.
      W: GPG error: https://apt.puppetlabs.com xenial Release: The following signatures were invalid: BADSIG 7F438280EF8D349F Puppet, Inc. Release Key (Puppet, Inc. Release Key) <release@puppet.com>
      W: The repository 'https://apt.puppetlabs.com xenial Release' is not signed.
      N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
      N: See apt-secure(8) manpage for repository creation and user configuration details.
      E: Failed to fetch http://apt.puppetlabs.com/dists/xenial/PC1/binary-amd64/Packages.gz  Hash Sum mismatch
      E: Failed to fetch http://apt.puppetlabs.com/dists/xenial/PC1/binary-all/Packages.gz
      E: Failed to fetch https://apt.puppetlabs.com/dists/xenial/PC1/binary-all/Packages.gz  Hash Sum mismatch
      E: Some index files failed to download. They have been ignored, or old ones used instead.
      W: Duplicate sources.list entry http://apt.puppetlabs.com xenial Release
      

      Validating the repository

      wget https://apt.puppetlabs.com/dists/xenial/Release
      wget https://apt.puppetlabs.com/dists/xenial/Release.gpg
       
      gpg --fingerprint EF8D349F
      pub   4096R/EF8D349F 2016-08-18 [expires: 2021-08-17]
            Key fingerprint = 6F6B 1550 9CF8 E59E 6E46  9F32 7F43 8280 EF8D 349F
      uid       [ unknown] Puppet, Inc. Release Key (Puppet, Inc. Release Key) <release@puppet.com>
      sub   4096R/656674AE 2016-08-18 [expires: 2021-08-17]
       
       
      gpg --verify Release.gpg Release
      gpg: Signature made Thu 20 Apr 21:06:46 2017 BST using RSA key ID EF8D349F
      gpg: BAD signature from "Puppet, Inc. Release Key (Puppet, Inc. Release Key) <release@puppet.com>" [unknown]
      

      The md5 for the binary-amd64 is acording to the release { 053a11f9e6bf966e2e42341f43cb1941 167 PC1/binary-amd64/Release] and:

      wget https://apt.puppetlabs.com/dists/xenial/PC1/binary-amd64/Packages.gz
      md5sum Packages.gz
      7c5deed758025d7c4d1f49d94fc578ed  Packages.gz
      

        Attachments

          Issue Links

            Activity

              jsd-sla-details-panel

                People

                • Assignee:
                  bradejr Rob Braden
                  Reporter:
                  pegerto@gmail.com Pegerto Fernandez
                • Votes:
                  9 Vote for this issue
                  Watchers:
                  14 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Zendesk Support