Re: How to generate a certificate for an HP printer?

[Charles Curley]

On Sun, 22 Sep 2024 18:02:30 +0200
john doe  wrote:

> >> Even if you upgrade the FW?  
> >
> > I tried upgrading the firmware. I have the latest available,
> > 20201215. 
> 
> I also have a HP.
> After entering credentials it allows me to access the advance
> capabilities of my printer.
> It allows me among other things to renew the selfsigned cert!
> 
> To me, this is build-in! ;^)

I did finally find it.

Networking -> Certificates -> Configure

That gives me several options. I then selected "Create a New
Self-Signed Certificate". That updated the certificate. I now cannot
print on that printer, even after cycling power. If I print over the USB
interface, I hear it spin its wheels, but nothing is printed. I tried
deleting and re-installing it. No go.

Or I could select "Create a Certificate Request" and hit Next. I filled
in the details, hit Next. No complaints from the printer. I then used
copy and paste to save off the cert request. This is a good thing,
because when I hit "Save" I got several requests for Username and
Password in a row. I gave up after the 5th such request.

I'm rather frustrated and annoyed.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: How to generate a certificate for an HP printer?

[john doe]

On 9/22/24 21:02, Charles Curley wrote:

On Sun, 22 Sep 2024 18:02:30 +0200
john doe  wrote:


Even if you upgrade the FW?


I tried upgrading the firmware. I have the latest available,
20201215.


I also have a HP.
After entering credentials it allows me to access the advance
capabilities of my printer.
It allows me among other things to renew the selfsigned cert!

To me, this is build-in! ;^)


I did finally find it.

Networking -> Certificates -> Configure

That gives me several options. I then selected "Create a New
Self-Signed Certificate". That updated the certificate. I now cannot
print on that printer, even after cycling power.


Do you realy need SSL/TLS for a printer, if your network is secured.


If I print over the USB
interface, I hear it spin its wheels, but nothing is printed. I tried
deleting and re-installing it. No go.

Or I could select "Create a Certificate Request" and hit Next. I filled
in the details, hit Next. No complaints from the printer. I then used
copy and paste to save off the cert request. This is a good thing,
because when I hit "Save" I got several requests for Username and
Password in a row. I gave up after the 5th such request.

I'm rather frustrated and annoyed.



A wild guess, would be that the default cert was signed by a trusted CA,
which could explain why it was working out of the box! ;^)

You could use Letsencrypt to sign your CSR, assuming that you can upload
your signed cert to the printer.

I can access my printer via telnet, which is, sometime less frustrating! ;^)

Good luck I guess!

--
John Doe

Re: need jigdo help

[gene heskett]

On 9/22/24 04:42, mick.crane wrote:

On 2024-09-21 20:02, gene heskett wrote:


But burning it, I spotted xfburn in the menu's, looks nice but when
will it actually be able to burn an iso???


If remembering correctly from a while ago had to click in the boxes for 
write speed and some other thing for xfburn to show its defaults, then 
it worked.

(bookworm)
mick

Whoever wrote the error msg should have pointed to that instead of 
claiming burning has not been implemented.


I'll have to give that a try, thanks mick.

.


Cheers, Gene Heskett, CET.
--
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author, 1940)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis

Re: How to generate a certificate for an HP printer?

[Jeffrey Walton]

On Sun, Sep 22, 2024 at 10:03 PM Charles Curley
 wrote:
>
> On Sun, 22 Sep 2024 13:02:26 -0600
> Charles Curley  wrote:
>
> > If I print over the USB
> > interface, I hear it spin its wheels, but nothing is printed. I tried
> > deleting and re-installing it. No go.
>
> I finally solved that one. I changed the driver for the printer. It
> used to work correctly.
>
> In other news, I finally got printing from another machine running.
> I use IPP to the desktop (which has the printer on a USB cable). This
> involved opening both IPP and IPP-client in the firewalls of both the
> server and the client. The two printers that magically appear thanks to
> Avahi/Bonjour are still useless.

I disable most print services, like Bonjour and 9100 printing. I run
my own DNS locally, and it is the source of truth for my network. In
fact, I remove the packages that provide services like Bonjour and
mDNS (when I can). Here's what my Network Config page looks like:
.

> None of these solutions involve using the cert. That does affect the
> embedded web server. Since it is self-signed, I still have to jump
> through a hoop to get to it. Sigh.

You can install a self-signed certificate in your browser's
certificate store, and you will not have to deal with the prompts.

Jeff

Re: How to generate a certificate for an HP printer?

[Jeffrey Walton]

On Sun, Sep 22, 2024 at 3:02 PM Charles Curley
 wrote:
>
> On Sun, 22 Sep 2024 18:02:30 +0200
> john doe  wrote:
>
> > >> Even if you upgrade the FW?
> > >
> > > I tried upgrading the firmware. I have the latest available,
> > > 20201215.
> >
> > I also have a HP.
> > After entering credentials it allows me to access the advance
> > capabilities of my printer.
> > It allows me among other things to renew the selfsigned cert!
> >
> > To me, this is build-in! ;^)
>
> I did finally find it.
>
> Networking -> Certificates -> Configure

Interesting. Previously you said, "Nope. There is no certificate
generator on the printer [web admin page],.."

> That gives me several options. I then selected "Create a New
> Self-Signed Certificate". That updated the certificate. I now cannot
> print on that printer, even after cycling power. If I print over the USB
> interface, I hear it spin its wheels, but nothing is printed. I tried
> deleting and re-installing it. No go.

Use IPP printing. The connection on your workstation will be something
like .

> Or I could select "Create a Certificate Request" and hit Next. I filled
> in the details, hit Next. No complaints from the printer. I then used
> copy and paste to save off the cert request. This is a good thing,
> because when I hit "Save" I got several requests for Username and
> Password in a row. I gave up after the 5th such request.

Jeff

Re: Availability of "Debian GNU/Linux Installation Guide" for OFFLINE use

[David Wright]

On Sat 21 Sep 2024 at 07:03:58 (-0500), Richard Owlett wrote:
> On 09/20/2024 10:57 AM, David Wright wrote:
> > On Fri 20 Sep 2024 at 07:53:28 (-0500), Richard Owlett wrote:
> > > On 09/19/2024 10:04 AM, David Wright wrote:
> > > > On Thu 19 Sep 2024 at 09:16:25 (-0500), Richard Owlett wrote:
> > > > > Is the AMD64 version of "Debian GNU/Linux Installation Guide"
> > > > > available as a single file.
> > > > > 
> > > > > I need it available when the network is not.
> > > > > 
> > > > > It would be convenient if a copy of the menus appearing when
> > > > > installing from DVD1 were available.
> > > > 
> > > > Have you tried googling:
> > > > 
> > > > debian stable installation guide pdf amd64
> > > > 
> > > > which should lead you to:
> > > > 
> > > > https://www.debian.org/releases/stable/amd64/install.en.pdf
> > > 
> > > No ;}
> > > For two primary  reasons:
> > > 1. due to vision/perception problems I avoid PDF in favor of HTML.
> > > SeaMonkey simplifies consistent font size across documents.
> > > 2. My work style uses tabs to group (and save across restarts)
> > > related references conveniently.
> > > 
> > > Secondarily, for those preferring PDF, in my use of SeaMonkey since
> > > days of Squeeze I never noticed mention of its documentation being
> > > available as PDF.
> > 
> > The PDF is ~650kB, but for ~17MB you can get all three formats
> > (PDF/text/HTML) as one file (in the sense it seems you mean) in
> > the Debian package installation-guide-amd64.
> 
> As you didn't give a URL, I went to
> https://html.duckduckgo.com/html?q=%22Debian%22%20%22package%22%20%22installation-guide-amd64%22

URLs aren't a sensible way to refer to Debian packages amongst Debian
users, as we all have the APT tools to locate/download/install them.

> That did not link to "all three formats (PDF/text/HTML) as one file"
> available to one who does not have Debian already installed.

If it linked to a .deb file, then technically that's not true, as .deb
files are just two compressed tar archives (.xz, formerly .gz IIRC)
in an ar archive. But I don't follow why that's of particular concern.

> 1st hit  of "Details of package installation-guide-amd64 in bullseye"
> prompted travel in right direction.
> 
> I've been using Debian since Squeeze. I have never been pointed to
> [ /usr/share/doc ] nor [ /usr/share/doc-base ]. The latter contains
> the "Installation Guide" as uncompressed HTML filed. PDF&text versions
> are there in compressed format.

Since ~woody, and taken here from squeeze's Installation Guide §7.3:

 "Documentation accompanying programs you have installed
  can be found in /usr/share/doc/, un-
  der a subdirectory named after the program (or, more
  precise, the Debian package that contains the
  program). However, more extensive documentation is
  often packaged separately in special documen-
  tation packages that are mostly not installed by
  default. For example, documentation about the pack-
  age management tool apt can be found in the
  packages apt-doc or apt-howto.

 "In addition, there are some special folders within
  the /usr/share/doc/ hierarchy. Linux HOWTOs
  are installed in .gz (compressed) format, in
  /usr/share/doc/HOWTO/en-txt/. After installing
  dhelp, you will find a browsable index of
  documentation in /usr/share/doc/HTML/index.html."

> > Using tabs isn't affected by whether the HTML code itself is in
> > a "single" file or a tree.
> 
> My mention of tabs was to point out why PDF was not useful.

I could expand my mention of tabs to include that you can have
multiple browser tabs showing different parts of one PDF file
in the same way as you can with an HTML file.

> > > Because I'm doing a "from scratch" install for the first time in
> > > several years, I said:
> > > > It would be convenient if a copy of the menus appearing when installing
> > > > from DVD1 were available.
> > 
> > Sorry, I would have thought you could recite them from memory by now :)
> 
> Tell me that with a straight face when you pass 80 ;)!
> [I haven't seen that set of screens in at least 5 years.]

I recalled a "SUCESSFUL INSTALL" [sic] status report from May 2022,
and also thought you had restarted installing about 3 months ago.
Perhaps I was assuming too much.

On Sun 22 Sep 2024 at 06:16:53 (-0500), Richard Owlett wrote:
> On 09/19/2024 09:16 AM, Richard Owlett wrote:
> > Is the AMD64 version of "Debian GNU/Linux Installation Guide"
> > available as a single file.
> > 
> > I need it available when the network is not.

You can download it as a single file or in a tree. See your post:

  https://lists.debian.org/debian-user/2022/04/msg00289.html

> IF you have *already* installed Debian, the individual HTML files and
> compressed copies of the PDF and plain text versions are in
> /usr/share/doc/installation-guide-amd64/en/ .
> 
> I have not found where this would be available to a potential first
> time user of Debian.

I don't see any reason for a first time user wanting all three formats.

Re: How to generate a certificate for an HP printer?

[Charles Curley]

On Sun, 22 Sep 2024 17:56:56 -0400
Jeffrey Walton  wrote:

> >
> > Networking -> Certificates -> Configure  
> 
> Interesting. Previously you said, "Nope. There is no certificate
> generator on the printer [web admin page],.."

Yes, I did. I don't know why I didn't try the Configure button.

One reason I described the path to the correct place above is that the
various pages I found in HP's mess of documentation all provided
different paths, none of which were this one.

> Use IPP printing. The connection on your workstation will be something
> like .

That is indeed the approach I am now taking.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: How to generate a certificate for an HP printer?

[Charles Curley]

On Sun, 22 Sep 2024 13:02:26 -0600
Charles Curley  wrote:

> If I print over the USB
> interface, I hear it spin its wheels, but nothing is printed. I tried
> deleting and re-installing it. No go.

I finally solved that one. I changed the driver for the printer. It
used to work correctly.

In other news, I finally got printing from another machine running.
I use IPP to the desktop (which has the printer on a USB cable). This
involved opening both IPP and IPP-client in the firewalls of both the
server and the client. The two printers that magically appear thanks to
Avahi/Bonjour are still useless.

None of these solutions involve using the cert. That does affect the
embedded web server. Since it is self-signed, I still have to jump
through a hoop to get to it. Sigh.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: How to generate a certificate for an HP printer?

[Max Nikulin]

On 23/09/2024 02:02, Charles Curley wrote:

Networking -> Certificates -> Configure

That gives me several options. I then selected "Create a New
Self-Signed Certificate". That updated the certificate. I now cannot
print on that printer,


It is expected. Why your system should trust some new (and thus unknown) 
certificate having unclear origin?



Or I could select "Create a Certificate Request" and hit Next.


This option is for admins running local Certificate Authority. 
Certificate request must be signed by some Certificate Authority and you 
need to have the root certificate of that Certificate Authority 
installed on your machine.



I'm rather frustrated and annoyed.


Seek for CUPS docs how to install a self-signed certificate that you may 
obtain from your printer.


For system-wide certificate management see
/usr/share/doc/ca-certificates/README.Debian

Perhaps you might disable TLS in your printer configuration, but I have 
no idea what degree of security you wish to have.

[SOLVED] Re: How add key of 3rd party repo?

[Hans]

> > curl -fsSL https://download.jitsi.org/jitsi-key.gpg.key | gpg -o
> > /usr/share/keyrings/jitsy-key.gpg --dearmor
> > No error messages!
> 
> I notice that this is not the same filename as the one in the quote
> further above. The original had 'jitsi-keyring.gpg', and this one has
> 'jitsy-key.gpg' - that's two differences.
> 
> (Also, this command line isn't 'including the prompt'.)
> 

This might be an error by me, as there are several names in the different 
documentations. I rechecked and the names are identical. Maybe a typo here in 
this mail. 
> 
> 
> > And the entry in /etc/apt/sources.list.d/jitsi-stable.list is this:
> > deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg]
> > https://download.jitsi.org stable
> This is referencing the original filename, not the one you used in your
> "no error messages" command.
> 

Yes, this is the required entry of one of the documentations in the web. As I 
mentioned before: There are several different instructions, and they are 
different, as one is for Ubuntu, Ubuntu+Debian and Debian. 

> Does that file exist? If so, what contents does it have? Are they the
> same as the one in the other filename?

Yes, it does exist.

> 
> > Should be all ok, but it isn't.
> 
> If the file named in the sources.list entry doesn't exist (or has the
> wrong contents), then I think that would explain it.

Yes, you are correct, but I rechecked. There is "jitsi-keyring.gpg.key", which 
is from the original jitsi-site, and there is also "jitsi-key.gpg", which is 
from the jitsi-*keyring*.deb (on the original jitsi-meet website), which I 
testwise downloaded manually and installed using dpkg. 

At the moment, there is only one key existent: jitsi-keyring.gpg.key, which is 
acually resides in /usr/share/keyrings/.

But I found the reason! 

The eys are set "rw- --- ---", so they could not read.

This adds another problem: Looks like gpg or sq is setting wrong rights. 

Several minutes ago I discovered another issue: /usr/bin/dpkg was set 
to "rwx r-- r--", what is also wrong. As I did not change this, it must have 
been changed by some upgrade. Had this issue already in 2014 (with a 
mediathekview problem, same reason), 

I suppose, we can safely close this. Thanks for your help, again laerned 
something.

Best regards

Hans

Re: [SOLVED] Re: How add key of 3rd party repo?

[David Wright]

Am Sonntag, 22. September 2024, 19:05:35 CEST schrieb Charles Curley:
> When you do these things, *exactly* what results do you get? Copy and
> paste the entire command line, including the prompt, the results, and
> the next command line prompt.

[ … ]

On Sun 22 Sep 2024 at 20:01:02 (+0200), Hans wrote:
> But I found the reason! 
> 
> The eys are set "rw- --- ---", so they could not read.
> 
> This adds another problem: Looks like gpg or sq is setting wrong rights. 
> 
> Several minutes ago I discovered another issue: /usr/bin/dpkg was set 
> to "rwx r-- r--", what is also wrong. As I did not change this, it must have 
> been changed by some upgrade. Had this issue already in 2014 (with a 
> mediathekview problem, same reason), 
> 
> I suppose, we can safely close this. Thanks for your help, again laerned 
> something.

From the clues left dotted around, my bet is that you've messed up
your system with the way you become root, affecting its umask.

A couple of months ago (and back in 2020), you were exhorting Debian
to set a mask for users of at least 027, and I'm wondering whether,
in your case, it might have been changed to 077 since around one of
those times.

Back in 2014, you had the permissions on dpkg set to -rwxr-x---,
which would correspond to a umask of 027, so perhaps you had already
tightened your system from the Debian default, 022, to 027 by then.

So it now comes down to why system components are getting the user's
umask applied to them. For that, I looked back to 2014 when you seemed
to be a bit more forthcoming with pasting prompts into your posts.
Your first post in the thread¹ starts with:

| Ok, so let’s start as root:
| 
| su -p
| root@protheus2:~# LANG=C mediathekview 

Well, three cases of su are:

  ~$ umask
  0027← the securer default was set for this user.
  ~$ su
  Password: 
  /home/auser# umask
  0022← correct
  /home/auser# 
  exit
  ~$ su -
  Password: 
  ~# umask
  0022← correct
  ~# 
  logout
  ~$ su -p
  Password: 
  ~# umask
  0027← wrong for root
  ~# 
  exit
  ~$ 

So I'm guessing that you've been installing things after having become
root with -p. I don't know whether APT and dpkg can themselves modify
any excessively restrictive umask, and I'm unwilling to test that here.

¹ https://lists.debian.org/debian-user/2014/07/msg00053.html

Cheers,
David.

Re: need jigdo help

[mick.crane]

On 2024-09-21 20:02, gene heskett wrote:


But burning it, I spotted xfburn in the menu's, looks nice but when
will it actually be able to burn an iso???


If remembering correctly from a while ago had to click in the boxes for 
write speed and some other thing for xfburn to show its defaults, then 
it worked.

(bookworm)
mick

Re: How to generate a certificate for an HP printer?

[Alexander V. Makartsev]

On 22.09.2024 02:25, Charles Curley wrote:

I have an HP LaserJet MFP M234sdw printer. I am getting error messages
from CUPS that say something like "cups-pki expired". The certificate
on the printer expired recently.

How do I generate a signed certificate to use in the printer?

There is no mechanism to do so in the printer's firmware.

You can use "easy-rsa" package to create private Certificate Authority 
(CA) and generate signed certificates.
It is a collection of openssl wrapper scripts and is quick and simple to 
use.


--

 With kindest regards, Alexander.

 Debian - The universal operating system
 https://www.debian.org

Re: How to generate a certificate for an HP printer?

[Charles Curley]

On Sun, 22 Sep 2024 18:02:30 +0200
john doe  wrote:

> I also have a HP.
> After entering credentials it allows me to access the advance
> capabilities of my printer.

What credentials? I have a user name and password (which I changed from
the defaults), and have used those to log in. Is there some other set
of credentials I have missed?

> It allows me among other things to renew the selfsigned cert!
> 
> To me, this is build-in! ;^)



-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: How add key of 3rd party repo?

[Charles Curley]

On Sun, 22 Sep 2024 18:44:04 +0200
Hans  wrote:

> I want to install jitsi-meet in Debian 12, but whatever I do, the
> system does not accept the key for the repo.
> 
> There are several ways documented, but none of them is working. And
> some of them are mixed with Ubuntu. But Ubuntu is not debian! This is
> what I tried:
> 
> 1. What the jitsi-site says:
> curl https://download.jitsi.org/jitsi-key.gpg.key | sudo sh -c 'gpg
> --dearmor > /usr/share/ keyrings/jitsi-keyring.gpg'

When you do these things, *exactly* what results do you get? Copy and
paste the entire command line, including the prompt, the results, and
the next command line prompt.

In the line above, is there a typo: should there be a space between
"/share/" and "keyrings"?

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: How to generate a certificate for an HP printer?

[john doe]

On 9/21/24 23:25, Charles Curley wrote:

I have an HP LaserJet MFP M234sdw printer. I am getting error messages
from CUPS that say something like "cups-pki expired". The certificate
on the printer expired recently.



Is it a selfsigned cert?


How do I generate a signed certificate to use in the printer?

There is no mechanism to do so in the printer's firmware.



Even if you upgrade the FW?

--
John Doe

How add key of 3rd party repo?

[Hans]

Dear list, 

I want to install jitsi-meet in Debian 12, but whatever I do, the system does 
not accept the key 
for the repo.

There are several ways documented, but none of them is working. And some of 
them are mixed 
with Ubuntu. But Ubuntu is not debian! This is what I tried:

1. What the jitsi-site says:
curl https://download.jitsi.org/jitsi-key.gpg.key | sudo sh -c 'gpg --dearmor > 
/usr/share/
keyrings/jitsi-keyring.gpg'


2. What debian says:
curl -fsSL https://download.jitsi.org/jitsi-key.gpg.key | sq -o 
/usr/share/keyrings/jitsy-
key.gpg.key dearmor

alternatively

curl -fsSL https://download.jitsi.org/jitsi-key.gpg.key | gpg -o 
/usr/share/keyrings/jitsy-key.gpg 
--dearmor

3.What I also did:
Copied the key to /usr/share/keyrings/

No success.

Copied the key to /etc/apt/trusted.gpg.d/

No success.

4. Full of despair tried "apt-key add" - deprecated!

No success.

What did I wrong? I also downloaded the key from the repository with a browser 
and copied 
them (not using curl or wget in the commandline).

No I am lost, as there are several ways told in th eweb, but mostly Ubuntu 
based and maybe 
not tested for debian. And: all are doing different!

Did I miss something else? Sadly apt-key is gone

Best

Hans

Re: Availability of "Debian GNU/Linux Installation Guide" for OFFLINE use

[Richard Owlett]

On 09/19/2024 09:16 AM, Richard Owlett wrote:
Is the AMD64 version of "Debian GNU/Linux Installation Guide" available 
as a single file.


I need it available when the network is not.


IF you have *already* installed Debian, the individual HTML files and 
compressed copies of the PDF and plain text versions are in

/usr/share/doc/installation-guide-amd64/en/ .

I have not found where this would be available to a potential first time 
user of Debian.




It would be convenient if a copy of the menus appearing when installing 
from DVD1 were available.


Some(all?) of the images are available in the .../img sub-directory 
created when [ 
https://download.tuxfamily.org/debianbegin/the_beginners_handbook.html.tar.gz 
] is downloaded and decompressed.

Re: How to generate a certificate for an HP printer?

[john doe]

On 9/22/24 17:05, Charles Curley wrote:

On Sun, 22 Sep 2024 15:54:09 +0200
john doe  wrote:


On 9/21/24 23:25, Charles Curley wrote:

I have an HP LaserJet MFP M234sdw printer. I am getting error
messages from CUPS that say something like "cups-pki expired". The
certificate on the printer expired recently.



Is it a selfsigned cert?


I think so. The embedded web server says,

By default, a pre-installed self-signed printer certificate is
created to identify this printer. You can change this certificate to
more accurately identify the printer and to update the length of
time the certificate is valid.




How do I generate a signed certificate to use in the printer?

There is no mechanism to do so in the printer's firmware.



Even if you upgrade the FW?


I tried upgrading the firmware. I have the latest available, 20201215.



I also have a HP.
After entering credentials it allows me to access the advance
capabilities of my printer.
It allows me among other things to renew the selfsigned cert!

To me, this is build-in! ;^)

--
John Doe

Re: How to generate a certificate for an HP printer?

[Charles Curley]

On Sun, 22 Sep 2024 15:54:09 +0200
john doe  wrote:

> On 9/21/24 23:25, Charles Curley wrote:
> > I have an HP LaserJet MFP M234sdw printer. I am getting error
> > messages from CUPS that say something like "cups-pki expired". The
> > certificate on the printer expired recently.
> >  
> 
> Is it a selfsigned cert?

I think so. The embedded web server says,

   By default, a pre-installed self-signed printer certificate is
   created to identify this printer. You can change this certificate to
   more accurately identify the printer and to update the length of
   time the certificate is valid.

> 
> > How do I generate a signed certificate to use in the printer?
> >
> > There is no mechanism to do so in the printer's firmware.
> >  
> 
> Even if you upgrade the FW?

I tried upgrading the firmware. I have the latest available, 20201215.

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

Re: How add key of 3rd party repo?

[Hans]

Am Sonntag, 22. September 2024, 19:05:35 CEST schrieb Charles Curley:
> On Sun, 22 Sep 2024 18:44:04 +0200
> 
> Hans  wrote:
> > I want to install jitsi-meet in Debian 12, but whatever I do, the
> > system does not accept the key for the repo.
> > 
> > There are several ways documented, but none of them is working. And
> > some of them are mixed with Ubuntu. But Ubuntu is not debian! This is
> > what I tried:
> > 
> > 1. What the jitsi-site says:
> > curl https://download.jitsi.org/jitsi-key.gpg.key | sudo sh -c 'gpg
> > --dearmor > /usr/share/ keyrings/jitsi-keyring.gpg'
> 
> When you do these things, *exactly* what results do you get? Copy and
> paste the entire command line, including the prompt, the results, and
> the next command line prompt.
> 
> In the line above, is there a typo: should there be a space between
> "/share/" and "keyrings"?

This is an eample:


curl -fsSL https://download.jitsi.org/jitsi-key.gpg.key | gpg -o 
/usr/share/keyrings/jitsy-key.gpg 
--de
armor
No error messages!

Then 

LANG=C apt-get update 
Hit:1 http://deb.debian.org/debian bookworm InRelease 
Hit:2 http://security.debian.org/debian-security bookworm-security InRelease 

Hit:3 http://dl.winehq.org/wine-builds/debian bookworm InRelease 

Hit:4 http://downloads.metasploit.com/data/releases/metasploit-framework/apt 
lucid InRelease 

Hit:5 http://deb.debian.org/debian bookworm-updates InRelease 
   
Hit:6 http://download.opensuse.org/repositories/home:/cabelo/Debian_12  
InRelease 
   
Hit:7 http://deb.debian.org/debian bookworm-backports InRelease 
 
Hit:8 https://linux.teamviewer.com/deb stable InRelease 
 
Hit:9 
http://download.opensuse.org/repositories/home:/uibmz:/opsi:/4.3:/stable/Debian_12
 
 InRelease  
Hit:10 https://fasttrack.debian.net/debian-fasttrack bookworm-fasttrack 
InRelease 
   
Hit:11 https://updates.signal.org/desktop/apt xenial InRelease 
 
Hit:12 https://fasttrack.debian.net/debian-fasttrack bookworm-backports-staging 
InRelease 

Hit:13 https://deb.opera.com/opera-stable stable InRelease  
  
Get:14 https://download.jitsi.org stable/ InRelease [1682 B]
Err:14 https://download.jitsi.org stable/ InRelease 
 The following signatures couldn't be verified because the public key is not 
available: 
NO_PUBKEY B4D2D216F1FD7806 
Output directory /var/lib/debtags/ does not exist 
Reading package lists... Done 
W: GPG error: https://download.jitsi.org stable/ InRelease: The following 
signatures couldn't be 
verified because the pub
lic key is not available: NO_PUBKEY B4D2D216F1FD7806 
E: The repository 'https://download.jitsi.org stable/ InRelease' is not signed. 
N: Updating from such a repository can't be done securely, and is therefore 
disabled by default. 
N: See apt-secure(8) manpage for repository creation and user configuration 
details. 
No key recognized.

And the entry in /etc/apt/sources.list.d/jitsi-stable.list is this:
deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] 
https://download.jitsi.org stable

Should be all ok, but it isn't.

Best

Hans

Re: How add key of 3rd party repo?

[The Wanderer]

On 2024-09-22 at 13:29, Hans wrote:

> Am Sonntag, 22. September 2024, 19:05:35 CEST schrieb Charles
> Curley:
> 
>> On Sun, 22 Sep 2024 18:44:04 +0200
>> 
>> Hans  wrote:
>> 
>>> I want to install jitsi-meet in Debian 12, but whatever I do,
>>> the system does not accept the key for the repo.
>>> 
>>> There are several ways documented, but none of them is working.
>>> And some of them are mixed with Ubuntu. But Ubuntu is not debian!
>>> This is what I tried:
>>> 
>>> 1. What the jitsi-site says:
>>> curl https://download.jitsi.org/jitsi-key.gpg.key | sudo sh -c
>>> 'gpg --dearmor > /usr/share/ keyrings/jitsi-keyring.gpg'
>> 
>> When you do these things, *exactly* what results do you get? Copy
>> and paste the entire command line, including the prompt, the
>> results, and the next command line prompt.
>> 
>> In the line above, is there a typo: should there be a space
>> between "/share/" and "keyrings"?
> 
> This is an eample:
> 
> 
> curl -fsSL https://download.jitsi.org/jitsi-key.gpg.key | gpg -o 
> /usr/share/keyrings/jitsy-key.gpg 
> --dearmor
> No error messages!

I notice that this is not the same filename as the one in the quote
further above. The original had 'jitsi-keyring.gpg', and this one has
'jitsy-key.gpg' - that's two differences.

(Also, this command line isn't 'including the prompt'.)



> And the entry in /etc/apt/sources.list.d/jitsi-stable.list is this:
> deb [signed-by=/usr/share/keyrings/jitsi-keyring.gpg] 
> https://download.jitsi.org stable

This is referencing the original filename, not the one you used in your
"no error messages" command.

Does that file exist? If so, what contents does it have? Are they the
same as the one in the other filename?

> Should be all ok, but it isn't.

If the file named in the sources.list entry doesn't exist (or has the
wrong contents), then I think that would explain it.

-- 
   The Wanderer

The reasonable man adapts himself to the world; the unreasonable one
persists in trying to adapt the world to himself. Therefore all
progress depends on the unreasonable man. -- George Bernard Shaw



signature.asc
Description: OpenPGP digital signature