OpenWrt Forum Archive

Topic: opkg signature verification

The content of this topic has been archived between 5 Apr 2018 and 22 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Currently, opkg update fails with a signature verification error:

opkg update
Downloading http://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/base/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_base.
Downloading http://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/base/Packages.sig.
Signature check failed.
Remove wrong Signature file.

I disabled signature verification, updated and reinstalled opkg, hoping it will pull the correct trusted keys but it had no effect.

I also searched for the correct key to install manually with

opkg-key add

but that didn't get me anywhere either (looked on google and using the openwrt.org own search)

Other than disabling signature verification permanently (which works but is insecure) I am out of ideas... anyone got suggestions?

Please try again, the snapshots have just been synced.

Source: https://downloads.openwrt.org/chaos_cal … pgrade.bin

 * opkg_download: Failed to download https://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/base/Packages.sig, wget returned 1.
root@OpenWrt:~# wget https://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/base/Packages.gz -O /dev/null
Connecting to downloads.openwrt.org (78.24.191.177:443)
wget: can't execute 'openssl': No such file or directory

Was working fine with bleeding edge (self-built) pulled May 22nd (wget definitely had SSL capabilities) CHAOS CALMER
r45712 (yeah, I realise that's *past* rc-1).

Only downgraded to get rid of the signature conflict error and access all packages tongue

(Last edited by sfinktah on 2 Jun 2015, 20:03)

I'm experiencing the same issue with RC1. How do I fix this other than disabling signature verification?

root@GateKeeper-OpenWrt:~# opkg update
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/base/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_base.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/base/Packages.sig.
Signature check passed.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/luci/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_luci.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/luci/Packages.sig.
Signature check passed.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/packages/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_packages.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/packages/Packages.sig.
Signature check passed.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/routing/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_routing.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/routing/Packages.sig.
Signature check passed.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/telephony/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_telephony.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/telephony/Packages.sig.
Signature check passed.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/management/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_management.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/management/Packages.sig.
Signature check passed.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.gz.
wget: server returned error: HTTP/1.1 404 Not Found
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.sig.
wget: server returned error: HTTP/1.1 404 Not Found
Signature check failed.
Remove wrong Signature file.
Collected errors:
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.gz, wget returned 1.
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.sig, wget returned 1.
root@GateKeeper-OpenWrt:~#
Cylac wrote:

I'm experiencing the same issue with RC1. How do I fix this other than disabling signature verification?

Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.gz.
wget: server returned error: HTTP/1.1 404 Not Found
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.sig.
wget: server returned error: HTTP/1.1 404 Not Found
Signature check failed.
Remove wrong Signature file.
Collected errors:
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.gz, wget returned 1.
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ramips/rt3883/packages/targets/Packages.sig, wget returned 1.
root@GateKeeper-OpenWrt:~#

Your issue is noted in the known issues for the -rc1 release:

- the targets feed is part of opkg.conf, and will produce warnings. It is safe to remove from /etc/opkg.conf.

So your errors / problem will go away if/when you remove the targets feed from /etc/opkg.conf

(Last edited by DBAA on 3 Jun 2015, 16:35)

I had no repeat of this issue when installing from factory firmware on a wndr3700 (not a v2) about an hour ago.  Signatures were fine aswell (mostly).

wget did still produce the openssl error when executed separately, but opkg worked fine (might have been transient network failure last time). wget worked after an opkg install wget.

i assume it's a busybox symlink OOB or somesuch.

Note that one "repo" (targets) still failed on signature

Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ar71xx/generic/packages/targets/Packages.gz.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05-rc1/ar71xx/generic/packages/targets/Packages.sig.
Signature check failed.
Remove wrong Signature file.
sfinktah wrote:

Source: https://downloads.openwrt.org/chaos_cal … pgrade.bin

 * opkg_download: Failed to download https://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/base/Packages.sig, wget returned 1.
root@OpenWrt:~# wget https://downloads.openwrt.org/snapshots/trunk/ar71xx/generic/packages/base/Packages.gz -O /dev/null
Connecting to downloads.openwrt.org (78.24.191.177:443)
wget: can't execute 'openssl': No such file or directory

Was working fine with bleeding edge (self-built) pulled May 22nd (wget definitely had SSL capabilities) CHAOS CALMER
r45712 (yeah, I realise that's *past* rc-1).

Only downgraded to get rid of the signature conflict error and access all packages tongue

(Last edited by sfinktah on 4 Jun 2015, 20:27)

As of today (6/12/2015) I still have this problem also.
If I remove the sig checks, it 'seems' to work fine, but when you go to software to see what is available, instead of the expected info, every line only says 'Install' but no info on the package name.

Instead of constantly pinging this topic, as I am sure the devs are working on it, is there a b00g tracker like location where we can look at the status of this bug?

Thank,

(Last edited by bdmeyer on 13 Jun 2015, 05:34)

I just installed the latest OpenWRT in a wrt610n-v2.

Seems to be working, and I used ssh to modify the network configuration, so the router is able to access Internet (ping to any host, etc.).

Now I try to install lucy, so I do opkg update

and I get:

Package git version  libc, confuse, libftdi1 has no valid architecture, ignoring.
Package glpsol version gst1app, libgst1app, - has no valid architecture, ignoring.
Package kamailio4-mod-db-sqlite version 4.3.0-2 has no valid architecture, ignoring.
Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_base.
Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
Premature end of file
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_luci.
Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
Premature end of file
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_management.
Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
Premature end of file
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_packages.
Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
Premature end of file
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_routing.
Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_telephony.
Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
Premature end of file
Signature check failed.
Remove wrong Signature file.
Segmentation fault


If I remove signature checking it seems to work, but then when I do opkg install luci, I get

Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hid version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package mod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fuse version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-hwmon-adt7410 version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gre version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-fs-fscache version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-pca953x version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package 2.7c kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
Package kmod-gpio-beeper version 3.18.19-1 has no valid architecture, ignoring.
....

What I'm doing wrong ?

Do you really need to use trunk?
If you use trunk, I think you really should be building your own packages, otherwise you should be using a release or RC build.
Trunk can change at anytime, but release's are consistent, and the package repo will remain consistent with that release version.

Just downloaded 15.05 release and compiled a new image.

Mentioned signature check failure is still there.

Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/telephony/Packages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/packages/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_packages.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/packages/Packages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/routing/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_routing.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/routing/Packages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/luci/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_luci.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/luci/Packages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/management/Packages.gz.
Updated list of available packages in /var/opkg-lists/chaos_calmer_management.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/management/Packages.sig.
Signature check failed.

What can be done in this case?

(Last edited by holod on 11 Sep 2015, 15:22)

I am experiencing the same problem, however I am daring to say that the public build is signed with the wrong key.

If you check the content of https://downloads.openwrt.org/chaos_cal … ckages.sig

untrusted comment: signed by key 53bad1233d4c98c5
RWRTutEjPUyYxZYw7xID3kuFM2QZQCfQ5yJTcEDw2iN5wPD875xgt7n9HcqfjkdOyQtrHlPM1KhwsIUDsfYVDLF3eYyIeTPsJgU=

Then looking at the contents of /etc/opkg/keys in the filesystem of https://downloads.openwrt.org/chaos_cal … xt4.img.gz
you will see file 53bad1233d4c98c5 contains this:

untrusted comment: Local build key
RWRTutEjPUyYxcuFKuF19hS8WfHi09AkVhK33KMQPri/dFG9PhEzDtMH


So the packages weren't signed with the release key but a local build key. How can we notify of this??

I have same issue.
i tried option check_signature 0 but that doesnt work. how to fix this?

Same issue. After compilling openwrt firmware, cant install opkg software.

I doownloaded the basefiles package from 15.05 release and installed it. That installed the new key to /etc/opkg/keys directory. I copied that key file to my own build environment and included that to my own build.

I also complained to developers and they promised to include the wrong new key in cc15.05 svn source repo, but that is probably still undone

From comment 11above:

you will see file 53bad1233d4c98c5 contains this:

untrusted comment: Local build key
RWRTutEjPUyYxcuFKuF19hS8WfHi09AkVhK33KMQPri/dFG9PhEzDtMH

Create that file with editor and place it in /etc/opkg/keys
Either as custom file or placed to base-files sources on your buildroot.
You can naturally also create it in the live router so that opkg uses it.
There may also be different keys used for different platforms, so there mvebu may differ from ar71xx key.

Thank you.
i already had the key file. but it had wrong "untrusted comment:" in it.
changed it so it macthes your example. works.

thanks again! big_smile

I have another problem.
When i try to install some packages it get the following message:

Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-conntrack and kmod-ipt-conntrack) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ipt-core and kmod-ipt-core) providing same name marked HOLD or PREFER. Using latest.
Multiple packages (kmod-ip6tables and kmod-ip6tables) providing same name marked HOLD or PREFER. Using latest.
satisfy_dependencies_for: Cannot satisfy the following dependencies for .....
satisfy_dependencies_for: Cannot satisfy the following dependencies for freifunk-p2pblock:
 *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) * 
 * opkg_install_cmd: Cannot install package freifunk-p2pblock.



Multiple packages (kmod-crypto-core and kmod-crypto-core) providing same name marked HOLD or PREFER. Using latest.
* satisfy_dependencies_for: Cannot satisfy the following dependencies for kmod-fs-ext4:
 *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) *     kernel (= 3.18.20-1-d18786f7b70aa80793e6f77c59ad223e) * 
 * opkg_install_cmd: Cannot install package kmod-fs-ext4.

i tried to force the install of the ext4 module. it was installed. but mounting fails with unknown error -1

uname -r
3.18.21
Whats wrong here?

//edit

I flashed firmware from  https://downloads.openwrt.org/chaos_cal … u/generic/
and uname -r shows 3.18.20

i compiled my build with this source git clone git://git.openwrt.org/15.05/openwrt.git
why is uname -r showing 3.18.21 here?

I completely new to openwrt building. sorry for stupid questions. i only want to use cake with sqm.

(Last edited by shm0 on 12 Sep 2015, 18:18)

IF you check the sources repo, you will notice that 318 kernel saa updated yesterday from .20 to 21.

http://git.openwrt.org/?p=15.05/openwrt.git;a=shortlog

New builds will have the New kernel.
You should include all the needed kernel modules into your firmware build.

(Last edited by hnyman on 12 Sep 2015, 18:50)

No.
The release is done. But the 15.05 stable branch will get bug fixes and new kernel versions, so that new builds have the fixes. Some time in future the devs may compile and release 15.05.1

.

Thank you for clearing this up!

I'm getting the same issue on my Onion Omega, trying to run opkg update.  The error is:

Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base/Packages.gz.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base/Packages.sig.
Signature check failed.
Remove wrong Signature file.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/packages/Packages.gz.
Downloading http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/packages/Packages.sig.
Signature check failed.
Remove wrong Signature file.
Collected errors:
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base/Packages.gz, wget returned 4.
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/base/Packages.sig, wget returned 4.
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/packages/Packages.gz, wget returned 4.
 * opkg_download: Failed to download http://downloads.openwrt.org/chaos_calmer/15.05/ar71xx/generic/packages/packages/Packages.sig, wget returned 4.

My /etc/opkg/keys/53bad1233d4c98c5 used to contain.

untrusted comment: openwrt.org 15.05 release key
RWRTutEjPUyYxcuFKuF19hS8WfHi09AkVhK33KMQPri/dFG9PhEzDtMH

...but I changed it as per this thread to:

untrusted comment: Local build key
RWRTutEjPUyYxcuFKuF19hS8WfHi09AkVhK33KMQPri/dFG9PhEzDtMH

...but I'm still getting the same errors. What am I doing wrong?

I found solution here (http://www.karl.idv.hk/?p=1524):
=====================================
In order to get the verification work for self-made packages, following below steps to generate key files and sig file:

Generate a private and public key files:
usign -G -s mime.key -p mime.pub
Add mime.pub file into opkg’s keys:
opkg-key add mime.pub
Using private key file to generate signature file for Packages
usign -S -m Packages -s mime.key -x Packages.sig
Put Packages and Packages.sig into the repository packages folder
Run opkg update to versify whether it accepts your feed
======================================

It works for me (openwrt 15.05)

(Last edited by abakan4222 on 25 Oct 2015, 23:54)

abakan4222 wrote:

In order to get the verification work for self-made packages

Sorry if I'm misunderstanding this but the package with the issue is chaos_calmer rather than my own package?

beth wrote:
abakan4222 wrote:

In order to get the verification work for self-made packages

Sorry if I'm misunderstanding this but the package with the issue is chaos_calmer rather than my own package?

Hmm. Do you use external flash drive as root of openwrt system?
If so, you try this:
Turn off your router.
Disconect all flash drives from your router.
Boot (flash drives disconected) and run:
root@OpenWrt:/tmp#opkg update
Will you get error?

(Last edited by abakan4222 on 29 Oct 2015, 23:54)