Re: Invalid signature errors, CPAN, gpg

Thanks Rob,

Yes it does terminate the process, otherwise I wouldn't care. The error seems to occur in two places: before it compiles, I think, which is fatal, and later when it runs the tests, which I can turn off.

I used CPAN because it did all the interdependencies for me so I wouldn't have to manually install every module. It was good while it still worked. Oh well.

Ian

Sisyphus wrote:
"Ian" <ianmark@xxxxxxxxxxx> wrote in message
news:PqSdnZHSvJW5tHbZnZ2dnUVZ_qKdnZ2d@xxxxxxxxxxxxxxx
When I try to install some packages (most notably Bundle::CPAN) using
CPAN, I
get the following errors:

gpg: Signature made Mon Feb 27 01:57:02 2006 EST using DSA key ID A317C15D
gpg: requesting key A317C15D from x-hkp://pgp.mit.edu:11371 ...
gpg: no valid OpenPGP data found.
gpg: Can't check signature: public key not found
==> BAD/TAMPERED signature detected! <==


Does that terminate the process ?

What's wrong, how can I fix it, and can I run the install without checking
signatures? Thanks.

I don't know the answer as I never use CPAN.pm to install modules. I just
manually download the source, extract to some location, 'cd' to that
location and run (in succession) 'perl Makefile.PL', 'make test', and 'make
install'. That way, the problem of verifying gpg signatures is avoided.

Cheers,
Rob


.

Relevant Pages

  • Re: public key
    ... Okay, I've created my public key with gpg, how can I get mutt to use it ... but maybe I meet with Ron and exchange signatures and ... Ron meets you and exchange signatures. ...
    (Debian-User)
  • Re: How does signature check in CPAN work?
    ... I searched through all modules of the CPAN command line interface, ... but I couldn't find out how CPAN checks for the GPG signature. ... Does CPAN automatically download a public key and import it to my ...
    (comp.lang.perl.modules)
  • Re: Are CPAN and PAUSE trusted?
    ... get CPAN and PAUSE authenticated through a "trusted" root. ... gpg --gen-key ... as their normal user self which will have ultimate trust set ...
    (comp.lang.perl.modules)
  • Re: backports
    ... You have to tell gpg which key's signatures it should check. ... These keys are not included in debian-backports-keyring.gpg ... I suppose that you can check that Joerg Jaspert is a Debian developer by ...
    (Debian-User)
  • Re: Are CPAN and PAUSE trusted?
    ... get CPAN and PAUSE authenticated through a "trusted" root. ... gpg --gen-key ... as their normal user self which will have ultimate trust set ...
    (comp.lang.perl.modules)