OpenWrt Forum Archive

Topic: Opkg Signature check failed?

The content of this topic has been archived on 22 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi all,

I am facing an issue with updating opkg. My end goal is to install the relayd package. I tried to run "opkg update" and I keep getting the following error of signature check failed.

--/downloads.openwrt.org/snapshots/trunk/mvebu/generic/packages/packages/Packages.sig.
--Signature check failed.
--Remove wrong Signature file.
--Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
--Downloading http://downloads.openwrt.org/snapshots/ … kages.sig.
--Signature check failed.
--Remove wrong Signature file.
--Downloading http://downloads.openwrt.org/snapshots/ … ckages.gz.
--Downloading http://downloads

I searched through the forum topics but I can't quite find an answer as to why my signature file is failing to authenticate. My signature file contains the following information :

--untrusted comment: openwrt.org snapshot build key
--RWSvIveoiFjI6WS/h3J8Us0wUEjA53cQLuHJEwOD/sT5JsGvguZjlKmU

I found the following link mentions my signature file :

https://dev.openwrt.org/browser/branche … ?rev=45974

I am running the designated driver build 15.05 caiman on a Linksys wrt1200AC router.

I downloaded my current image from the build bot website which is mentioned in the openwrt wiki page for my router

https://wiki.openwrt.org/toh/linksys/wrt1200ac

*** Observations ***

I was able to do a opkg update this morning and install Luci, so I don't see why it just stopped working. My router is currently working and has internet connection.

I have two suspicions as to why I am facing this signature validation issue :

1) As of 2 mins ago I tried to open the trunk or the buildbot directory but I keep getting an error saying that the server is down. I have a suspicion that the signature validation issues that I am currently facing are due to the server maintance that is occurring today.

2) The image that I have might be old or not updated? I had downloaded these images last week but I don't know if it is an old build. If this is the case, where can I find the latest STABLE image (not dev) for linksys wrt1200AC or how can I update my signature file to get around this issue?


Can anyone point me in a direction as to how I could validate my suspicions or if anyone else is facing the same issues / has an idea of how to resolve this problem? Any feedback would be much appreciated

Please standby. We are experiencing a hosting issue.

Same here having trouble with "signature check failed" after sysupgrade from snapshot "DD" to stable "CC" on extroot. I did temporary fixed by disabling  "option check_signature 1" through /etc/opkg.conf. Need permanent fix for this either by grabbing new key. I didn't find anywhere on how to fix this.

It looks like the packages directory (https://downloads.openwrt.org/snapshots/) is still having issues. The directory was empty earlier and now the server is totally down. I don't think there is much we can do at this moment except wait and hope that they install the new hard drives soon without any data being lost in the migration. It's too bad that there are no mirror sites that are up (are there?). I would not mind hosting a mirror server if one of the admins gave me a copy of the packages repo.

Still down today I guess. Still getting sig chk failed messages for opkg update.

Still down today I guess. Still getting sig chk failed messages for opkg update.

Any information from the Admins or Mods when this might be fixed? I tried again yesterday, still not working. sad

No timetable, but least a new status message about the situation:
https://forum.openwrt.org/viewtopic.php?id=63045

But you can edit the opkg config in /etc/opkg/distfeeds.conf to one of the mirrors, while waiting.
replace http://downloads.openwrt.org/snapshots/ ... with http://ftp.stw-bonn.de/pub/openwrt/snapshots/ ...
That mirror seems to have approx. February 8th versions. Those are the last ones that buildbot generated.

(Last edited by hnyman on 29 Feb 2016, 16:21)

Ok, I'll give that a try. Been trying to get the ath10K package for 5Ghz so I can continue testing. Haven't been able too...Is this package there? Or is it elsewhere?

(Last edited by FurryNutz on 29 Feb 2016, 16:32)

Ok so i added the 2ndary mirror link to my custom feeds and then commented out the default feeds. I did the opkg update and I get the signature fail so I commended out the line to check signature and get the following:
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Downloading http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz.
Collected errors:
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.
* opkg_download: Failed to download http://ftp.stw-bonn.de/pub/openwrt/snap … ckages.gz, wget returned 8.

Is this still server related and I just need to wait?

Thanks for your time.

Ok I think I had the configuration links malformed. I read some other posts and saw examples of what the links should be like. I was able to get updated with out any errors.

The discussion might have continued from here.