Debian Bug report logs - #853739
apt: cannot download unauthenticated packages but can install -d them

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#853739: apt: cannot download unauthenticated packages but can install -d them
Reply-To: Thorsten Glaser <[email protected]>, [email protected]
Resent-From: Thorsten Glaser <[email protected]>
Resent-To: [email protected]
Resent-CC: [email protected], APT Development Team <[email protected]>
X-Loop: [email protected]
Resent-Date: Tue, 31 Jan 2017 13:42:04 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: report 853739
X-Debian-PR-Package: apt
X-Debian-PR-Keywords: 
X-Debian-PR-Source: apt
Received: via spool by [email protected] id=B.148587002417818
          (code B); Tue, 31 Jan 2017 13:42:04 +0000
Received: (at submit) by bugs.debian.org; 31 Jan 2017 13:40:24 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.0-bugs.debian.org_2005_01_02
	(2014-02-07) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-13.4 required=4.0 tests=BAYES_00,FOURLA,HAS_PACKAGE,
	URIBL_CNKR,XMAILER_REPORTBUG,X_DEBBUGS_CC autolearn=ham autolearn_force=no
	version=3.4.0-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 14; hammy, 150; neutral, 193; spammy,
	0. spammytokens: hammytokens:0.000-+--H*M:reportbug, 0.000-+--H*MI:reportbug,
	0.000-+--H*x:reportbug, 0.000-+--H*UA:reportbug, 0.000-+--pythonapt
Received: from lixid.tarent.de ([193.107.123.118] helo=mail.lixid.net)
	by buxtehude.debian.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.84_2)
	(envelope-from <[email protected]>)
	id 1cYYfY-0004d2-Dd
	for [email protected]; Tue, 31 Jan 2017 13:40:24 +0000
Received: from localhost (localhost [127.0.0.1])
	by mail.lixid.net (MTA) with ESMTP id 2C0611406D6;
	Tue, 31 Jan 2017 14:40:21 +0100 (CET)
Received: from mail.lixid.net ([127.0.0.1])
	by localhost (mail.lixid.net [127.0.0.1]) (MFA, port 10024) with LMTP
	id N9PLb6udDxF8; Tue, 31 Jan 2017 14:40:21 +0100 (CET)
Received: from tglase.lan.tarent.de (tglase.lan.tarent.de [172.26.3.108])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.lixid.net (MTA) with ESMTPS id 104F2140107;
	Tue, 31 Jan 2017 14:40:21 +0100 (CET)
Received: by tglase.lan.tarent.de (Postfix, from userid 2339)
	id BA2C622071D; Tue, 31 Jan 2017 14:40:20 +0100 (CET)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: Thorsten Glaser <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Message-ID: <148587002062.3822.17415806817114918779.reportbug@tglase.lan.tarent.de>
X-Mailer: reportbug 7.1.4
Date: Tue, 31 Jan 2017 14:40:20 +0100
Delivered-To: [email protected]

Package: apt
Version: 1.4~beta4
Severity: normal

tglase@tglase:~ $ cd /tmp/
tglase@tglase:/tmp $ apt-get download elasticsearch
WARNING: The following packages cannot be authenticated!
  elasticsearch
E: Some packages could not be authenticated
100|tglase@tglase:/tmp $ apt-get download -y elasticsearch
WARNING: The following packages cannot be authenticated!
  elasticsearch
E: Some packages could not be authenticated
100|tglase@tglase:/tmp $ apt-get download -y --force-yes elasticsearch
WARNING: The following packages cannot be authenticated!
  elasticsearch
E: Some packages could not be authenticated
100|tglase@tglase:/tmp $ sudo apt-get install -d elasticsearch
Reading package lists... Done
Building dependency tree
Reading state information... Done
Starting pkgProblemResolver with broken count: 0
Starting 2 pkgProblemResolver with broken count: 0
Done
The following NEW packages will be installed:
  elasticsearch
0 upgraded, 1 newly installed, 0 to remove and 22 not upgraded.
Need to get 27.2 MB of archives.
After this operation, 30.5 MB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
  elasticsearch
Install these packages without verification? [y/N] y
Get:1 https://packages.elastic.co/elasticsearch/2.x/debian stable/main amd64 elasticsearch all 2.4.4 [27.2 MB]
Fetched 27.2 MB in 58s (466 kB/s)
Download complete and in download only mode
tglase@tglase:/tmp $ sudo mv /var/cache/apt/archives/elasticsearch_2.4.4_all.deb .


Yes, I know it’s unauthenticated, but I can’t even get around
it with the bad --force-yes switch (why?). I just want to peek
at the .deb contents, and the idiots who run the repo disabled
browsing it with a webbrowser…

-- Package-specific info:

-- (/etc/apt/preferences present, but not submitted) --


-- (/etc/apt/preferences.d/dash-mksh.pref present, but not submitted) --


-- (/etc/apt/sources.list present, but not submitted) --


-- (/etc/apt/sources.list.d/local.list present, but not submitted) --


-- System Information:
Debian Release: 9.0
  APT prefers unreleased
  APT policy: (500, 'unreleased'), (500, 'buildd-unstable'), (500, 'unstable')
Architecture: x32 (x86_64)
Foreign Architectures: i386, amd64

Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=C, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages apt depends on:
ii  adduser                 3.115
ii  debian-archive-keyring  2014.3
ii  gpgv                    2.1.18-3
ii  init-system-helpers     1.47
ii  libapt-pkg5.0           1.4~beta4
ii  libc6                   2.24-9
ii  libgcc1                 1:6.3.0-5
ii  libstdc++6              6.3.0-5

Versions of packages apt recommends:
ii  gnupg   2.1.18-3
ii  gnupg1  1.4.21-2
ii  gnupg2  2.1.18-3

Versions of packages apt suggests:
pn  apt-doc                      <none>
pn  aptitude | synaptic | wajig  <none>
ii  dpkg-dev                     1.18.21
ii  powermgmt-base               1.31+nmu1
pn  python-apt                   <none>

-- no debconf information

Send a report that this bug log contains spam.