DECENTfoundation / DECENT-Network

Blockchain You Can Easily Build On
https://decent.ch/dcore
Other
110 stars 39 forks source link

expired signature for ubuntu sources #422

Open jagottsicher opened 3 years ago

jagottsicher commented 3 years ago

Failed to fetch https://dl.bintray.com/decentfoundation/ubuntu/dists/bionic/Release.gpg The following signatures were invalid: EXPKEYSIG 6516A95BFA829021 DECENT Group dcore@decent.ch

lukaskiss222 commented 3 years ago

You should omit these commands:

curl https://bintray.com/user/downloadSubjectPublicKey?username=decentfoundation | sudo apt-key add - sudo add-apt-repository "deb [arch=amd64] https://dl.bintray.com/decentfoundation/$(lsb_release -is | tr "[:upper:]" "[:lower:]") $(lsb_release -cs) libpbc"

and run the third without libpbc-dev. sudo apt-get install build-essential make cmake g++ doxygen git libreadline-dev libcrypto++-dev libgmp-dev libssl-dev libcurl4-openssl-dev libboost-all-dev zlib1g-dev

Then install sudo apt-get install bison flex m4

Lastly install PBC unsing this link https://www.programmersought.com/article/70963054062/

after this you should be able to install dcore following from

mkdir ~/dev

jagottsicher commented 3 years ago

You should omit these commands:

curl https://bintray.com/user/downloadSubjectPublicKey?username=decentfoundation | sudo apt-key add -

sudo add-apt-repository "deb [arch=amd64] https://dl.bintray.com/decentfoundation/$(lsb_release -is | tr "[:upper:]" "[:lower:]") $(lsb_release -cs) libpbc"

and run the third without libpbc-dev.

sudo apt-get install build-essential make cmake g++ doxygen git libreadline-dev libcrypto++-dev libgmp-dev libssl-dev libcurl4-openssl-dev libboost-all-dev zlib1g-dev

Then install

  sudo apt-get install bison flex m4

Lastly install PBC unsing this link https://www.programmersought.com/article/70963054062/

after this you should be able to install dcore following from

mkdir ~/dev

Thanks for that detailed approach!

Basically, get a new pubkey, add new repo, build without libpbc-dev, install latest libpc.

Isn't that some reason insecure practice?