Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #179514

Re: Anyone know what this means when running aptitude update?

From Sven Hartge <sven@svenhartge.de>
Newsgroups linux.debian.user
Subject Re: Anyone know what this means when running aptitude update?
Date 2017-03-28 10:10 +0200
Message-ID <tpUmu-4GO-19@gated-at.bofh.it> (permalink)
References (2 earlier) <tplyp-3Xa-7@gated-at.bofh.it> <tpEB4-1AA-11@gated-at.bofh.it> <tpFns-2iK-31@gated-at.bofh.it> <tpLMd-6Ms-11@gated-at.bofh.it> <tpSb0-332-11@gated-at.bofh.it>
Organization Newsfeed am Wurmloch

Show all headers | View raw


Frank <zuiderduin@gmx.com> wrote:
> Op 28-03-17 om 00:57 schreef Mark Fletcher:

>> Right, for the key issue, that has taken me right back to where I started:
>>
>> W: There is no public key available for the following key IDs:
>> 1397BC53640DB551

> Odd. If you do a web search with that number, you'll find a lot of posts 
> mentioning this issue and all of them point to the same fix: get 
> google's new key (file).

>> Possibly stupid question -- this is Jessie, does this mechanism of
>> dropping the files in trusted.gpg.d work properly in Jessie or is it
>> new?

> Good question. Sven said it worked. I can't confirm that. It may be 
> worth to try to import that key directly from a keyserver, like I 
> suggested in my first reply:

> sudo apt-key adv --keyserver keys.gnupg.net --recv-keys 1397BC53640DB551

Do NOT *EVER* do this. Importing a key from the keyservers just because
apt says it does not know the ID is wrong. 

You might get MitM'ed right now (in this case we know this is the ID of
Googles key, but my argument still holds in general) and installing the
attackers forged pubkey is exactly what he would want.

Only ever install keys from trusted sources into your apt's trusted
keyring.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Anyone know what this means when running aptitude update? Mark Fletcher <mark27q1@gmail.com> - 2017-03-26 18:10 +0200
  Re: Anyone know what this means when running aptitude update? Frank <zuiderduin@gmx.com> - 2017-03-26 18:50 +0200
    Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-26 21:00 +0200
      Re: Anyone know what this means when running aptitude update? Nicholas Geovanis <nickgeovanis@gmail.com> - 2017-03-26 21:00 +0200
        Re: Anyone know what this means when running aptitude update? Reco <recoverym4n@gmail.com> - 2017-03-26 21:10 +0200
        Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-26 21:20 +0200
          Re: Anyone know what this means when running aptitude update? Nicholas Geovanis <nickgeovanis@gmail.com> - 2017-03-26 21:50 +0200
            Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-26 22:10 +0200
      Re: Anyone know what this means when running aptitude update? Mark Fletcher <mark27q1@gmail.com> - 2017-03-27 01:30 +0200
        Re: Anyone know what this means when running aptitude update? Frank <zuiderduin@gmx.com> - 2017-03-27 07:50 +0200
        Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-27 11:10 +0200
      Re: Anyone know what this means when running aptitude update? Mark Fletcher <mark27q1@gmail.com> - 2017-03-27 17:20 +0200
        Re: Anyone know what this means when running aptitude update? Frank <zuiderduin@gmx.com> - 2017-03-27 18:10 +0200
          Re: Anyone know what this means when running aptitude update? Mark Fletcher <mark27q1@gmail.com> - 2017-03-28 01:00 +0200
            Re: Anyone know what this means when running aptitude update? Frank <zuiderduin@gmx.com> - 2017-03-28 07:50 +0200
              Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-28 10:10 +0200
                Re: Anyone know what this means when running aptitude update? Frank <zuiderduin@gmx.com> - 2017-03-28 12:10 +0200
              Re: Anyone know what this means when running aptitude update? Frank <zuiderduin@gmx.com> - 2017-03-28 13:30 +0200
                Re: Anyone know what this means when running aptitude update? Mark Fletcher <mark27q1@gmail.com> - 2017-03-28 14:40 +0200
            Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-28 10:00 +0200
              Re: Anyone know what this means when running aptitude update? Mark Fletcher <mark27q1@gmail.com> - 2017-03-28 14:30 +0200
                Re: Anyone know what this means when running aptitude update? Sven Hartge <sven@svenhartge.de> - 2017-03-28 16:20 +0200

csiph-web