[Voyage-linux] WARNING: The following packages cannot be authenticated!

[Nils Toedtmann]

SOLVED:

The warning disappears when i remove the file
/etc/apt/apt.conf.d/00secure which sets 'APT::Get::AllowUnauthenticated
"true";'

/nils


PS: It looks like there is a number of issues here:

[1] The warning seems very badly worded. Instead of saying "The
following packages cannot be authenticated", it should say "Not trying
to authenticate the following packages".

[2] The apt option should be renamed from "AllowUnauthenticated" to
"DontAuthenticate" or "DontCheckSignature".

[3] Why is Voyage Linux setting this dangerous option in the first
place? I'll ask this question in another thread.




On 22.06.2014 14:22, Nils Toedtmann wrote:
> Hi *
> 
> 
> Whenever i do 'apt-get [upgrade/install]', i get this signature warning:
> 
>    WARNING: The following packages cannot be authenticated!
> 
> for *any* package, also for original Debian packages [1]. The Debian gpg
> keys seem to be ok though [2].
> 
> I have multiple 0.8.x and 0.9.x systems on ALIX, and they all exhibit
> this behaviour. Importing Voyage's key [3] or disabling Voyage's
> 'experimental' repository don't help.
> 
> Strangely when i install a package via 'dpkg -i' (instead of 'apt-get
> install') then i do *not* get the signature warning [4]
> 
> Maybe something in the environment or apt configuration makes apt not
> find the key ring?
> 
> Any help appreciated.
> 
> /nils.
> 
> 
> 
> ====
> [1] $ sudo apt-get install --reinstall iptraf
> 
> Reading package lists... Done
> Building dependency tree
> Reading state information... Done
> 0 upgraded, 0 newly installed, 1 reinstalled, 0 to remove and 0 not
> upgraded.
> Need to get 170 kB of archives.
> After this operation, 0 B of additional disk space will be used.
> WARNING: The following packages cannot be authenticated!
>   iptraf
> Authentication warning overridden.
> Get:1 http://ftp.uk.debian.org/debian/ wheezy/main iptraf i386 3.0.0-8.1
> [170 kB]
> Fetched 170 kB in 0s (800 kB/s)
> (Reading database ... 24969 files and directories currently installed.)
> Preparing to replace iptraf 3.0.0-8.1 (using
> .../iptraf_3.0.0-8.1_i386.deb) ...
> Unpacking replacement iptraf ...
> Processing triggers for man-db ...
> Setting up iptraf (3.0.0-8.1) ...
> 
> 
> ====
> [2] $ sudo apt-key update
> 
> gpg: key B98321F9: "Squeeze Stable Release Key
> <debian-release at lists.debian.org>" not changed
> gpg: key 473041FA: "Debian Archive Automatic Signing Key (6.0/squeeze)
> <ftpmaster at debian.org>" not changed
> gpg: key 65FFB764: "Wheezy Stable Release Key
> <debian-release at lists.debian.org>" not changed
> gpg: key 46925553: "Debian Archive Automatic Signing Key (7.0/wheezy)
> <ftpmaster at debian.org>" not changed
> gpg: Total number processed: 4
> gpg:              unchanged: 4
> 
> 
> ====
> [3] http://www.voyage.hk/dists/experimental/archive.key
> 
> 
> ====
> [4] $ dpkg -i /var/cache/apt/archives/iptraf_3.0.0-8.1_i386.deb
> 
> (Reading database ... 24969 files and directories currently installed.)
> Preparing to replace iptraf 3.0.0-8.1 (using
> .../iptraf_3.0.0-8.1_i386.deb) ...
> Unpacking replacement iptraf ...
> Setting up iptraf (3.0.0-8.1) ...
> Processing triggers for man-db ...
>