Re: Invalid signature errors, CPAN, gpg


"Ian" <ianmark@xxxxxxxxxxx> wrote in message
news:PqSdnZHSvJW5tHbZnZ2dnUVZ_qKdnZ2d@xxxxxxxxxxxxxxx
When I try to install some packages (most notably Bundle::CPAN) using
CPAN, I
get the following errors:

gpg: Signature made Mon Feb 27 01:57:02 2006 EST using DSA key ID A317C15D
gpg: requesting key A317C15D from x-hkp://pgp.mit.edu:11371 ...
gpg: no valid OpenPGP data found.
gpg: Can't check signature: public key not found
==> BAD/TAMPERED signature detected! <==


Does that terminate the process ?

What's wrong, how can I fix it, and can I run the install without checking
signatures? Thanks.

I don't know the answer as I never use CPAN.pm to install modules. I just
manually download the source, extract to some location, 'cd' to that
location and run (in succession) 'perl Makefile.PL', 'make test', and 'make
install'. That way, the problem of verifying gpg signatures is avoided.

Cheers,
Rob


.

Relevant Pages

  • Re: public key
    ... Okay, I've created my public key with gpg, how can I get mutt to use it ... but maybe I meet with Ron and exchange signatures and ... Ron meets you and exchange signatures. ...
    (Debian-User)
  • Re: backports
    ... You have to tell gpg which key's signatures it should check. ... These keys are not included in debian-backports-keyring.gpg ... I suppose that you can check that Joerg Jaspert is a Debian developer by ...
    (Debian-User)
  • Re: Invalid signature errors, CPAN, gpg
    ... I used CPAN because it did all the interdependencies for me so I wouldn't have to manually install every module. ... gpg: ... the problem of verifying gpg signatures is avoided. ...
    (comp.lang.perl.modules)
  • Re: trust update servers?
    ... gpg: 3 marginalneeded, 1 completeneeded, PGP trust model ... You also need to check the signatures[0], ... Either that or you import the key from trusted media. ... replacement key just in time for the release of 11.0. ...
    (alt.os.linux.suse)
  • Re: [SLE] apt-get error
    ... Look in de suse-linux-e list and look for APT/Synaptic and GPG ... >I want to install kmldonkey via apt-get to ftp.gwdg.de, but I get an error as ... >Need to get 3579kB of archives. ... >Checking GPG signatures... ...
    (SuSE)