Unable to update modules - how to update the GPG keys?

1

My FreePBX Mirror 1 GPG key expired today. How to update it?

root@littlestar:~# ntpdate pool.ntp.org
 4 May 08:48:41 ntpdate[14994]: adjust time server 193.175.73.151 offset -0.031545 sec
root@littlestar:~# sudo -iu asterisk fwconsole ma upgradeall
No repos specified, using: [unsupported,extended,basic,standard] from last GUI settings

Upgrading: framework, timeconditions
Upgrading framework..
Starting framework download..
Processing framework
Verifying local module download...Redownloading
Downloading...
 8513621/8513621 [============================] 100%
Finished downloading
The following error(s) occured:
 - File Integrity failed for /var/www/html/admin/modules/_cache/framework-13.0.112.tgz.gpg - aborting (GPG Verify File check failed)
root@littlestar:~# sudo -iu asterisk gpg --verify /var/www/html/admin/modules/_cache/framework-13.0.112.tgz.gpg
gpg: Signature made Wed 04 May 2016 02:04:52 AM CEST using RSA key ID 69D2EAD9
gpg: Good signature from "FreePBX Mirror 1 (Module Signing - 2014/2015) <[email protected]>"
gpg: Note: This key has expired!
Primary key fingerprint: 1013 D73F ECAC 918A 0A25  8239 86CE 8774 69D2 EAD9
root@littlestar:~# sudo -iu asterisk fwconsole ma refreshsignatures
Getting Data from Online Server...
Done
Checking Signatures of Modules...
Checking announcement...
Good
Checking arimanager...
Good
Checking asterisk-cli...
Good
Checking asteriskinfo...
Good
Checking asternic_cdr...
Signature Invalid
		Could not find signed module on remote server!
Checking avantfax...
Signature Invalid
		Could not find signed module on remote server!
Checking backup...
Good
Checking blacklist...
Good
Checking builtin...
Good
Checking callforward...
Good
Checking callrecording...
Good
Checking callwaiting...
Good
Checking campon...
Good
Checking cdr...
Good
Checking cel...
Good
Checking certman...
Good
Checking cidlookup...
Good
Checking conferences...
Good
Checking configedit...
Good
Checking contactmanager...
Good
Checking core...
Good
Checking customappsreg...
Good
Checking dashboard...
Good
Checking daynight...
Good
Checking directory...
Good
Checking disa...
Good
Checking donotdisturb...
Good
Checking extensionsettings...
Good
Checking fax...
Good
Checking featurecodeadmin...
Good
Checking findmefollow...
Good
Checking framework...
Good
Checking hotelwakeup...
Good
Checking iaxsettings...
Good
Checking infoservices...
Good
Checking ivr...
Good
Checking languages...
Good
Checking logfiles...
Good
Checking manager...
Good
Checking miscapps...
Good
Checking miscdests...
Good
Checking music...
Good
Checking outroutemsg...
Good
Checking paging...
Good
Checking parking...
Good
Checking pbdirectory...
Good
Checking phonebook...
Good
Checking phpagiconf...
Good
Checking phpinfo...
Good
Checking phpmyadmin...
Signature Invalid
		Could not find signed module on remote server!
Checking pinsets...
Good
Checking presencestate...
Good
Checking printextensions...
Good
Checking queuemetrics...
Good
Checking queues...
Good
Checking recordings...
Good
Checking ringgroups...
Good
Checking setcid...
Good
Checking sipsettings...
Good
Checking soundlang...
Good
Checking speeddial...
Good
Checking superfecta...
Signature Invalid
		Refreshing superfecta
Starting superfecta download..
Processing superfecta
Downloading...
 376462/376462 [============================] 100%
Finished downloading
The following error(s) occured:
 - File Integrity failed for /var/www/html/admin/modules/_cache/superfecta-13.0.3.12.tgz.gpg - aborting (GPG Verify File check failed)
root@littlestar:~# sudo -iu asterisk gpg --verify /var/www/html/admin/modules/_cache/framework-13.0.112.tgz.gpg
gpg: Signature made Wed 04 May 2016 02:04:52 AM CEST using RSA key ID 69D2EAD9
gpg: Good signature from "FreePBX Mirror 1 (Module Signing - 2014/2015) <[email protected]>"
gpg: Note: This key has expired!
Primary key fingerprint: 1013 D73F ECAC 918A 0A25  8239 86CE 8774 69D2 EAD9
root@littlestar:~# sudo -iu asterisk gpg --list-public-keys
/home/asterisk/.gnupg/pubring.gpg
---------------------------------
pub   4096R/B33B4659 2014-04-30 [expires: 2017-04-29]
uid                  FreePBX Module Signing (This is the master key to sign FreePBX Modules) <[email protected]>
sub   4096R/5C2FE148 2014-04-30 [expires: 2017-04-29]

pub   4096R/69D2EAD9 2014-05-05 [expired: 2016-05-04]
uid                  FreePBX Mirror 1 (Module Signing - 2014/2015) <[email protected]>
2

Totally my fault. It should be fine now. Sorry about that!

3

Now the key is listed without an expiration date. What was wrong? The keys always get updates before module updates? Ahh and updates work again, thanks.

1 Like
4

Hi, i have the same problem, trying to work with freepbx 12 (for compatibility with other modules and installations) here’s what i get:

[root@localhost _cache]# amportal a ma upgradeall

\Fetching FreePBX settings with gen_amp_conf.php…

no repos specified, using: [commercial,standard,extended,unsupported] from last GUI settings

Upgrading: arimanager, asteriskinfo, backup, blacklist, callrecording, cdr, cidlookup, conferences, contactmanager, core, customappsreg, cxpanel, dahdiconfig, dashboard, daynight, digium_phones, digiumaddoninstaller, endpointman, fax, featurecodeadmin, framework, fw_langpacks, infoservices, irc, ivr, paging, parking, pbdirectory, presencestate, printextensions, queues, recordings, ringgroups, sipsettings, sipstation, speeddial, superfecta, timeconditions, ucp, ucpnode, userman, voicemail, weakpasswords
Upgrading arimanager…
Downloading 28149 of 28149 (100%)
The following error(s) occured:

  • File Integrity failed for /var/www/html/admin/modules/_cache/arimanager-12.0.4.tgz.gpg - aborting (GPG Verify File check failed)

[root@localhost _cache]# su asterisk
bash-4.1$ gpg --verify /var/www/html/admin/modules/_cache/arimanager-12.0.4.tgz.gpg
gpg: Signature made Thu 09 Jul 2015 12:29:46 PM EDT using RSA key ID 69D2EAD9
gpg: Good signature from "FreePBX Mirror 1 (Module Signing - 2014/2015) <security @ freepbx . org>"
gpg: Note: This key has expired!
Primary key fingerprint: 1013 D73F ECAC 918A 0A25 8239 86CE 8774 69D2 EAD9

5

Try
sudo -u asterisk gpg --recv-keys --keyserver keys.gnupg.net 0x5C2FE148 0x69D2EAD9 0xB33B4659 0xCCEBF9CB

1 Like
6

thanks Emil, that did the trick!

7

another problem i am having:
[root@localhost _cache]# su asterisk
bash-4.1$ gpg --verify /var/www/html/admin/modules/_cache/framework-12.0.76.3.tgz.gpg
gpg: Signature made Wed 04 May 2016 07:56:23 PM EDT using RSA key ID FE6D84F7
gpg: Can’t check signature: No public key

I tried “amportal a ma refreshsignatures” and tried “amportal chown” but none helped. any tip will be greatly appreciated. It is strange that a simple update is causing so much trouble, you think there is something wrong with my installation?

8

Try
sudo -u asterisk gpg --recv-keys --keyserver keys.gnupg.net 0xFE6D84F7