Received: from mail-qv1-f53.google.com (mail-qv1-f53.google.com [209.85.219.53]) by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 505F6782BB8 for <~alpine/apk-tools@lists.alpinelinux.org>; Thu, 11 Jun 2020 15:24:24 +0000 (UTC) Received: by mail-qv1-f53.google.com with SMTP id e20so2814102qvu.0 for <~alpine/apk-tools@lists.alpinelinux.org>; Thu, 11 Jun 2020 08:24:24 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=ukymi5kpkDUG9Q26fASmhBYz2Pf6uxqVzs96B35Wwug=; b=TkOl9n1NdskDZ6DafVqrgPt6eAZ7Q5gqmjyHR8s6RjO7tf8tS/k7+EoWaoOrxfDp0k UsV7qtfcvzYLQpcvuyjwCJS/XCVUg385SGrcrhgNi7AFKWD18qqg4iVgVYMrbFzQk9q0 lat9kcvnibLxuDSMS1XVjXSnZn8noe3w8PPzXf17H6K3OgAzmE3Gsby1E0aQlQjHt955 G7hytH7P2ClxDnW6v/geJH/Xjui5CHYJBNKH4y5E/6OwLbSyI2EDRQHtZVeTRxCD26gp q/zQXWIaIws60SPqk7gBznFLB9L/h+qkDY7H68BXoTdkT5KJHGJug5mTeTLcrNTq5TwF sdGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=ukymi5kpkDUG9Q26fASmhBYz2Pf6uxqVzs96B35Wwug=; b=ngJ1grISZhHLzK+rQC7Um+f12TK29MmfGnZVhUlnCYYWVhGdv5bC3t5oysy0IE2efg x3yzwzYLs24M4kO/aGwII7gaHQrXKBkyFjlevsVya2iToRuW+N8DmPuvOPijuqZb9L1n ZpPrZKS5rKPkolwFGIMlqPnqG51t7yA7RN6L1J/Cc3k+kLBz4g+D4Q1jSbItfbjGXE2q U67y69yu6VkoJGOWicBJXgPzRWpzzdTRlbY1laLT36VfAwAqL0eqWCdQw0BK3bGEaPB2 EpiU+I+toOWB189t3MxgaJLpRjnBQsfEMcQmVgFBvDEnEoQf8/x1znDwFxaYkkV9pGGU 9m2w== X-Gm-Message-State: AOAM531FCn9lqQLFUseMKHGPH2y66xoavyVS/BY/9GEG3YblYupQxm2u A+jWnGjZknyulYYX1YtmY1bF7rizHZf5QmIVGdnEL6Xp X-Google-Smtp-Source: ABdhPJxqYsg7gSzlijo2kUC6hp4zvS7J8UFkLlP2kQmeuQgUzPTN7n7//RDV5V6ng8ZhcUzgBky37ilL5ymVbwRzmK4= X-Received: by 2002:a05:6214:144:: with SMTP id x4mr8021933qvs.229.1591889062923; Thu, 11 Jun 2020 08:24:22 -0700 (PDT) MIME-Version: 1.0 From: CJ Ess Date: Thu, 11 Jun 2020 11:24:12 -0400 Message-ID: Subject: Periodic BAD SIGNATURE issue To: ~alpine/apk-tools@lists.alpinelinux.org Content-Type: multipart/alternative; boundary="0000000000001e125905a7d08ef0" --0000000000001e125905a7d08ef0 Content-Type: text/plain; charset="UTF-8" I am periodically getting BAD SIGNATURE errors from apk when installing packages. I'm not sure what makes the errors start or stop, however I am able to download and verify the package with curl and apk verify it while still getting the error from apk add. I can also download the index with curl and it looks alright after unpacking though I don't know how to verify it. I do know that neither the index nor package change when the BAD SIGNATURE errors start or stop. Is there any way to get debugging or trace output from APK that might shed some light? This seems to be a common issue just looking at Google results, I see it reported frequently, but the issues are always closed with no resolution because it is not possible to reproduce the issue at will. --0000000000001e125905a7d08ef0 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
I am periodically getting BAD SIGNATURE errors from apk wh= en installing packages.

I'm not sure what makes the = errors start or stop, however I am able to download and verify the package = with curl and apk verify it while=C2=A0still getting the error from apk add= .

I can also download the index with curl and it l= ooks alright after unpacking though I don't know how to verify it.=C2= =A0

I do know that neither the index nor package c= hange when the BAD SIGNATURE errors start or stop.

Is there any way to get debugging or trace output from APK that might shed= some light?

This seems to be a common issue just = looking at Google results, I see it reported frequently, but the issues are= always closed with no resolution because it is not possible to reproduce t= he issue at will.

--0000000000001e125905a7d08ef0--