Mailing List Archive

channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel failed
I've downloaded and imported the gpg key per instructions here
https://mcgrail.com/template/kam.cf_channel

The command I run for updates is:

/usr/bin/sa-update -v --channelfile /etc/mail/spamassassin/sare-sa-
update-channels.txt --gpgkey 6C6191E3 --gpgkey 24C063D8 &&
/etc/init.d/spamassassin restart

What I'm getting for output of the cronjob is:

Update available for channel kam.sa-channels.mcgrail.com: -1 ->
1607355384
http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz, success
http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.sha512,
success
http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.asc,
success
error: GPG validation failed!
The update downloaded successfully, but the GPG signature verification
failed.
channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel
failed
Update failed, exiting with code 4

This is Ubuntu 20.04.1 LTS Spamassassin
spamassassin -V
SpamAssassin version 3.4.4
running on Perl version 5.30.0

--
Chris
31.11972; -97.90167 (Elev. 1092 ft)
20:00:37 up 11:04, 1 user, load average: 1.50, 1.16, 1.02
Description: Ubuntu 20.04.1 LTS, kernel 5.4.0-58-generic
Re: channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel failed [ In reply to ]
You appear to have two channel keys updating on the same sa update which
I'm not sure can be done.

On Sat, Dec 12, 2020, 21:07 Chris <chris.pollock1948@gmail.com> wrote:

> I've downloaded and imported the gpg key per instructions here
> https://mcgrail.com/template/kam.cf_channel
>
> The command I run for updates is:
>
> /usr/bin/sa-update -v --channelfile /etc/mail/spamassassin/sare-sa-
> update-channels.txt --gpgkey 6C6191E3 --gpgkey 24C063D8 &&
> /etc/init.d/spamassassin restart
>
> What I'm getting for output of the cronjob is:
>
> Update available for channel kam.sa-channels.mcgrail.com: -1 ->
> 1607355384
> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz, success
> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.sha512,
> success
> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.asc,
> success
> error: GPG validation failed!
> The update downloaded successfully, but the GPG signature verification
> failed.
> channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel
> failed
> Update failed, exiting with code 4
>
> This is Ubuntu 20.04.1 LTS Spamassassin
> spamassassin -V
> SpamAssassin version 3.4.4
> running on Perl version 5.30.0
>
> --
> Chris
> 31.11972; -97.90167 (Elev. 1092 ft)
> 20:00:37 up 11:04, 1 user, load average: 1.50, 1.16, 1.02
> Description: Ubuntu 20.04.1 LTS, kernel 5.4.0-58-generic
>
>
Re: channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel failed [ In reply to ]
I am doing it this way:
sa-update --channelfile /path/to/channelfile.txt --gpgkeyfile /path/to/keyfile.txt

The keyfile just contains one key id per line.

Of course, you have to import the keys into sa-update before it will work.


On 12/12/2020 9:31 PM, Kevin A. McGrail wrote:
> You appear to have two channel keys updating on the same sa update which I'm not
> sure can be done.
>
> On Sat, Dec 12, 2020, 21:07 Chris <chris.pollock1948@gmail.com
> <mailto:chris.pollock1948@gmail.com>> wrote:
>
> I've downloaded and imported the gpg key per instructions here
> https://mcgrail.com/template/kam.cf_channel
> <https://mcgrail.com/template/kam.cf_channel>
>
> The command I run for updates is:
>
> /usr/bin/sa-update -v  --channelfile /etc/mail/spamassassin/sare-sa-
> update-channels.txt --gpgkey 6C6191E3 --gpgkey 24C063D8 &&
> /etc/init.d/spamassassin restart
>
> What I'm getting for output of the cronjob is:
>
> Update available for channel kam.sa-channels.mcgrail.com
> <http://kam.sa-channels.mcgrail.com>: -1 ->
> 1607355384
> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz
> <http://sa-update-kam.snb.it/1607355384.tar.gz>, success
> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.sha512
> <http://sa-update-kam.snb.it/1607355384.tar.gz.sha512>,
> success
> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.asc
> <http://sa-update-kam.snb.it/1607355384.tar.gz.asc>,
> success
> error: GPG validation failed!
> The update downloaded successfully, but the GPG signature verification
> failed.
> channel 'kam.sa-channels.mcgrail.com <http://kam.sa-channels.mcgrail.com>': GPG
> validation failed, channel
> failed
> Update failed, exiting with code 4
>
> This is Ubuntu 20.04.1 LTS Spamassassin
> spamassassin -V
> SpamAssassin version 3.4.4
>   running on Perl version 5.30.0
>
> --
> Chris
> 31.11972; -97.90167 (Elev. 1092 ft)
> 20:00:37 up 11:04, 1 user, load average: 1.50, 1.16, 1.02
> Description:    Ubuntu 20.04.1 LTS, kernel 5.4.0-58-generic
>
Re: channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel failed [ In reply to ]
On 14.12.20 13:04, Bowie Bailey wrote:
>I am doing it this way:
>sa-update --channelfile /path/to/channelfile.txt --gpgkeyfile /path/to/keyfile.txt
>
>The keyfile just contains one key id per line.

how did you create this file?

I expected importing kam.sa-channels.mcgrail.com.key should put this key to
file sa-update uses by default
- what other point would the import have?


>Of course, you have to import the keys into sa-update before it will work.
>
>
>On 12/12/2020 9:31 PM, Kevin A. McGrail wrote:
>>You appear to have two channel keys updating on the same sa update
>>which I'm not sure can be done.
>>
>>On Sat, Dec 12, 2020, 21:07 Chris <chris.pollock1948@gmail.com
>><mailto:chris.pollock1948@gmail.com>> wrote:
>>
>> I've downloaded and imported the gpg key per instructions here
>> https://mcgrail.com/template/kam.cf_channel
>> <https://mcgrail.com/template/kam.cf_channel>
>>
>> The command I run for updates is:
>>
>> /usr/bin/sa-update -v? --channelfile /etc/mail/spamassassin/sare-sa-
>> update-channels.txt --gpgkey 6C6191E3 --gpgkey 24C063D8 &&
>> /etc/init.d/spamassassin restart
>>
>> What I'm getting for output of the cronjob is:
>>
>> Update available for channel kam.sa-channels.mcgrail.com
>> <http://kam.sa-channels.mcgrail.com>: -1 ->
>> 1607355384
>> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz
>> <http://sa-update-kam.snb.it/1607355384.tar.gz>, success
>> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.sha512
>> <http://sa-update-kam.snb.it/1607355384.tar.gz.sha512>,
>> success
>> http: (curl) GET http://sa-update-kam.snb.it/1607355384.tar.gz.asc
>> <http://sa-update-kam.snb.it/1607355384.tar.gz.asc>,
>> success
>> error: GPG validation failed!
>> The update downloaded successfully, but the GPG signature verification
>> failed.
>> channel 'kam.sa-channels.mcgrail.com <http://kam.sa-channels.mcgrail.com>': GPG
>> validation failed, channel
>> failed
>> Update failed, exiting with code 4
>>
>> This is Ubuntu 20.04.1 LTS Spamassassin
>> spamassassin -V
>> SpamAssassin version 3.4.4
>> ? running on Perl version 5.30.0

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
A day without sunshine is like, night.
Re: channel 'kam.sa-channels.mcgrail.com': GPG validation failed, channel failed [ In reply to ]
On 12/21/2020 12:13 PM, Matus UHLAR - fantomas wrote:
> On 14.12.20 13:04, Bowie Bailey wrote:
>> I am doing it this way:
>> sa-update --channelfile /path/to/channelfile.txt --gpgkeyfile /path/to/keyfile.txt
>>
>> The keyfile just contains one key id per line.
>
> how did you create this file?

It's just a text file.? Create it with your favorite text editor. Mine looks like this:

856AA88A
6C6191E3
E8B493D6
24C063D8

(probably some old stuff in there)

> I expected importing kam.sa-channels.mcgrail.com.key should put this key to
> file sa-update uses by default
> - what other point would the import have?

Can't answer you on that one.? All I know is that you have to import the key file and
then tell sa-update to use the key by supplying the key id either as a command
argument or in a file that can be read in via the --gpgkeyfile parameter.

--
Bowie