#1 Le 10/06/2014, à 09:42
- poumtatalia
[Résolu] Untrusted packages : Tor
Bonjour,
J'ai récemment installé le tor bundle, et je tombe sur ce message ce matin à la mise à jour:
Requires installation of untrusted packages
The action would require the installation of packages from not authenticated sources
"sudo apt-get update" me donne
Hit http://ppa.launchpad.net precise Release.gpg
Hit http://ppa.launchpad.net precise Release.gpg
Hit http://extras.ubuntu.com precise Release.gpg
Hit http://ppa.launchpad.net precise Release
Hit http://dl.google.com stable Release.gpg
Hit http://extras.ubuntu.com precise Release
Hit http://ppa.launchpad.net precise Release
Hit http://dl.google.com stable Release
Get:1 http://deb.torproject.org precise Release.gpg [490 B]
Hit http://extras.ubuntu.com precise/main Sources
Hit http://ppa.launchpad.net precise/main Sources
Hit http://ppa.launchpad.net precise/main amd64 Packages
Hit http://ppa.launchpad.net precise/main i386 Packages
Ign http://ppa.launchpad.net precise/main TranslationIndex
Hit http://dl.google.com stable/main amd64 Packages
Hit http://extras.ubuntu.com precise/main amd64 Packages
Hit http://extras.ubuntu.com precise/main i386 Packages
Ign http://extras.ubuntu.com precise/main TranslationIndex
Hit http://ppa.launchpad.net precise/main Sources
Hit http://ppa.launchpad.net precise/main amd64 Packages
Hit http://ppa.launchpad.net precise/main i386 Packages
Ign http://ppa.launchpad.net precise/main TranslationIndex
Hit http://deb.torproject.org precise Release
Ign http://deb.torproject.org precise Release
Hit http://dl.google.com stable/main i386 Packages
Hit http://fr.archive.ubuntu.com precise Release.gpg
Hit http://fr.archive.ubuntu.com precise-updates Release.gpg
Hit http://fr.archive.ubuntu.com precise-backports Release.gpg
Hit http://security.ubuntu.com precise-security Release.gpg
Ign http://dl.google.com stable/main TranslationIndex
Ign http://deb.torproject.org precise/main amd64 Packages/DiffIndex
Hit http://security.ubuntu.com precise-security Release
Hit http://fr.archive.ubuntu.com precise Release
Hit http://fr.archive.ubuntu.com precise-updates Release
Ign http://deb.torproject.org precise/main i386 Packages/DiffIndex
Ign http://deb.torproject.org precise/main TranslationIndex
Hit http://security.ubuntu.com precise-security/main Sources
Hit http://fr.archive.ubuntu.com precise-backports Release
Hit http://security.ubuntu.com precise-security/restricted Sources
Hit http://security.ubuntu.com precise-security/universe Sources
Hit http://security.ubuntu.com precise-security/multiverse Sources
Hit http://security.ubuntu.com precise-security/main amd64 Packages
Hit http://security.ubuntu.com precise-security/restricted amd64 Packages
Hit http://security.ubuntu.com precise-security/universe amd64 Packages
Hit http://security.ubuntu.com precise-security/multiverse amd64 Packages
Hit http://security.ubuntu.com precise-security/main i386 Packages
Hit http://security.ubuntu.com precise-security/restricted i386 Packages
Hit http://security.ubuntu.com precise-security/universe i386 Packages
Ign http://extras.ubuntu.com precise/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en_US
Hit http://fr.archive.ubuntu.com precise/main Sources
Hit http://fr.archive.ubuntu.com precise/restricted Sources
Hit http://fr.archive.ubuntu.com precise/universe Sources
Hit http://fr.archive.ubuntu.com precise/multiverse Sources
Hit http://fr.archive.ubuntu.com precise/main amd64 Packages
Hit http://fr.archive.ubuntu.com precise/restricted amd64 Packages
Hit http://fr.archive.ubuntu.com precise/universe amd64 Packages
Hit http://fr.archive.ubuntu.com precise/multiverse amd64 Packages
Hit http://fr.archive.ubuntu.com precise/main i386 Packages
Hit http://fr.archive.ubuntu.com precise/restricted i386 Packages
Ign http://dl.google.com stable/main Translation-en_US
Ign http://ppa.launchpad.net precise/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en_US
Ign http://extras.ubuntu.com precise/main Translation-en
Ign http://dl.google.com stable/main Translation-en
Ign http://ppa.launchpad.net precise/main Translation-en
Hit http://security.ubuntu.com precise-security/multiverse i386 Packages
Hit http://security.ubuntu.com precise-security/main TranslationIndex
Hit http://security.ubuntu.com precise-security/multiverse TranslationIndex
Hit http://security.ubuntu.com precise-security/restricted TranslationIndex
Hit http://security.ubuntu.com precise-security/universe TranslationIndex
Hit http://fr.archive.ubuntu.com precise/universe i386 Packages
Hit http://fr.archive.ubuntu.com precise/multiverse i386 Packages
Hit http://fr.archive.ubuntu.com precise/main TranslationIndex
Hit http://fr.archive.ubuntu.com precise/multiverse TranslationIndex
Hit http://fr.archive.ubuntu.com precise/restricted TranslationIndex
Hit http://security.ubuntu.com precise-security/main Translation-en
Hit http://security.ubuntu.com precise-security/multiverse Translation-en
Hit http://fr.archive.ubuntu.com precise/universe TranslationIndex
Hit http://fr.archive.ubuntu.com precise-updates/main Sources
Hit http://fr.archive.ubuntu.com precise-updates/restricted Sources
Hit http://fr.archive.ubuntu.com precise-updates/universe Sources
Hit http://fr.archive.ubuntu.com precise-updates/multiverse Sources
Hit http://security.ubuntu.com precise-security/restricted Translation-en
Hit http://fr.archive.ubuntu.com precise-updates/main amd64 Packages
Hit http://fr.archive.ubuntu.com precise-updates/restricted amd64 Packages
Hit http://fr.archive.ubuntu.com precise-updates/universe amd64 Packages
Hit http://fr.archive.ubuntu.com precise-updates/multiverse amd64 Packages
Hit http://fr.archive.ubuntu.com precise-updates/main i386 Packages
Hit http://deb.torproject.org precise/main amd64 Packages
Hit http://security.ubuntu.com precise-security/universe Translation-en
Hit http://fr.archive.ubuntu.com precise-updates/restricted i386 Packages
Hit http://fr.archive.ubuntu.com precise-updates/universe i386 Packages
Hit http://fr.archive.ubuntu.com precise-updates/multiverse i386 Packages
Hit http://fr.archive.ubuntu.com precise-updates/main TranslationIndex
Hit http://fr.archive.ubuntu.com precise-updates/multiverse TranslationIndex
Hit http://deb.torproject.org precise/main i386 Packages
Hit http://fr.archive.ubuntu.com precise-updates/restricted TranslationIndex
Hit http://fr.archive.ubuntu.com precise-updates/universe TranslationIndex
Hit http://fr.archive.ubuntu.com precise-backports/main Sources
Hit http://fr.archive.ubuntu.com precise-backports/restricted Sources
Hit http://fr.archive.ubuntu.com precise-backports/universe Sources
Ign http://deb.torproject.org precise/main Translation-en_US
Ign http://deb.torproject.org precise/main Translation-en
Hit http://fr.archive.ubuntu.com precise-backports/multiverse Sources
Hit http://fr.archive.ubuntu.com precise-backports/main amd64 Packages
Hit http://fr.archive.ubuntu.com precise-backports/restricted amd64 Packages
Hit http://fr.archive.ubuntu.com precise-backports/universe amd64 Packages
Hit http://fr.archive.ubuntu.com precise-backports/multiverse amd64 Packages
Hit http://fr.archive.ubuntu.com precise-backports/main i386 Packages
Hit http://fr.archive.ubuntu.com precise-backports/restricted i386 Packages
Hit http://fr.archive.ubuntu.com precise-backports/universe i386 Packages
Hit http://fr.archive.ubuntu.com precise-backports/multiverse i386 Packages
Hit http://fr.archive.ubuntu.com precise-backports/main TranslationIndex
Hit http://fr.archive.ubuntu.com precise-backports/multiverse TranslationIndex
Hit http://fr.archive.ubuntu.com precise-backports/restricted TranslationIndex
Hit http://fr.archive.ubuntu.com precise-backports/universe TranslationIndex
Hit http://fr.archive.ubuntu.com precise/main Translation-en
Hit http://fr.archive.ubuntu.com precise/multiverse Translation-en
Hit http://fr.archive.ubuntu.com precise/restricted Translation-en
Hit http://fr.archive.ubuntu.com precise/universe Translation-en
Hit http://fr.archive.ubuntu.com precise-updates/main Translation-en
Hit http://fr.archive.ubuntu.com precise-updates/multiverse Translation-en
Hit http://fr.archive.ubuntu.com precise-updates/restricted Translation-en
Hit http://fr.archive.ubuntu.com precise-updates/universe Translation-en
Hit http://fr.archive.ubuntu.com precise-backports/main Translation-en
Hit http://fr.archive.ubuntu.com precise-backports/multiverse Translation-en
Hit http://fr.archive.ubuntu.com precise-backports/restricted Translation-en
Hit http://fr.archive.ubuntu.com precise-backports/universe Translation-en
Fetched 490 B in 2s (205 B/s)
Reading package lists... Done
W: GPG error: http://deb.torproject.org precise Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY XXXX
W: Duplicate sources.list entry http://extras.ubuntu.com/ubuntu/ precise/main amd64 Packages (/var/lib/apt/lists/extras.ubuntu.com_ubuntu_dists_precise_main_binary-amd64_Packages)
W: Duplicate sources.list entry http://extras.ubuntu.com/ubuntu/ precise/main i386 Packages (/var/lib/apt/lists/extras.ubuntu.com_ubuntu_dists_precise_main_binary-i386_Packages)
... et mon sources.list contient:
# deb cdrom:[Ubuntu 12.04.4 LTS _Precise Pangolin_ - Release amd64 (20140204)]/ dists/precise/main/binary-i386/
# deb cdrom:[Ubuntu 12.04.4 LTS _Precise Pangolin_ - Release amd64 (20140204)]/ dists/precise/restricted/binary-i386/
# deb cdrom:[Ubuntu 12.04.4 LTS _Precise Pangolin_ - Release amd64 (20140204)]/ precise main restricted
# See http://help.ubuntu.com/community/UpgradeNotes for how to upgrade to
# newer versions of the distribution.
deb http://fr.archive.ubuntu.com/ubuntu/ precise main restricted
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise main restricted
## Major bug fix updates produced after the final release of the
## distribution.
deb http://fr.archive.ubuntu.com/ubuntu/ precise-updates main restricted
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise-updates main restricted
## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team. Also, please note that software in universe WILL NOT receive any
## review or updates from the Ubuntu security team.
deb http://fr.archive.ubuntu.com/ubuntu/ precise universe
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise universe
deb http://fr.archive.ubuntu.com/ubuntu/ precise-updates universe
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise-updates universe
## N.B. software from this repository is ENTIRELY UNSUPPORTED by the Ubuntu
## team, and may not be under a free licence. Please satisfy yourself as to
## your rights to use the software. Also, please note that software in
## multiverse WILL NOT receive any review or updates from the Ubuntu
## security team.
deb http://fr.archive.ubuntu.com/ubuntu/ precise multiverse
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise multiverse
deb http://fr.archive.ubuntu.com/ubuntu/ precise-updates multiverse
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise-updates multiverse
## N.B. software from this repository may not have been tested as
## extensively as that contained in the main release, although it includes
## newer versions of some applications which may provide useful features.
## Also, please note that software in backports WILL NOT receive any review
## or updates from the Ubuntu security team.
deb http://fr.archive.ubuntu.com/ubuntu/ precise-backports main restricted universe multiverse
deb-src http://fr.archive.ubuntu.com/ubuntu/ precise-backports main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu precise-security main restricted
deb-src http://security.ubuntu.com/ubuntu precise-security main restricted
deb http://security.ubuntu.com/ubuntu precise-security universe
deb-src http://security.ubuntu.com/ubuntu precise-security universe
deb http://security.ubuntu.com/ubuntu precise-security multiverse
deb-src http://security.ubuntu.com/ubuntu precise-security multiverse
## Uncomment the following two lines to add software from Canonical's
## 'partner' repository.
## This software is not part of Ubuntu, but is offered by Canonical and the
## respective vendors as a service to Ubuntu users.
# deb http://archive.canonical.com/ubuntu precise partner
# deb-src http://archive.canonical.com/ubuntu precise partner
## This software is not part of Ubuntu, but is offered by third-party
## developers who want to ship their latest software.
deb http://extras.ubuntu.com/ubuntu precise main
deb-src http://extras.ubuntu.com/ubuntu precise main
deb http://deb.torproject.org/torproject.org precise main
No comprendo...
Dernière modification par poumtatalia (Le 12/06/2014, à 09:45)
Toujours sur du LTS, en ce moment Ubuntu 20.04...
Hors ligne
#2 Le 10/06/2014, à 09:53
- Zakhar
Re : [Résolu] Untrusted packages : Tor
Je vais arrêter de dire qu'il vaut largement mieux utiliser tor middlebox (cherchez !) parce que de toute façon personne n'écoute !
"A computer is like air conditioning: it becomes useless when you open windows." (Linus Torvald)
Hors ligne
#3 Le 11/06/2014, à 10:41
- poumtatalia
Re : [Résolu] Untrusted packages : Tor
Bonjour,
Merci à Zakhar d'ouvrir la question "philosophique" de la meilleure utilisation de Tor, mais je cherche pour l'instant une réponse technique pour utiliser le Tor bundle, et pas le middlebox ;-)
Toujours sur du LTS, en ce moment Ubuntu 20.04...
Hors ligne
#4 Le 12/06/2014, à 09:36
- poumtatalia
Re : [Résolu] Untrusted packages : Tor
J'ai déjà ôté les 2 paquets qui étaient en double. Me reste à régler
W: GPG error: http://deb.torproject.org precise Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 74A941BA219EC810
Par ailleurs mes clefs sont:
poum@poumbuntu:~$ sudo apt-key list
/etc/apt/trusted.gpg
--------------------
pub 1024D/437D05B5 2004-09-12
uid Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
sub 2048g/79164387 2004-09-12
pub 1024D/FBB75451 2004-12-30
uid Ubuntu CD Image Automatic Signing Key <cdimage@ubuntu.com>
pub 4096R/C0B21F32 2012-05-11
uid Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com>
pub 4096R/EFE21092 2012-05-11
uid Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>
pub 1024D/3E5C1192 2010-09-20
uid Ubuntu Extras Archive Automatic Signing Key <ftpmaster@ubuntu.com>
pub 1024R/47B4D1C4 2009-09-10
uid Launchpad qbittorrent
pub 1024R/70875DFB 2013-08-09
uid Launchpad PPA for Nerd Herd
pub 1024D/7FAC5991 2007-03-08
uid Google, Inc. Linux Package Signing Key <linux-packages-keymaster@google.com>
sub 2048g/C07CB649 2007-03-08
pub 1024R/E06E6293 2012-04-08
uid Launchpad PPA for upubuntu.com
Je fouille mais toute aide reste la bienvenue......
Toujours sur du LTS, en ce moment Ubuntu 20.04...
Hors ligne
#5 Le 12/06/2014, à 09:44
- poumtatalia
Re : [Résolu] Untrusted packages : Tor
Réponse trouvée là: http://doc.ubuntu-fr.org/apt-key, c'est à dire:
sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com xxx
Où XX est le numéro de clé que j'avais dans le message d'erreur ;-)
Toujours sur du LTS, en ce moment Ubuntu 20.04...
Hors ligne
#6 Le 12/06/2014, à 10:08
- lynn
Re : [Résolu] Untrusted packages : Tor
Bonjour,
Voici un script pour récupérer ses clés automatiquement ( merci à son auteur ) :
#!/bin/bash
# script pour mettre à jour la liste des dépôts et automatiquement rajouter les clefs manquantes.
#
# Copyright (C) 20 Fev. 2011, Rombeaut Rodolphe
# http://scriptam.over-blog.com/
# Released into the public domain.
{
key="$(sudo apt-get update 2>&1 >&4 | tee >(grep '[[:alnum:]]\{16\}') >&4)"
} 4>&1
[ -n "$key" ] && {
echo "Il semble que vous n'ayez pas toutes les clefs d'authentification. "
echo "Les clefs GPG sont nécessaires pour les dépôts afin de garantir l'authenticité de la connexion"
echo ""
until [ "$question" != "" ]; do
echo -n "Voulez-vous récupérer les clefs? (Oui/Non)"
read question
shopt -s nocaseglob
case "$question" in
oui | o )
OLDIFS=$IFS
IFS=""
for i in $key; do
gpg --keyserver hkp://keyserver.ubuntu.com:11371 --recv-key ${i:(-8)}
gpg -a --export ${i:(-8)} | sudo apt-key add -
done
IFS=$OLDIFS
sudo apt-get update &&
[ "$?" != "0" ] && {
echo ""
echo "Une erreur s'est produite"
exit 1
}
echo ok ;;
non | n )
echo "Pas de récupération de clef(s).";;
* )
echo "réponse erronée"
question=""
esac
shopt -u nocaseglob
done
} || {
echo "Mise à jour des dépôts effectuée!"
}
exit 0
«C'est pas parce qu'ils sont nombreux à avoir tort qu'ils ont raison!»
Coluche
Hors ligne