Missing signature downloads

4 posts / 0 new
Last post
askbjoernhansen
Missing signature downloads

$ add system image  http://www.vyatta.com/downloads/vc6.4/vyatta-livecd_VC6.4-2012.04.30_i386.iso
Trying to fetch ISO file from http://www.vyatta.com/downloads/vc6.4/vyatta-livecd_VC6.4-2012.04.30_i386.iso
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  206M  100  206M    0     0  3697k      0  0:00:57  0:00:57 --:--:-- 5690k
ISO download suceeded.
Checking for digital signature file...
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (22) The requested URL returned error: 404
Unable to fetch digital signature file.
Do you want to continue without signature check? (yes/no) [yes] yes
Checking MD5 checksums of files on the ISO image...OK.
Done!
fromport
Re: Missing signature downloads

askbjoernhansen wrote:
$ add system image  http://www.vyatta.com/downloads/vc6.4/vyatta-livecd_VC6.4-2012.04.30_i386.iso
[SNIP]
Checking for digital signature file...
curl: (22) The requested URL returned error: 404
Unable to fetch digital signature file.

I have trying desperately to find a way to build/generate those signature files, so I could add them to the unofficial images.
No luck, yet.
If someone could shed some light over this: that would be great.

steven.kath
Missing signature downloads

Thanks Ask. I've posted the signature files to the necessary path.

fromport wrote:
I have trying desperately to find a way to build/generate those signature files, so I could add them to the unofficial images.
No luck, yet.
If someone could shed some light over this: that would be great.

That's by design - the point of the signature files is to verify that images are signed using our private key as official Vyatta builds. It allows us to assure users that an image file is a trusted Vyatta release with no tampering.

The process looks something like this:
http://www.dewinter.com/gnupg_howto/english/GPGMiniHowto-5.html

askbjoernhansen
Missing signature downloads

Thanks Steven!

Log in or register to post comments