Advertisement
codegazer

2023_06_20 google-chrome-stable install on Mageia - "package has bad signature"

Jun 20th, 2023
41
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.50 KB | None | 0 0
  1.  
  2. Date: Tue 20 Jun 12:34:50 BST 2023
  3. Subject: testing install of google-chrome-stable on Mageia 8
  4. Summary: When installing "normally" using urpmi a message: "package has bad signature" is displayed.
  5. However, if the google-chrome-stable RPM is downloaded to local disk, verified manually then it installed without error from local copy.
  6.  
  7.  
  8.  
  9. Step-a: Check for any cached RPMs
  10.  
  11. user@localhost ~]$ ls -l /var/cache/urpmi/rpms/
  12. total 0
  13.  
  14. # URPMI rpms cache directory is empty: nothing cached
  15.  
  16.  
  17. # Follow install steps in: https://wiki.mageia.org/en/Installing_Google_Chrome_in_Mageia
  18.  
  19. Step-b: Add Google's URPMI source for google-chrome-stable
  20.  
  21. [user@localhost ~]$ /bin/sudo urpmi.addmedia --update google-chrome http://dl.google.com/linux/chrome/rpm/stable/x86_64/
  22. [sudo] password for mpb:
  23. adding medium "google-chrome"
  24. http://dl.google.com/linux/chrome/rpm/stable/x86_64/media_info/synthesis.hdlist.cz
  25.  
  26. [user@localhost ~]$ urpmq --list-media | grep google-chrome # verify google-chrome URPMI source added
  27. google-chrome
  28.  
  29.  
  30. Step-c: Add Google's Linux Package Signing key
  31.  
  32. [user@localhost ~]$ /bin/sudo rpm -import https://dl-ssl.google.com/linux/linux_signing_key.pub
  33.  
  34.  
  35. Step-d: Verify Google's Linux Package Signing key
  36.  
  37.  
  38. [user@localhost ~]$ rpm -qi gpg-pubkey-7fac5991-*
  39. Name : gpg-pubkey
  40. Version : 7fac5991
  41. Release : 4615767f
  42. Architecture: (none)
  43. Install Date: Tue 20 Sep 2022 18:27:42 BST
  44. Group : Public Keys
  45. Size : 0
  46. License : pubkey
  47. Signature : (none)
  48. Source RPM : (none)
  49. Build Date : Thu 05 Apr 2007 23:21:51 BST
  50. Build Host : localhost
  51. Packager : Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com>
  52. Summary : Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com> public key
  53. Description :
  54. -----BEGIN PGP PUBLIC KEY BLOCK-----
  55. Version: rpm-4.16.1.3 (NSS-3)
  56.  
  57. mQGiBEXwb0YRBADQva2NLpYXxgjNkbuP0LnPoEXruGmvi3XMIxjEUFuGNCP4Rj/a
  58. kv2E5VixBP1vcQFDRJ+p1puh8NU0XERlhpyZrVMzzS/RdWdyXf7E5S8oqNXsoD1z
  59. fvmI+i9b2EhHAA19Kgw7ifV8vMa4tkwslEmcTiwiw8lyUl28Wh4Et8SxzwCggDcA
  60. feGqtn3PP5YAdD0km4S4XeMEAJjlrqPoPv2Gf//tfznY2UyS9PUqFCPLHgFLe80u
  61. QhI2U5jt6jUKN4fHauvR6z3seSAsh1YyzyZCKxJFEKXCCqnrFSoh4WSJsbFNc4PN
  62. b0V0SqiTCkWADZyLT5wll8sWuQ5ylTf3z1ENoHf+G3um3/wk/+xmEHvj9HCTBEXP
  63. 78X0A/0Tqlhc2RBnEf+AqxWvM8sk8LzJI/XGjwBvKfXe+l3rnSR2kEAvGzj5Sg0X
  64. 4XmfTg4Jl8BNjWyvm2Wmjfet41LPmYJKsux3g0b8yzQxeOA4pQKKAU3Z4+rgzGmf
  65. HdwCG5MNT2A5XxD/eDd+L4fRx0HbFkIQoAi1J3YWQSiTk15fw7RMR29vZ2xlLCBJ
  66. bmMuIExpbnV4IFBhY2thZ2UgU2lnbmluZyBLZXkgPGxpbnV4LXBhY2thZ2VzLWtl
  67. eW1hc3RlckBnb29nbGUuY29tPohjBBMRAgAjAhsDBgsJCAcDAgQVAggDBBYCAwEC
  68. HgECF4AFAkYVdn8CGQEACgkQoECDD3+sWZHKSgCfdq3HtNYJLv+XZleb6HN4zOcF
  69. AJEAniSFbuv8V5FSHxeRimHx25671az+uQINBEXwb0sQCACuA8HT2nr+FM5y/kzI
  70. A51ZcC46KFtIDgjQJ31Q3OrkYP8LbxOpKMRIzvOZrsjOlFmDVqitiVc7qj3lYp6U
  71. rgNVaFv6Qu4bo2/ctjNHDDBdv6nufmusJUWq/9TwieepM/cwnXd+HMxu1XBKRVk9
  72. XyAZ9SvfcW4EtxVgysI+XlptKFa5JCqFM3qJllVohMmr7lMwO8+sxTWTXqxsptJo
  73. pZeKz+UBEEqPyw7CUIVYGC9ENEtIMFvAvPqnhj1GS96REMpry+5s9WKuLEaclWpd
  74. K3krttbDlY1NaeQUCRvBYZ8iAG9YSLHUHMTuI2oea07Rh4dtIAqPwAX8xn36JAYG
  75. 2vgLAAMFB/wKqaycjWAZwIe98Yt0qHsdkpmIbarD9fGiA6kfkK/UxjL/k7tmS4Vm
  76. CljrrDZkPSQ/19mpdRcGXtb0NI9+nyM5trweTvtPw+HPkDiJlTaiCcx+izg79Fj9
  77. KcofuNb3lPdXZb9tzf5oDnmm/B+4vkeTuEZJ//IFty8cmvCpzvY+DAz1Vo9rA+Zn
  78. cpWY1n6z6oSS9AsyT/IFlWWBZZ17SpMHu+h4Bxy62+AbPHKGSujEGQhWq8ZRoJAT
  79. G0KSObnmZ7FwFWu1e9XFoUCt0bSjiJWTIyaObMrWu/LvJ3e9I87HseSJStfw6fki
  80. 5og9qFEkMrIrBCp3QGuQWBq/rTdMuwNFiEkEGBECAAkFAkXwb0sCGwwACgkQoECD
  81. D3+sWZF/WACfeNAu1/1hwZtUo1bR+MWiCjpvHtwAnA1R3IHqFLQ2X3xJ40XPuAyY
  82. /FJG
  83. =Quqp
  84. -----END PGP PUBLIC KEY BLOCK-----
  85.  
  86.  
  87. Step-e: Add Google's Linux Package Signing Key into URPMI configuration using Mageia Control Centre
  88.  
  89. reference: https://wiki.mageia.org/en/Installing_Google_Chrome_in_Mageia#Add_Google_key_to_Mageia_install_configuration
  90.  
  91.  
  92. # Completed using MCC GUI, key confirmed as added: "7fac5991()"
  93.  
  94.  
  95. # Step-f: Install google-chrome-stable (urpmi method)
  96.  
  97. [mpb@zbook15-G4 ~]$ /bin/sudo urpmi google-chrome-stable
  98.  
  99.  
  100. http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm
  101. The following package has bad signature:
  102. /var/cache/urpmi/rpms/google-chrome-stable-114.0.5735.133-1.x86_64.rpm: Invalid Key ID (OK (RSA/SHA512, Tue 13 Jun 2023 01:42:59 BST, Key ID 4eb27db2a3b88b8b))
  103. Do you want to continue installation ? (y/N)
  104.  
  105.  
  106. # abandoned install because of "package has bad signature" error
  107.  
  108.  
  109. #----------------------------------------------------------------------------------------------
  110.  
  111. # Alternative install: download, verify, and install from local copy of RPM
  112.  
  113.  
  114. # alt-step-a: use local directory for downloading from Google
  115.  
  116. [user@localhost ~]$ cd ~Downloads/google-chrome/
  117.  
  118.  
  119. # alt-step-b: download Google's Linux signing key
  120.  
  121. [user@localhost google_chrome]$ wget https://dl-ssl.google.com/linux/linux_signing_key.pub
  122. --2023-06-20 16:56:50-- https://dl-ssl.google.com/linux/linux_signing_key.pub
  123. Resolving dl-ssl.google.com (dl-ssl.google.com)... 173.194.76.93, 173.194.76.136, 173.194.76.91, ...
  124. Connecting to dl-ssl.google.com (dl-ssl.google.com)|173.194.76.93|:443... connected.
  125. HTTP request sent, awaiting response... 200 OK
  126. Length: 14605 (14K) [application/octet-stream]
  127. Saving to: ‘linux_signing_key.pub’
  128.  
  129. linux_signing_key.pub 100%[==============================>] 14.26K --.-KB/s in 0.003s
  130.  
  131. 2023-06-20 16:56:50 (4.03 MB/s) - ‘linux_signing_key.pub’ saved [14605/14605]
  132.  
  133.  
  134. # alt-step-c: import Google's Linux signing key
  135.  
  136. [user@localhost google_chrome]$ /bin/sudo rpm --import linux_signing_key.pub
  137. [sudo] password for user:
  138.  
  139.  
  140. # alt-step-d: verify Google's Linux signing key
  141.  
  142. [user@localhost google_chrome]$ rpm -qi gpg-pubkey-7fac5991-*
  143. Name : gpg-pubkey
  144. Version : 7fac5991
  145. Release : 4615767f
  146. Architecture: (none)
  147. Install Date: Fri 09 Jul 2021 20:10:47 BST
  148. Group : Public Keys
  149. Size : 0
  150. License : pubkey
  151. Signature : (none)
  152. Source RPM : (none)
  153. Build Date : Thu 05 Apr 2007 23:21:51 BST
  154. Build Host : localhost
  155. Packager : Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com>
  156. Summary : Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com> public key
  157. Description :
  158. -----BEGIN PGP PUBLIC KEY BLOCK-----
  159. Version: rpm-4.16.1.3 (NSS-3)
  160.  
  161. mQGiBEXwb0YRBADQva2NLpYXxgjNkbuP0LnPoEXruGmvi3XMIxjEUFuGNCP4Rj/a
  162. kv2E5VixBP1vcQFDRJ+p1puh8NU0XERlhpyZrVMzzS/RdWdyXf7E5S8oqNXsoD1z
  163. fvmI+i9b2EhHAA19Kgw7ifV8vMa4tkwslEmcTiwiw8lyUl28Wh4Et8SxzwCggDcA
  164. feGqtn3PP5YAdD0km4S4XeMEAJjlrqPoPv2Gf//tfznY2UyS9PUqFCPLHgFLe80u
  165. QhI2U5jt6jUKN4fHauvR6z3seSAsh1YyzyZCKxJFEKXCCqnrFSoh4WSJsbFNc4PN
  166. b0V0SqiTCkWADZyLT5wll8sWuQ5ylTf3z1ENoHf+G3um3/wk/+xmEHvj9HCTBEXP
  167. 78X0A/0Tqlhc2RBnEf+AqxWvM8sk8LzJI/XGjwBvKfXe+l3rnSR2kEAvGzj5Sg0X
  168. 4XmfTg4Jl8BNjWyvm2Wmjfet41LPmYJKsux3g0b8yzQxeOA4pQKKAU3Z4+rgzGmf
  169. HdwCG5MNT2A5XxD/eDd+L4fRx0HbFkIQoAi1J3YWQSiTk15fw7RMR29vZ2xlLCBJ
  170. bmMuIExpbnV4IFBhY2thZ2UgU2lnbmluZyBLZXkgPGxpbnV4LXBhY2thZ2VzLWtl
  171. eW1hc3RlckBnb29nbGUuY29tPohjBBMRAgAjAhsDBgsJCAcDAgQVAggDBBYCAwEC
  172. HgECF4AFAkYVdn8CGQEACgkQoECDD3+sWZHKSgCfdq3HtNYJLv+XZleb6HN4zOcF
  173. AJEAniSFbuv8V5FSHxeRimHx25671az+uQINBEXwb0sQCACuA8HT2nr+FM5y/kzI
  174. A51ZcC46KFtIDgjQJ31Q3OrkYP8LbxOpKMRIzvOZrsjOlFmDVqitiVc7qj3lYp6U
  175. rgNVaFv6Qu4bo2/ctjNHDDBdv6nufmusJUWq/9TwieepM/cwnXd+HMxu1XBKRVk9
  176. XyAZ9SvfcW4EtxVgysI+XlptKFa5JCqFM3qJllVohMmr7lMwO8+sxTWTXqxsptJo
  177. pZeKz+UBEEqPyw7CUIVYGC9ENEtIMFvAvPqnhj1GS96REMpry+5s9WKuLEaclWpd
  178. K3krttbDlY1NaeQUCRvBYZ8iAG9YSLHUHMTuI2oea07Rh4dtIAqPwAX8xn36JAYG
  179. 2vgLAAMFB/wKqaycjWAZwIe98Yt0qHsdkpmIbarD9fGiA6kfkK/UxjL/k7tmS4Vm
  180. CljrrDZkPSQ/19mpdRcGXtb0NI9+nyM5trweTvtPw+HPkDiJlTaiCcx+izg79Fj9
  181. KcofuNb3lPdXZb9tzf5oDnmm/B+4vkeTuEZJ//IFty8cmvCpzvY+DAz1Vo9rA+Zn
  182. cpWY1n6z6oSS9AsyT/IFlWWBZZ17SpMHu+h4Bxy62+AbPHKGSujEGQhWq8ZRoJAT
  183. G0KSObnmZ7FwFWu1e9XFoUCt0bSjiJWTIyaObMrWu/LvJ3e9I87HseSJStfw6fki
  184. 5og9qFEkMrIrBCp3QGuQWBq/rTdMuwNFiEkEGBECAAkFAkXwb0sCGwwACgkQoECD
  185. D3+sWZF/WACfeNAu1/1hwZtUo1bR+MWiCjpvHtwAnA1R3IHqFLQ2X3xJ40XPuAyY
  186. /FJG
  187. =Quqp
  188. -----END PGP PUBLIC KEY BLOCK-----
  189.  
  190.  
  191. # alt-step-e: download current google-chrome-stable image - version 114.0.5735.133-1
  192.  
  193. [user@localhost google_chrome]$ wget http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm
  194. --2023-06-20 17:01:30-- http://dl.google.com/linux/chrome/rpm/stable/x86_64/google-chrome-stable-114.0.5735.133-1.x86_64.rpm
  195. Resolving dl.google.com (dl.google.com)... 142.250.200.14, 2a00:1450:4009:822::200e
  196. Connecting to dl.google.com (dl.google.com)|142.250.200.14|:80... connected.
  197. HTTP request sent, awaiting response... 200 OK
  198. Length: 99334072 (95M) [application/x-rpm]
  199. Saving to: ‘google-chrome-stable-114.0.5735.133-1.x86_64.rpm’
  200.  
  201. google-chrome-stable-114.0.5735.133-1.x86_64.rp 100%[=============================>] 94.73M 8.43MB/s in 11s
  202.  
  203. 2023-06-20 17:01:41 (8.57 MB/s) - ‘google-chrome-stable-114.0.5735.133-1.x86_64.rpm’ saved [99334072/99334072]
  204.  
  205.  
  206.  
  207. # alt-step-f: verify signature on current google-stable image - version 114.0.5735.133-1
  208.  
  209. [user@localhost google_chrome]$ rpm --checksig -v google-chrome-stable-114.0.5735.133-1.x86_64.rpm
  210. google-chrome-stable-114.0.5735.133-1.x86_64.rpm:
  211. Header V4 RSA/SHA512 Signature, key ID a3b88b8b: OK
  212. Header SHA256 digest: OK
  213. Header SHA1 digest: OK
  214. Payload SHA256 digest: OK
  215. V4 RSA/SHA512 Signature, key ID a3b88b8b: OK
  216. MD5 digest: OK
  217.  
  218.  
  219. # alt-step-g: install current latest google-chrome-stable ("normal" install)
  220.  
  221. [mpb@localhost google_chrome]$ /bin/sudo urpmi google-chrome-stable
  222. [sudo] password for mpb:
  223.  
  224.  
  225. The following package has bad signature:
  226. /var/cache/urpmi/rpms/google-chrome-stable-114.0.5735.133-1.x86_64.rpm: Invalid Key ID (OK (RSA/SHA512, Tue 13 Jun 2023 01:42:59 BST, Key ID 4eb27db2a3b88b8b))
  227. Do you want to continue installation ? (y/N) N
  228.  
  229.  
  230. # Abandoned ^ because of "package has bad signature" error
  231.  
  232.  
  233. # alt-step-h:: install google-chrome-stable from downloaded and verified copy of RPM
  234.  
  235. [user@localhost google_chrome]$ /bin/sudo urpmi ./google-chrome-stable-114.0.5735.133-1.x86_64.rpm # downloaded and verified local copy
  236.  
  237.  
  238. installing google-chrome-stable-114.0.5735.133-1.x86_64.rpm from .
  239. Preparing... ###########################################################
  240. 1/1: google-chrome-stable ###########################################################
  241.  
  242.  
  243. # verify installed version of google-chrome-stable
  244. [user@localhost google_chrome]$ rpm -q google-chrome-stable
  245. google-chrome-stable-114.0.5735.133-1
  246.  
  247.  
  248. # ^ No error when installed using downloaded (and signature verified) RPM on local disk
  249.  
  250.  
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement