You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The documentation includes unnecessary steps to download the GPG public key into /etc/apt/keyrings/ as a binary file. The current best practice is to use and ASCII public key in /etc/apt/trusted.gpg.d/ See the deprecation warning below. The public key is already stored as ASCII in https://inverse.ca/downloads/GPG_PUBLIC_KEY There is no reason to convert it to binary.
W: http://inverse.ca/downloads/PacketFence/debian/14.1/dists/bookworm/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
The current documentation says to use the command below. However, the upgrade script removes the [signed-by stanza]. So there's the potential to create an issue where the update can't be downloaded. If the public key is in /etc/apt/trusted.gpg.d/ it's already trusted and doesn't need to be in the packetfence.list file.
The command in the documentation under 4.3.3. Software Installation->Debian-based systems should be curl -fsSL https://inverse.ca/downloads/GPG_PUBLIC_KEY > /etc/apt/trusted.gpg.d/packetfence.asc
[signed-by=/etc/apt/keyrings/packetfence.gpg] should be removed from /etc/apt/sources.list.d/packetfence.list
The PacketFence upgrade script should delete any packetfence*.gpg files in /etc/apt/keyrings/ and the default key ring (apt-key list).
The installation and upgrade scripts should automatically download that file to /etc/apt/trusted.gpg.d/ if it doesn't already exist.
B.
Documentation command is left as is
Upgrade and install scripts modified to insert [signed-by=/etc/apt/keyrings/packetfence.gpg] into /etc/apt/sources.list.d/packetfence.list.
If /etc/apt/keyrings/packetfence.gpg doesn't exist it should be automatically downloaded.
The commands used for Security Onion and the PF Connector probably also need to be updated
The text was updated successfully, but these errors were encountered:
Describe the bug
Expected behavior
One of either options below:
A.
curl -fsSL https://inverse.ca/downloads/GPG_PUBLIC_KEY > /etc/apt/trusted.gpg.d/packetfence.asc
[signed-by=/etc/apt/keyrings/packetfence.gpg]
should be removed from /etc/apt/sources.list.d/packetfence.listB.
[signed-by=/etc/apt/keyrings/packetfence.gpg]
into /etc/apt/sources.list.d/packetfence.list.The commands used for Security Onion and the PF Connector probably also need to be updated
The text was updated successfully, but these errors were encountered: