Updater failed: Signature verification failure [Solved]

Hello,

Since yesterday, pkgupdate no longer works for me. There were several messages with this error in reForis:

Updater failed:

runtime: [string “requests”]:430: [string “utils”]:422: Unable to finish URI (https://repo.turris.cz/hbk/mox/lists/pkglists/datacollect.lua): Signature verification failure

I have already re-downloaded the .pub and .pub.sig files as described here. But that doesn’t help, the problem persists.

What is the problem here?

cat /etc/updater/keys/*.pub
untrusted comment: Turris release key gen 1
RWTcsg5TXGLdW9gNlGHN/ofdsM0KAfQIRBo5OVZIYlVTfyI6FGVEOK/e
untrusted comment: Turris release key gen 2
RWRHZLJSiGzimIZ5lUSxhVFBlOMt9caEej5vfZpIJtdnzQ1mRv3wSYcO

cat /etc/os-release
NAME=“TurrisOS”
VERSION=“5.2.4”
ID=“turrisos”
ID_LIKE=“lede openwrt”
PRETTY_NAME=“TurrisOS 5.2.4”
VERSION_ID=“5.2.4”
HOME_URL=“https://www.turris.cz/
BUG_URL=“Issues · Turris · GitLab
SUPPORT_URL=“https://www.turris.cz/support/
BUILD_ID=“ceb8821”
OPENWRT_BOARD=“mvebu/cortexa53”
OPENWRT_ARCH=“aarch64_cortex-a53”
OPENWRT_TAINTS=“busybox”
OPENWRT_DEVICE_MANUFACTURER=“CZ.NIC”
OPENWRT_DEVICE_MANUFACTURER_URL=“https://www.turris.cz/
OPENWRT_DEVICE_PRODUCT=“Turris Mox”
OPENWRT_DEVICE_REVISION=“v0”
OPENWRT_RELEASE=“TurrisOS 5.2.4 ceb8821a3d3356733aafa9cc9430d1b1ab8ace07”

pkgupdate -e DBG
DEBUG:src/lib/events.c:554 (run_util_init):Dumping busybox to: /tmp/updater-busybox-INEIfH/busybox
DEBUG:src/lib/locks.c:45 (lua_acquire):Trying to get a lock at /var/lock/opkg.lock
DEBUG:backend.lua:361 (status_parse):Parsing status file /usr/lib/opkg/status
DEBUG:requests.lua:432 (Globals):Running script file:////etc/updater/conf.d/turris-pkglists.lua
DEBUG:src/lib/download.c:78 (download_check_info):Download succesfull (https://repo.turris.cz/hbk/mox/lists/pkglists/datacollect.lua)
DEBUG:src/lib/download.c:78 (download_check_info):Download succesfull (https://repo.turris.cz/hbk/mox/lists/pkglists/datacollect.lua.sig)
DEBUG:src/lib/uri.c:608 (list_pubkey_collect):Unable to get pubkey file:///etc/updater/keys/test.pub: Unable to open local file for reading
DEBUG:src/lib/uri.c:447 (verify_signature):URI (https://repo.turris.cz/hbk/mox/lists/pkglists/datacollect.lua) verify failed; No public key with matching signature was provided
line not found
line not found
line not found
ERROR:src/pkgupdate/main.c:154 (main):
runtime: [string “requests”]:430: [string “utils”]:422: Unable to finish URI (https://repo.turris.cz/hbk/mox/lists/pkglists/datacollect.lua): Signature verification failure
DEBUG:src/lib/locks.c:82 (lua_lock_release):Released lock at /var/lock/opkg.lock
DEBUG:src/lib/events.c:572 (run_util_clean):Removing temporally busybox from: /tmp/updater-busybox-INEIfH/busybox

Found the problem.

I restored a backup of an installation that previously ran with the HBK branch.
In /etc/config/upater option branch was still hbk. After Changing it to hbs updater works now.

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.