Opkg update error: "Failed to decode signature"

[Hefeier]

Hello OpenWrt Experts.
I am a newbie in Openwrt, and I am trying to setup passwall (Netgear 6250, Fresh install OpenWrt 21.02.0 r16279-5cc0535800).
I found a binary distribution of passwall and followed the instructions. I got the Error message "Failed to decode signature" and subsequently "Signature check failed". I tried a few fixes I found in the forum, but with no luck.

Can anybody give me some directions?

Thank you!

root@OpenWrt:~# opkg update
Downloading https://osdn.net/projects/openwrt-passwall-build/storage/releases/21.02.0/packages/arm_cortex-a9/passwall/Packages.gz
Updated list of available packages in /var/opkg-lists/passwall
Downloading https://osdn.net/projects/openwrt-passwall-build/storage/releases/21.02.0/packages/arm_cortex-a9/passwall/Packages.sig
Failed to decode signature
Signature check failed.
Remove wrong Signature file.
Downloading https://downloads.openwrt.org/releases/21.02.0/targets/bcm53xx/generic/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_core
Downloading https://downloads.openwrt.org/releases/21.02.0/targets/bcm53xx/generic/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/base/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_base
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/base/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/luci/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_luci
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/luci/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/packages/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_packages
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/packages/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/routing/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_routing
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/routing/Packages.sig
Signature check passed.
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/telephony/Packages.gz
Updated list of available packages in /var/opkg-lists/openwrt_telephony
Downloading https://downloads.openwrt.org/releases/21.02.0/packages/arm_cortex-a9/telephony/Packages.sig
Signature check passed.

[hnyman]

Did you try asking the author of that private download repo?
We have no idea how they have signed their package list.

(As they do not have the official private signing key, you likely need at least their public key in order to be able to decode/verify it)

[Hefeier]

Thanks for the hint, I will contact the author. Once I get the their certificate, how do I enter it in OpenWrt?

[hnyman]

When you get their public key, you should add it to the key directory.
/etc/opkg/keys, if I remember right.

[Hefeier]

I resolved this topic with the author. Only for information for people with a similar issue: The root cause was the forwarding of the download request to a mirror server. I found the mirror server link by downloading a random file and tracing its origin. Then I adjusted the download paths.