search

aptly-dev / aptly

aptly - Debian repository management tool
https://www.aptly.info/
MIT License
2.56k stars 374 forks source link

No valid OpenPGP data found #899

Open markgraf opened 4 years ago

markgraf commented 4 years ago

I’m currently trying to set up a local mirror of the graylog-repositories with aptly. This fails, because no valid OpenPGP data is found (see below)

Comparing the graylog-repos with other repos I have mirrors for I see that the other --working-- repos have an “InRelease” File, that contains both, the Release Info and the signature. https://packages.graylog2.org/debian/dists/stable does not have such a file at the time of writing.

Now I don’t know wether to blame graylog or aptly.

Have you experienced similar issues and can you point me to a possible solution or workaround?

Thanks in advance!

Detailed Description

$ export LC_ALL=C
$ wget -q -O - http://packages.graylog2.org/repo/debian/pubkey.gpg  | gpg --no-default-keyring --keyring trustedkeys.gpg --import
gpg: key D44C1D8DB1606F22: "TORCH GmbH " not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
$ aptly mirror create -architectures="amd64" graylog https://packages.graylog2.org/debian/ stable 2.5 3.0 3.1
Downloading https://packages.graylog2.org/debian/dists/stable/InRelease...
gpgv: no valid OpenPGP data found.
gpgv: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
Downloading https://packages.graylog2.org/debian/dists/stable/Release...
Downloading https://packages.graylog2.org/debian/dists/stable/Release.gpg...
gpgv: no valid OpenPGP data found.
gpgv: the signature could not be verified.
Please remember that the signature file (.sig or .asc)
should be the first file given on the command line.
ERROR: unable to fetch mirror: verification of detached signature failed: exit status 2

Your Environment

Item Version
OS Debian Stretch
Aptly 1.4.0
gnupg1 1.4.21-4+deb9u1 amd64
gpgv1 1.4.21-4+deb9 amd64
mira-minarik commented 2 years ago

I was just working on something similar with another repository. An incorrectly entered URI (misspelling in the path) returns an HTML page (as for a web GUI) instead of a repository metadata, which causes that strange error. It currently works for graylog (see into graylog-4.2-repository_latest.deb from installation guide) aptly mirror create graylog https://packages.graylog2.org/repo/debian stable