[SOLVED] possible bug in 4.4.2?

[the.phantom]

doing the update that just came out today for firefox (2.0.0.7


on my older 6.10 i did the update the "old school way" with a old script that installed
gksudo firefox &
and all worked

i have a new box i installed 7.04 on and i used the new ( latest script_
4.4.2

i get this as a error ( and tried 3 times)


gpg: Signature made Sun 16 Sep 2007 04:11:03 AM PDT using DSA key ID 17785FE8
gpg: Can't check signature: public key not found
Key verification failed. This is most likely due to a corrupt download. You should delete files ' firefox-2.0.0.7.tar.gz.asc ' and ' firefox-2.0.0.7.tar.gz ' and run the script again.

i updated all the boxes to the latest firefox but this one

any ideas?
or a work around?

mitch

update

i tried it using 4.1.1 that i had on one of the systems and this is the same error but a bit more details
hope this helps?


there may be a delay of about a minute during the generation of a gpg keypair. This is normal and expected behavior.

gpg: requesting key 0E3606D9 from hkp server subkeys.pgp.net
gpg: key 0E3606D9: "Mozilla Software Releases <releases@mozilla.org>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
Successfully retrieved Mozilla Software Releases Public key from subkeys.pgp.net .


Verifying signature...
Note: do not worry about "untrusted key" warnings. That is normal behavior for newly imported keys.

gpg: Signature made Sun 16 Sep 2007 04:11:03 AM PDT using DSA key ID 17785FE8
gpg: Can't check signature: public key not found
Key verification failed. This is most likely due to a corrupt download. You should delete files ' firefox-2.0.0.7.tar.gz.asc ' and ' firefox-2.0.0.7.tar.gz ' and run the script again.

Would you like to delete those two files now? [y/n]?
Please enter 'y' or 'n':

[nanotube]

it looks like they signed the binary with a different key this time... that's why gpg fails to verify signature. don't know why they did that. let me investigate and see what's up. maybe i'll have to make a new update release....

[VoyeurOne]

I am having the same problem with the upgrade, I did my last upgrade with ubuntuzilla and it worked fine.

[nanotube]

update:
yes, mozilla did change their pgp key to a new one... so i'll update the script and put out version 4.4.3. :)
wait for it! :)

[VoyeurOne]

Ops I hit the post button too soon....

I get the exact same script except for : the line before the key warning

gpg: WARNING: unsafe ownership on configuration file `/home/pierre/.gnupg/gpg.conf'

gpg: Signature made Sun 16 Sep 2007 08:11:03 AM ADT using DSA key ID 17785FE8
gpg: Can't check signature: public key not found
Key verification failed. This is most likely due to a corrupt download. You should delete files ' firefox-2.0.0.7.tar.gz.asc ' and ' firefox-2.0.0.7.tar.gz ' and run the script again.

Would you like to delete those two files now? [y/n]?
Please enter 'y' or 'n':

[nanotube]

Ops I hit the post button too soon....

I get the exact same script except for : the line before the key warning

gpg: WARNING: unsafe ownership on configuration file `/home/pierre/.gnupg/gpg.conf'

gpg: Signature made Sun 16 Sep 2007 08:11:03 AM ADT using DSA key ID 17785FE8
gpg: Can't check signature: public key not found
Key verification failed. This is most likely due to a corrupt download. You should delete files ' firefox-2.0.0.7.tar.gz.asc ' and ' firefox-2.0.0.7.tar.gz ' and run the script again.

Would you like to delete those two files now? [y/n]?
Please enter 'y' or 'n':

about your "warning unsafe ownership", that's a different problem. you have to chmod your .gnupg directory so that others can't have access. issue the following command at the prompt:

chmod -R go-rwx ~/.gnupg

about the key - just wait until i make the new release - it's about to be up on sourceforge. :)

[nanotube]

ok, release 4.4.3 is up on sourceforge - should take care of the new gpg key issue.

please download and test and let me know if there are any problems. :)

[VoyeurOne]

Alllright replying to you with my new Firefox/2.0.0.7 , thanks, the patch did the trick.

And thank you for the reply to my safe ownership. I am trying very hard to like Linux but I have a long way to go be as comfortable with it as I am with XP ...

Oh well, a month and a half of exclusive use and I can safely say that I spend more time enjoying it than trying to make it work even if I did a few things that I probably will regret later.

Pierre

[the.phantom]

think you should have a name change ;-D

how about Saint Nanotube patron saint of Linux Lightweights ;-D


worked like a charm , thanks for the quick reply
THANK YOU !!!!

[nanotube]

think you should have a name change ;-D

how about Saint Nanotube patron saint of Linux Lightweights ;-D


worked like a charm , thanks for the quick reply
THANK YOU !!!!

haha :)

to both of you, the.phantom and voyeurone: thank you for reporting the bug, and for testing the new version!