GPG error on Nginx repository - NO_PUBKEY

Server NGINX
1

When using the public Nginx repository for Ubuntu, I keep getting these
errors since a week or two back:

W: GPG error: http://nginx.org lucid Release: The following signatures
couldn’t be verified because the public key is not available: NO_PUBKEY
ABF5BD827BD9BF62

This used to work perfectly for me, so I guess some file went missing
when version 1.0.11 was published? Anyone here who can fix this?

Cheers,

/Per

Posted at Nginx Forum:

2

On 22.12.2011, at 14:21, cederberg wrote:

When using the public Nginx repository for Ubuntu, I keep getting these
errors since a week or two back:

W: GPG error: http://nginx.org lucid Release: The following signatures
couldn’t be verified because the public key is not available: NO_PUBKEY
ABF5BD827BD9BF62

Please follow the instructions from:
http://mailman.nginx.org/pipermail/nginx/2011-December/030918.html

This used to work perfectly for me, so I guess some file went missing
when version 1.0.11 was published? Anyone here who can fix this?

‘Release’ file from repository was not signed, so apt-get warn about
unsigned
repo during installation. Now it warn too, but about absent key, so key
import
solve all these problems.

3

Even I was getting this error “W: GPG error: http://nginx.org lucid
Release:
The following signatures couldn’t be verified because the public key is
not
available: NO_PUBKEY ABF5BD827BD9BF62”, so I started searching and
landed
here.

And Yes, that mail thread reply really worked for me.

$ wget http://nginx.org/packages/keys/nginx_signing.key

$ cat nginx_signing.key | sudo apt-key add -
OK

$ apt-get update

$apt-get install nginx

It install version 1.4 which is latest I guess.

Thanks,
Prashant

Posted at Nginx Forum:

4

On 2013-06-27 at 11:41 -0400, B.R. wrote:

The Nginx website’s page http://nginx.org/en/linux_packages.html on Linux
packages provides you with the key file address:
nginx: Linux packages

You mean:
http://nginx.org/keys/nginx_signing.key

(And if you import a file retrieved over plain http straight into your
trust anchors with no further verification, you have other problems).

-Phil

5

On 28 Jun2013, at 10:15 , Phil P. [email protected] wrote:

On 2013-06-27 at 11:41 -0400, B.R. wrote:

The Nginx website’s page http://nginx.org/en/linux_packages.html on Linux
packages provides you with the key file address:
nginx: Linux packages

You mean:
http://nginx.org/keys/nginx_signing.key

(And if you import a file retrieved over plain http straight into your
trust anchors with no further verification, you have other problems).

We’ve added short explanation with links to gpg docs about how
and why pgp signatures should be checked:

http://nginx.org/en/linux_packages.html#signatures

6

Hello,

On Fri, Jun 28, 2013 at 9:27 AM, Sergey B. [email protected] wrote:

http://nginx.org/keys/nginx_signing.key

​You are right… Copy-paste trouble… :o)
​

(And if you import a file retrieved over plain http straight into your
trust anchors with no further verification, you have other problems).

​You are​ right, that what people shall do (and they also shall not
pass).
However, I was merely summing up the steps provided before which were
not
mentioning that either. But you’re right: there is one step missing.

We’ve added short explanation with links to gpg docs about how
and why pgp signatures should be checked:

nginx: Linux packages

​The link to Dewinter’s website is broken.
Maybe would you like to replace it with
http://www.gnupg.org/documentation/howtos.en.html?​

nginx mailing list
[email protected]
nginx Info Page

B. R.

7

On 28 Jun2013, at 21:09 , B.R. [email protected] wrote:

We’ve added short explanation with links to gpg docs about how
and why pgp signatures should be checked:

nginx: Linux packages

​The link to Dewinter’s website is broken.
Maybe would you like to replace it with
GnuPG - HOWTOs

Unfortunately link to gpg minihowto on
GnuPG - HOWTOs also
points to dewinter.com.

8

Hello,

VirtualBox website’s
instructionshttps://www.virtualbox.org/wiki/Linux_Downloadson how to
install their Linux packages provides a great 1-line key adding
command (key not stored in a file, simply piped to the standard input of
apt-key):

wget -q protocol://some.key -O- | sudo apt-key add -

The Nginx website’s page http://nginx.org/en/linux_packages.html on
Linux
packages provides you with the key file address:
http://nginx.org/en/linux_packages.html

To sum-up, here is a quick how-to add the Nginx key to your keyring:

wget -q nginx: Linux packages -O- | sudo apt-key add -

Have a nice day,

B. R.

9

Hello!

On Mon, Jul 01, 2013 at 07:29:20PM +0400, Sergey B. wrote:

Unfortunately link to gpg minihowto on
GnuPG - HOWTOs also
points to dewinter.com.

At least some translations seems to be on www.gnupg.org itself,
and there are other links as well, so it probably worth the
change.

–
Maxim D.
http://nginx.org/en/donation.html