Questions tagged [signature]

Use for questions related to digital signatures

Filter by
Sorted by
Tagged with
0 votes
1 answer
74k views

error: msys: signature from "XXX" is invalid

How can I fix the error in the terminal on Arch Linux below? error: msys: signature from "David Macek <[email protected]>" is invalid This happen when I execute command. sudo ...
kai00's user avatar
  • 1
0 votes
0 answers
117 views

Signing Nvidia drivers for Secure Boot - Nvidia module location

I want to sign my nvidia driver so I can use it with Secure Boot. I'm trying to follow these instructions for nvidia driver: https://wiki.debian.org/SecureBoot#Using_your_key_to_sign_modules_....
user3565923's user avatar
2 votes
1 answer
81 views

Convert encrypted and signed to just signed PGP message

Suppose Bob got a message from Alice encrypted with his public key and signed with her private key. Now he wants to prove to Charlie that he got a message from her with this exact content. The message ...
DumbQuestion's user avatar
2 votes
0 answers
15 views

System update supporting IMA signatures

I'm trying to harden a Linux system by using IMA and want to apply digital signatures to binaries. I'm wondering if there is a package manager supporting the IMA signatures so that the binaries can be ...
k_o_'s user avatar
  • 131
0 votes
0 answers
14 views

Get older revision of signed pdf in command line

I'm creating a multiple signed PDF with JSignPDF. I have an empty PDF file that I sign multiple times. Here is the minimum reproducible example of how I make the PDFs: $ echo '...
Kristian's user avatar
  • 239
0 votes
0 answers
53 views

How to add a signing key for modules in OpenSUSE Leap 15?

Well, I thought I could use openSUSE Leap 15.5 "out of the box" (in my case: after upgrading from 15.4), but I have the problem that a kernel module (WLAN driver) is not accepted by the ...
U. Windl's user avatar
  • 1,210
0 votes
0 answers
25 views

Chroot jail set up with debootstrap cannot verify package signatures

I set up a chroot jail with sudo debootstrap --variant=buildd --include=fakeroot,build-essential,ca-certificates,debian-archive-keyring,git,sudo --arch=$CROSS_ARCH --foreign $CROSS_RELEASE $CROSS_ROOT ...
user149408's user avatar
  • 1,125
2 votes
1 answer
266 views

Is it possible to append a signature to a squashfs file, without causing problems with tools/mount?

I would like to authenticate a squashfs image, using a public-key signature. For an elegant implementation, it would be ideal if such a signature could simply be appended to the end of the squashfs ...
Craig McQueen's user avatar
0 votes
0 answers
109 views

Microsoft public repository rpm downloads failed with gpgcheck enabled with reposync

I’m facing an issue to download the patches (rpm) from Microsoft public repository site with gpgcheck=1. Repository site: https://packages.microsoft.com/rhel/7/prod/  To download all rpm I have ...
Sumit Suke's user avatar
1 vote
0 answers
126 views

How to view information about TSA from signed pdf?

How to get information about TSA (Time Stamping Authority) if it was used for a timestamp when signing a PDF document, e.g. with LibreOffice Draw? LibreOffice Draw only displays the time, it is not ...
Mato's user avatar
  • 585
4 votes
1 answer
7k views

How do I check or verify a pgp/gpg signature using a .asc PGP signature file? (Can't check signature: No public key)

I'm installing the Ultimaker Cura 3D printer slicer program from here (https://github.com/Ultimaker/Cura/releases/tag/5.1.0) onto Linux Ubuntu 20.04. I downloaded these 2 files: Ultimaker-Cura-5.1.0-...
Gabriel Staples's user avatar
0 votes
2 answers
92 views

How to properly setup a verified mail signature?

I've renewed and imported my old self-generated GPG certificate. After setting the new expiration date I've uploaded my cert using gpg --keyserver pgp.mit.edu --send-keys <key id> Receiving a ...
Pinke Helga's user avatar
1 vote
1 answer
415 views

How do I view information contained in a file produced by `pdfsig -dump`?

pdfsig shows some information about digital signature of a PDF document, and also allows to -dump it to file. How do I view all information from that file in accessible form? It contains much more ...
Vi.'s user avatar
  • 5,568
0 votes
0 answers
278 views

Request for help repairing output of apt update

This is the output of sudo apt update I would appreciate it if someone could help me fix the problems, I'm only new to Linux. I'm running (Linux kali 5.16.0-kali5-amd64 #1 SMP PREEMPT Debian 5.16.14-...
HaKDMoDz's user avatar
7 votes
3 answers
3k views

How to create a self-signed certificate for Okular PDF

I am at a loss. I want to create a self-signed certificate to sign PDFs with Okular. I have not found any step-by-step directions that work. I tried creating and installing a certificate, but Okular ...
gaussian's user avatar
  • 184
1 vote
0 answers
68 views

verify live image in dracut

I have enabled EFI on the target host, enabled secure boot with my own PlatformKey, enabled ipxe bootstrap image where imgverify is used for checking the signature of the initrd. Now I have the ...
Oleg's user avatar
  • 11
0 votes
1 answer
475 views

Arch linux: custom repo: File is corrupted (invalid or corrupted package (checksum))

I created a custom repository on my manjaro machine (to make a custom Manjaro ISO) with adding: [manjaro-mate-aur-packages] SigLevel = Never Server = https://github.com/FreaxMATE/manjaro-mate-aur-...
Mickey's user avatar
  • 71
1 vote
1 answer
287 views

GPG : no more signatures of a fresh imported key

SHORT GPG doesn't get signatures of an imported public key anymore (with Ubuntu 20.04) while it did it 6 months ago (with Ubuntu 18.04). I don't understand what's wrong. LONG On march, I followed this ...
Albert Colvert's user avatar
2 votes
1 answer
517 views

GPG drops all non-self-signatures

I want to import/refresh a gpg key from a keyserver including all non self-signatures. Whenever I try to do this gpg says, for example gpg: key <number>: number of dropped non-self-signatures: ...
Marco Venuti's user avatar
2 votes
3 answers
5k views

Installing Sublime Text with apt fails due to missing public key

I am using the instructions linked below to setup apt to install sublime-text. I am intentionally applying the method for connecting to third party repositories described on the Debian and ...
tompi's user avatar
  • 232
0 votes
1 answer
8k views

Invalid signature for Kali Linux: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository

I tried to do sudo apt update && sudo apt upgrade on the WSL Kali linux. But I would get this. sudo apt update Get:1 http://wlglam.fsmg.org.nz/kali kali-rolling InRelease [30.5 kB] Err:1 http:/...
IcyHerrscher's user avatar
3 votes
2 answers
3k views

What is the difference between a GPG signature and a detached signature?

We can sign a file with gpgp: gpg -s file.pdf Which generates a file signature file.pdf.gpg. It is also possible to make a detached signature: gpg -b file.pdf Which generates file.pdf.sig. I noticed ...
user avatar
6 votes
2 answers
6k views

How can I check if there is a signature associated with a deb package?

In rpm-based systems, we can easily see if there is a signature associated with an rpm file: rpm -qpi <rpm-file.rpm> | grep -i signature For .deb files, we can see the package information but ...
Sourav Bhattacharjee's user avatar
2 votes
2 answers
1k views

Custom signed Centos 7 PXE Secureboot with Shim and grub: invalid kernel signature

As the title suggests, I'm trying to set up a system that uses PXE boot to boot into CentOS7 with custom signing keys. This process is adapted from several guides but the gist of it is that I use grub ...
JeanOtus's user avatar
1 vote
0 answers
377 views

Parabola GNU/Linux-libre installation: problem with key

I'm trying to install Parabola GNU/Linux-libre (OpenRC) and I repeatedly get this error during pacstrap /mnt base elogind udev-init-scripts. error: some-package: signature from "A Packager <a-...
LuxGiammi's user avatar
  • 347
1 vote
1 answer
284 views

Remove -- from signature in neomutt

The content of my signature file is John Doe but neomutt appends it to mails as -- John Doe How can I get rid of the --?
XPhyro's user avatar
  • 146
4 votes
1 answer
400 views

Black screen in Guix System installation

I have this problem to install Guix System: After this, the screen turns black and nothing is displayed. I first downloaded the Guix System, extracted the iso with this command: "unxz" and ...
Pelian Pur's user avatar
3 votes
1 answer
2k views

BAD signature when installing specific package with apk after forced poweroff

Earlier I was playing around with my PinePhone running postmarketOS Edge (based on Alpine Linux Edge) and while installing gcc-go using apk via the command sudo apk add gcc-go the phone froze. As such,...
Newbyte's user avatar
  • 946
1 vote
1 answer
1k views

Trouble verifying linux, even after downloading key I get "No public key"

Following these instructions, I downloaded and unpacked the kernel. https://priyachalakkal.wordpress.com/2013/01/19/verifying-digital-signature-using-gpg/ Then I tried to verify the signature but I ...
clearlight's user avatar
1 vote
1 answer
3k views

Correct way to verify PGP signature in BASH script (pinning exact long fingerprint)

I have: A file A detached PGP signature of that file in ASCII armor format and A 40-character (long-format) fingerprint identifying the one key that must have a valid signature What is the correct ...
Michael Altfield's user avatar
1 vote
1 answer
1k views

Verifying Signature of Debian 10.5 returns error "Can't check signature: No public key"

I'm trying to verify the SHA512 checksum for Debian 10.5-amd-netinst.iso as found on the official Debian CD-image site. I'm running into the following error: gpg --no-default-keyring --keyring Debian\ ...
msmithy's user avatar
  • 13
5 votes
1 answer
3k views

Looking for a way to sign PDFs

I am looking for a working method to sign PDFs using the certificate from a signature card. So what I need is either a program that signs PDFs in a way that is compatible to what AcroRead does on ...
schily's user avatar
  • 18.9k
1 vote
1 answer
1k views

rpm --addsign complains about "no secret key"

Running this command I get an error. $ rpm --addsign ./kalzium-libs-19.12.3-1.fc33.i686.rpm Enter pass phrase: gpg: skipped "Evan Carroll": No secret key gpg: signing failed: No secret key Pass ...
Evan Carroll's user avatar
  • 29.6k
0 votes
0 answers
314 views

What does the "Certificates" section in seahorse do?

What does the "Certificates" / "System Trust" section of seahorse do? I am trying to sign a document in LibreOffice and the menu there uses the word "Certificate", so I am thinking that I need to ...
Aaron Franke's user avatar
2 votes
1 answer
3k views

Verify installed rpm packages signatures

I'm interested in checking the integrity of all installed rpm packages on the system. In case I have the rpm file itself, I'll run rpm -Kv PACKAGE.rpm, but what can I achieve the same goal if I the ...
ImStackWIthWorkOverflow's user avatar
0 votes
1 answer
112 views

How do I know an open-sourced app is running the open source code it claims to be running? [duplicate]

You can argue that you can check the checksum of the application's package, but you are then trusting the developer to have compiled the right code and provided the right signature. Is there a way to ...
Javier Mendonça's user avatar
5 votes
1 answer
13k views

Partition #3 contains a ext4 signature

When i use fdisk to create a new partition i get an error which says Partition #3 contains a ext4 signature Do you want to remove the signature? [Y]es/[N]o: This error is not a problem but i am ...
programmer's user avatar
0 votes
0 answers
6k views

"Required key not available" error when trying to load signed module

I made a module and compiled it with make modules_install. I ran these commands following this gist: openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -subj "...
Jonathan Lam's user avatar
0 votes
1 answer
4k views

Automatic module signing for distribution in Linux

I'm new to writing Linux modules (drivers) and digital signatures, so please correct me if any of my understanding is incorrect. When I run make modules_install on my module, I get the following ...
Jonathan Lam's user avatar
10 votes
1 answer
14k views

How to verify a kernel module signature?

When you compile a kernel source, you can choose to sign kernel modules using the CONFIG_MODULE_SIG* options. The modinfo tool should handle the task of verifying the module signature, but there has ...
Mikhail Morfikov's user avatar
1 vote
1 answer
2k views

What happened to elfsign and elfverify?

In "Uninformed Research -- informative information for the uninformed." 2003 mentions a tool called elfsign and elfverify. This is a tool to checksum and sign an ELF binary. I can't find that tool in ...
Evan Carroll's user avatar
  • 29.6k
14 votes
2 answers
44k views

What is a vfat signature?

Recently, I have noticed that I cannot access my USB flash drive filesystem (it was of FAT type, as far as I can remember). Fedora did not mount it automatically and lsblk could not see the partition. ...
Silv's user avatar
  • 295
6 votes
1 answer
4k views

How to detach-sign a file with a specific private key? || Why this fails?

I have a .tar.xz file which I would like to detach-sign using my gpg private key. The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use. ...
Vlastimil Burián's user avatar
1 vote
1 answer
3k views

dpkg-source: warning: failed to verify signature

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. In this answer, I am being pointed at a different solution, other than installing directly from source. Since I haven't ever used dget, I must ...
Vlastimil Burián's user avatar
3 votes
2 answers
4k views

SUSE Linux Signature verification failed

When I code, build and sign .rpm file for SUSE Linux, it is signed successfully as follows: rpm --checksig -v xxx.rpm Header V4 RSA/SHA256 Signature, key ID 7936b039: OK Header SHA1 digest: OK ...
CH4's user avatar
  • 31
2 votes
0 answers
2k views

How do I verify linux kernel signature with gpg?

Following the notes at the kernel.org site, but I cannot seem to verify the signature of the kernel. I tried to use the given script to handle it for me, but that has failed too. user@localhost ~ $ ...
Jon's user avatar
  • 495
1 vote
2 answers
504 views

How do I verify https://files.devuan.org/devuan-devs.gpg

I am running Devuan Jessie. I want to install another Devuan Ascii from scratch. So I downloaded: https://files.devuan.org/devuan_ascii/installer-iso/devuan_ascii_2.0.0_amd64_netinst.iso https://...
Tino's user avatar
  • 1,142
0 votes
2 answers
3k views

pacman -Syyu error: could not import key from Trusted User

DISTRIB_ID=ManjaroLinux DISTRIB_RELEASE=17.1.6 DISTRIB_CODENAME=Hakoila I installed manjaro on an old laptop today and am in the process of trying to update it. just using pacman -Syyu eventually ...
Gander7's user avatar
  • 111
2 votes
0 answers
525 views

How to know which module is not trusted?

I am running Kubuntu 18.04. Now I notice my kernel log several lines having PKCS#7 signature not signed with a trusted key. Now I need to know which module (or whatever) causing this. Is there any way ...
Chitholian's user avatar
0 votes
1 answer
132 views

Evolution - imported signatures not used

Evolution 3.28.0-4 on Debian Testing. I did a restore of my evolution-config, copied ~/.config/evolution from backup to my machine. The email-accounts and all the emails are fine. For each account ...
Johannes C. Schulz's user avatar