Tranquil IT Forum

Published: **January 20, 2016 - 10:08 AM**

Good morning,
During package installation, I encountered an invalid key issue. Here are the logs:

•4 - 2016-01-20T10:04:57.320000 - Installation of waptpkg-adobereader (=2015.8.20082-2) (task #4): Exception: Package file C:\wapt\cache\waptpkg-adobereader_2015.8.20082-2_x86.wapt signature is invalid
Traceback (most recent call last):
File "C:\wapt\waptservice\waptservice.py", line 2031, in run
self.running_task.run()
File "C:\wapt\waptservice\waptservice.py", line 1291, in pwrapper
return func(*arg, **kwargs)
File "C:\wapt\waptservice\waptservice.py", line 1351, in run
self._run()
File "C:\wapt\waptservice\waptservice.py", line 1753, in _run
self.result = self.wapt.install(self.packagename,force = self.force)
File "C:\wapt\common.py", line 3720, in install
raise Exception(u'Package file %s signature is invalid' % ensure_unicode(fname))
Exception: Package file C:\wapt\cache\waptpkg-adobereader_2015.8.20082-2_x86.wapt signature is invalid

I have the same issue with a package that I signed for using the command

wapt-get sign-package

However, I have the .crt key in the wapt ssl folder on the client
The packages I'm trying to deploy were made by TIS, though.

Sincerely
Brice

Published: **January 20, 2016 - 4:02 PM**

This means that either the package is not signed, or the certificate (public .crt) located on the client machine in c:\wapt\ssl does not match the private key that signed the package (located on the package management or development machine, by default in c:\private\....pem).

During the initial installation, a private/public key pair is created using the console.
The public key will be distributed to all machines by the waptagent.exe installer.

The private key should not be distributed and will be used when a package is duplicated from an external repository (from the Wapt console, for example) or when a locally created package is signed with wapt-get build-upload or wapt-get sign-package.

Tranquil IT Forum

Invalid signing key

Invalid signing key

Re: Invalid signature key