cron.daily job results in "error: GPG validation failed!"

Bug #257405 reported by Brian Murray
34
This bug affects 4 people
Affects Status Importance Assigned to Milestone
SpamAssassin
Fix Released
Medium
spamassassin (Debian)
Fix Released
Unknown
spamassassin (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Binary package hint: spamassassin

After upgrading to Intrepid I received the following e-mail:

/etc/cron.daily/spamassassin:
error: GPG validation failed!
The update downloaded successfully, but the GPG signature verification
failed.
channel: GPG validation failed, channel failed

I'm using spamassassin version 3.2.5-1ubuntu1 and one can manually recreate this error just by running the cronjob e.g. 'sudo /etc/cron.daily/spamassassin'.

WORKAROUND:
    wget http://spamassassin.apache.org/updates/GPG.KEY
    sa-update --import GPG.KEY

Changed in spamassassin:
status: Unknown → Fix Released
Changed in spamassassin:
status: Unknown → New
Matt LaPlante (cybrmatt)
Changed in spamassassin:
status: New → Confirmed
Changed in spamassassin:
status: New → Fix Released
Revision history for this message
glenstewart (glen-stewart) wrote :

The workaround doesn't seem to be working anymore.

There is a LONG discussion of this problem at http://www.gossamer-threads.com/lists/engine?do=post_view_flat;post=129005;page=1;mh=-1;list=spamassassin;sb=post_latest_reply;so=ASC

These steps seemed to help, but I confess I don't fully know what I'm doing:

1. install the missing re2c package (on Ubuntu Intrepid)
2. change the reference to sa-update in /etc/cron.daily/spamassassin to
             sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org
3. manually run sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org
             if no errors, proceed with next step.
4. manually run sa-compile
             if no errors, proceed with next step.
5. manually run invoke-rc.d spamassassin reload

From this point on, daily updates don't fail.

Revision history for this message
Justin Mason (jm-jmason) wrote :

ignore that last comment!

"sought.rules.yerp.org" is a third-party addon ruleset, and not part of the default sa-update setup (either from upstream or in Intrepid). it, and that mailing list thread, are irrelevant to this bug.

Revision history for this message
Laurent Bonnaud (laurent-bonnaud) wrote :

This bug has been fixed in the Debian package in version 3.2.5-2. Since a more recent version is available in jaunty, it is also probably fixed in Ubuntu.

Changed in spamassassin (Ubuntu):
status: Confirmed → Fix Released
Changed in spamassassin:
importance: Unknown → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.