Solved Cannot make the repositories signature work

txeni

Hi there,

Trying Vivaldi in my ubuntu Mate 16.04, I really like it so far.
However I cannot seem to be able to make the updating work properly, which is a big problem for a browser in terms of security...
The .deb file seems to install alright, but when I run sudo apt-get update I get:

txeni:~$ sudo apt-get update

Ign:13 http://repo.vivaldi.com/stable/deb stable Release.gpg
Get:32 http://repo.vivaldi.com/stable/deb stable/main amd64 Packages [2,029 B]
Get:33 http://repo.vivaldi.com/stable/deb stable/main i386 Packages [2,034 B]
Fetched 336 kB in 5s (59.7 kB/s)                           
Reading package lists... Done
W: GPG error: http://repo.vivaldi.com/stable/deb stable Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 9658E8044A3AA3D6
W: The repository 'http://repo.vivaldi.com/stable/deb stable Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

I tried to install the repositories manually as explained here https://help.vivaldi.com/article/manual-setup-vivaldi-linux-repositories/

However when I run
wget -qO- https://repo.vivaldi.com/archive/linux_signing_key.pub | sudo apt-key add - I get:

txeni:~$ wget -qO- https://repo.vivaldi.com/archive/linux_signing_key.pub | sudo apt-key add -

gpg: invalid key resource URL `/etc/apt/trusted.gpg.d/home:stevenpusser.gpg'
gpg: keyblock resource `(null)': general error
gpg: Total number processed: 36
gpg:       skipped new keys: 36

Can anyone help me with this?

Thanks a lot!

thomasp

@txeni I would suggest you look at what's up with the /etc/apt/trusted.gpg.d/home:stevenpusser.gpg file. It looks like it is invalid and is blocking all apt-key operations from working (and I'm pretty sure it's unrelated to Vivaldi). Try moving the file somewhere else (eg. sudo mv /etc/apt/trusted.gpg.d/home:stevenpusser.gpg ~/) and then try running any of the apt-key commands again.

BoneTone

You're likely to find better help from your distro support. Looks like you possibly have an issue with your gpg keyring. It's not finding the file on your local system, i.e. the error is in your Linux config, not in the repo.

Edit: I don't have a debian system set up right now, so I can't dig in further. But the distro forum or IRC channel should be able to sort you out.

Edit 2: fixed mangled sentence.

aravisian

@txeni
In terminal, can you enter the following:

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9658E8044A3AA3D6

sudo apt-get update

And see if that helps resolve your troubles?

txeni

@aravisian said in Cannot make the repositories signature work:

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9658E8044A3AA3D6

@aravisian said in Cannot make the repositories signature work:

@txeni
In terminal, can you enter the following:

sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9658E8044A3AA3D6

sudo apt-get update

And see if that helps resolve your troubles?

Thanks a lot for your help, I try that but I got the same error.
It says "gpg: invalid key resource URL `/etc/apt/trusted.gpg.d/home:stevenpusser.gpg'"

txeni:~$ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 9658E8044A3AA3D6
Executing: /tmp/tmp.8D9a175eSr/gpg.1.sh --keyserver
keyserver.ubuntu.com
--recv-keys
9658E8044A3AA3D6
gpg: requesting key 4A3AA3D6 from hkp server keyserver.ubuntu.com
gpg: key 4A3AA3D6: public key "Vivaldi Package Composer KEY05 <[email protected]>" imported
gpg: Total number processed: 1
gpg:               imported: 1  (RSA: 1)
gpg: invalid key resource URL `/etc/apt/trusted.gpg.d/home:stevenpusser.gpg'
gpg: keyblock resource `(null)': general error
gpg: Total number processed: 36
gpg:       skipped new keys: 36

txeni

@Gwen-Dragon

@Gwen-Dragon said in Cannot make the repositories signature work:

Check it with:
sudo apt-key list vivaldi

That comes empty, it doesn't return anything...
They key is definitely not being installed.

thomasp

@txeni I would suggest you look at what's up with the /etc/apt/trusted.gpg.d/home:stevenpusser.gpg file. It looks like it is invalid and is blocking all apt-key operations from working (and I'm pretty sure it's unrelated to Vivaldi). Try moving the file somewhere else (eg. sudo mv /etc/apt/trusted.gpg.d/home:stevenpusser.gpg ~/) and then try running any of the apt-key commands again.

BoneTone

Yeah, you've definitely got an issue on your system with your keyring. I'd recommend seeking help in your distribution's forum/chat room; not that people here cannot help you, just there's a limited set of folks here using Linux, even fewer on your distribution. You'll just get more eyes on the issue with experience & knowledge of your system's config.

It may be a problem with your gpg config, an incorrect path to your keyring -- is the supposed to be a colon in it? That looks weird to me. But it's failing trying to access the keyring on your system, nothing directly related to Vivaldi. You can see the downloads complete successfully in the first command, in the second you have 36 keys that fail to import, because you can't find your keyring.

aravisian

@txeni said in Cannot make the repositories signature work:

/etc/apt/trusted.gpg.d/home:stevenpusser.gpg

I try that but I got the same error.
It says "gpg: invalid key resource URL `/etc/apt/trusted.gpg.d/home:stevenpusser.gpg'"

thomasp made the suggestion of moving the problem resource, or you can remove it. But that suggestion is seconded:

sudo rm -v '/etc/apt/trusted.gpg.d/home:stevenpusser.gpg'

Then add the key again then run your

sudo apt-get update

Also agreed with BoneTone. You need to check your keyring.
In an emergency, you can always force it through with an "allow unauthenticated" command, but that should be a last resort under controlled conditions.

txeni

Thank you so much everyone!!
Yes, you guys are right, I thought that gpg was related to vivaldi, but actually it's not, however it's somehow preventing vivaldi from adding it's signature.
I'll have a proper look at the links you sent me tomorrow.
Thanks again, great community here, very impressed!

BoneTone

@txeni gpg stands for GNU Privacy Guard, which is an open source implementation of cryptographic tools that are compliant with the OpebPGP standard. The standard takes its name from the groundbreaking cryptographic software Pretty Good Privacy (PGP), which was instrumental in the creation of the standard. By being compliant with the standard, the two programs can interoperate with each other, as well as any other OpenPGP-compliant software.

So gpg handles all the encryption, decryption & authentication tasks on your system, and is one of the fundamental packages included in most, probably all, Linux distributions. If your gpg install or config is messed up, then you can't authenticate any packages; in this case Vivaldi, but also whatever packages are related to those 35 other keys that you failed to import.

samuvuo

@Gwen-Dragon said in Cannot make the repositories signature work:

Or your Mint has a bug with apt.

They are running Ubuntu Mate 16.04, not Linux Mint. Not relevant in this case, but even if Mint is based on Ubuntu, the Mint team has decided to implement some things "their way". That said, the first link you posted is all about the cause of the problem (":" in the filename).

@txeni : The problem seems to be with the ":" in file name "/etc/apt/trusted.gpg.d/home:stevenpusser.gpg".

Instructions previously posted by @aravisian should work: move or remove the problem resource (home:stevenpusser.gpg), add the vivaldi key again and run apt-get update.

BoneTone

@samuvuo said in Cannot make the repositories signature work:

@txeni : The problem seems to be with the ":" in file name "/etc/apt/trusted.gpg.d/home:stevenpusser.gpg".

That's what I suspected. Does Linux/ext4 support colons in filenames/directories?

samuvuo

@BoneTone said in Cannot make the repositories signature work:

That's what I suspected. Does Linux/ext4 support colons in filenames/directories?

Yes, any character other than nul and / is allowed. I tend to avoid the nine characters not allowed in Windows " * / : < > ? \ | though, because you never know where a file may end up