The repository 'http://files.freeswitch.org/repo/deb/freeswitch-1.6 stretch InRelease' is not signed.

[FunkStar]

Hi all

Going to update the server from 4.4.6 to master branch but before that I want to make sure the server is update to date.
When running sudo apt-get update I get the following:

root@XXXXXXXX:/etc/apt/sources.list.d# apt-get update
Hit:1 http://security.debian.org stretch/updates InRelease
Ign:2 http://mirrors.digitalocean.com/debian stretch InRelease
Hit:3 http://packages.irontec.com/debian stretch InRelease
Hit:4 http://mirrors.digitalocean.com/debian stretch-updates InRelease
Hit:5 http://mirrors.digitalocean.com/debian stretch Release
Hit:6 https://packages.sury.org/php stretch InRelease
Hit:7 https://repos.insights.digitalocean.com/apt/do-agent main InRelease
Hit:8 http://apt.postgresql.org/pub/repos/apt stretch-pgdg InRelease
Get:9 http://files.freeswitch.org/repo/deb/freeswitch-1.6 stretch InRelease [4,595 B]
Ign:9 http://files.freeswitch.org/repo/deb/freeswitch-1.6 stretch InRelease
Fetched 4,595 B in 0s (5,852 B/s)
Reading package lists... Done
W: GPG error: http://files.freeswitch.org/repo/deb/freeswitch-1.6 stretch InRelease: The following signatures were invalid: 20B06EE621AB150D40F6079FD76EDC7725E010CF
W: The repository 'http://files.freeswitch.org/repo/deb/freeswitch-1.6 stretch InRelease' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

I tried looking at this link on freeswitch.org but I can't find the correct commandline to sign this package.

I also needed to resign the php package with sudo wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg and that worked fine.

Thanks for the help.

edit:

This is the output from /etc/apt/sources.list.d/freeswitch.list

deb http://files.freeswitch.org/repo/deb/freeswitch-1.6/ stretch main

 

[ricktendo]

Try this

apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 20B06EE621AB150D40F6079FD76EDC7725E010CF

 

[FunkStar]

It's a Debian server so I doubt it would work but I'll look into the code and maybe adjust it for Debian.

 

[ricktendo]

Tested on Raspberry Pi 32bit OS, its Debian Buster. It does not matter what key-sever you are getting the key from

 

[FunkStar]

Tested on Raspberry Pi 32bit OS, its Debian Buster. It does not matter what key-sever you are getting the key from

Try this

apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 20B06EE621AB150D40F6079FD76EDC7725E010CF

Hey Ricktendo

Sadly didn't work, this is the output.

Executing: /tmp/apt-key-gpghome.h7gsmLoFkd/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys 20B06EE621AB150D40F6079FD76EDC7725E010CF
gpg: key D76EDC7725E010CF: "FreeSWITCH Package Signing Key <packages@freeswitch.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1

 

[ricktendo]

That means the key was already present, try running apt update again, if error persists try reinstalling ca-certificates

apt install --reinstall ca-certificates

Also what does it your server say when you run this command:

date

 

[FunkStar]

root@XXX:~# apt install --reinstall ca-certificates
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be upgraded:
  ca-certificates
1 upgraded, 0 newly installed, 0 to remove and 129 not upgraded.
Need to get 168 kB of archives.
After this operation, 21.5 kB of additional disk space will be used.
Get:1 http://security.debian.org stretch/updates/main amd64 ca-certificates all 20200601~deb9u2 [168 kB]
Fetched 168 kB in 0s (0 B/s)
Reading changelogs... Done
Preconfiguring packages ...
(Reading database ... 64849 files and directories currently installed.)
Preparing to unpack .../ca-certificates_20200601~deb9u2_all.deb ...
Unpacking ca-certificates (20200601~deb9u2) over (20200601~deb9u1) ...
Processing triggers for man-db (2.7.6.1-2) ...
Setting up ca-certificates (20200601~deb9u2) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Processing triggers for ca-certificates (20200601~deb9u2) ...
Updating certificates in /etc/ssl/certs...
0 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
root@XXX:~# date
Sat Jul  3 19:52:44 CEST 2021

still same error