Hello!
I updated my VPS with a fresh Debian 10 install. According procedure in the documentation
'curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --import'
I get the error message '2019-10-17 20:34:32 (1.01 MB/s) - ‘A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc’ saved [19665/19665] gpg: no valid OpenPGP data found. gpg: Total number processed: 0
What is going wrong? Is this an invalid key? After weeks ago my other install on Debian 10 was ok.
Best regards! Olaf
On Thu, Oct 17, 2019 at 07:38:10PM +0200, Olaf Grimm wrote:
I updated my VPS with a fresh Debian 10 install. According procedure in the documentation
'curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --import'
I get the error message '2019-10-17 20:34:32 (1.01 MB/s) - ???A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc??? saved [19665/19665] gpg: no valid OpenPGP data found. gpg: Total number processed: 0
Weird!
What is going wrong? Is this an invalid key? After weeks ago my other install on Debian 10 was ok.
I'd suggest breaking it up into pieces, and investigating each piece.
First, curl the file and make sure you get something that looks like the key on stdout.
Next, redirect that output to a file and make sure you have a key in that file.
Then gpg --import that file.
It's the "saved [19665/19665]" part that I find most interesting -- it's as though your version of curl is storing the output to a file rather than printing it on stdout.
Maybe somewhere out there is a curl that doesn't output the page to stdout by default?
--Roger
Like promised my investigation here:
On the Debian 10 VPS I enabled the experimental repo and I've got some updates. After that step the Tor key import was possible and the Tor repo is working too. For "production purpose" the Debian experimental repo is disabled again. Problem solved. I assume it was a bug in the key handling chain. Gpg and libgcrypt are the same version like before.
gpg (GnuPG) 2.2.12 libgcrypt 1.8.4
Olaf
Am 20.10.19 um 13:25 schrieb Roger Dingledine:
On Thu, Oct 17, 2019 at 07:38:10PM +0200, Olaf Grimm wrote:
I updated my VPS with a fresh Debian 10 install. According procedure in the documentation
'curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --import'
I get the error message '2019-10-17 20:34:32 (1.01 MB/s) - ???A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc??? saved [19665/19665] gpg: no valid OpenPGP data found. gpg: Total number processed: 0
Weird!
What is going wrong? Is this an invalid key? After weeks ago my other install on Debian 10 was ok.
I'd suggest breaking it up into pieces, and investigating each piece.
First, curl the file and make sure you get something that looks like the key on stdout.
Next, redirect that output to a file and make sure you have a key in that file.
Then gpg --import that file.
It's the "saved [19665/19665]" part that I find most interesting -- it's as though your version of curl is storing the output to a file rather than printing it on stdout.
Maybe somewhere out there is a curl that doesn't output the page to stdout by default?
--Roger
tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
On 10/17/19 7:38 PM, Olaf Grimm wrote:
'curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --import'
I get the error message '2019-10-17 20:34:32 (1.01 MB/s) - ‘A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc’ saved [19665/19665] gpg: no valid OpenPGP data found. gpg: Total number processed: 0
works here flawlessly:
curl https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --import gpg: keybox '/home/tfoerste/.gnupg/pubring.kbx' created % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 19665 100 19665 0 0 685k 0 --:--:-- --:--:-- --:--:-- 685k gpg: key EE8CBC9E886DDD89: 36 signatures not checked due to missing keys gpg: /home/tfoerste/.gnupg/trustdb.gpg: trustdb created gpg: key EE8CBC9E886DDD89: public key "deb.torproject.org archive signing key" imported gpg: Total number processed: 1 gpg: imported: 1 gpg: no ultimately trusted keys found
$ cat /etc/*release* PRETTY_NAME="Debian GNU/Linux 10 (buster)" NAME="Debian GNU/Linux" VERSION_ID="10" VERSION="10 (buster)" VERSION_CODENAME=buster ID=debian HOME_URL="https://www.debian.org/" SUPPORT_URL="https://www.debian.org/support" BUG_REPORT_URL="https://bugs.debian.org/"
Hi Olaf,
this:
'2019-10-17 20:34:32 (1.01 MB/s) - ‘A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc’ saved [19665/19665]
looks like output from wget rather than curl. Is there some weird configuration calling wget instead of curl on your system? What do "alias curl" or "which curl" say?
If I run "curl THE_KEY_URL" locally, I see the key file in my terminal, but when I run "wget THE_KEY_URL", I see the message you're seeing.
Kind regards, Alexander
Thank you for the big amount of feedback. I investigated further that in a fresh Debian 10 virtual machine and in a fresh Ubuntu 19.10 virtual machine at home the install procedure from website is working. Curl on Ubuntu was missing. Wget is possible instead. Conclusion: The procedure on website is working.
My VPS was CentOS. There is an old Tor version so I changed to Debian 9 (provider version) and upgraded by hand to Debian 10. Now I try to check the gpg install there or the key server in the VPS. The problem is on my side. If I have found the problem, I send a short info to the list.
Best regards! Olaf
Am 20.10.19 um 13:51 schrieb Alexander Dietrich:
Hi Olaf,
this:
'2019-10-17 20:34:32 (1.01 MB/s) - ‘A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc’ saved [19665/19665]
looks like output from wget rather than curl. Is there some weird configuration calling wget instead of curl on your system? What do "alias curl" or "which curl" say?
If I run "curl THE_KEY_URL" locally, I see the key file in my terminal, but when I run "wget THE_KEY_URL", I see the message you're seeing.
Kind regards, Alexander _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
tor-relays@lists.torproject.org
-
Alexander Dietrich -
Olaf Grimm -
Roger Dingledine -
Toralf Förster