[Bug 1680261] Re: apt-secure ignoring allow-unauthenticated during apt-update

[David Kalnischkies]

> The allow-unauthenticated did not downgrade all errors relating to signing to warnings.
> If it had, the apt-get update would have included the new packages and it would find
> the packages during an install command, but may not allow installation without explicit
> confirmation. The error resulting from the […]

It is actually the point of --allow-unauthenticated to skip the explicit
confirmation for unauthenticated packages and nothing else since all of
its existence… (because the 'complains' from "update" are new)

I was misreading "--allow-unauthenticated" for "--allow-insecure-
repositories" – but for the record the documentation for the earlier one
explicitly mentions the trusted option (at least in 1.4, not check
earlier).

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/1680261

Title:
  apt-secure ignoring allow-unauthenticated during apt-update

Status in apt package in Ubuntu:
  Invalid

Bug description:
  It appears apt-get update is completely ignoring the allow-
  unauthenticated switch. This initially provided a significant
  roadblock to getting the system to recognize a trusted local
  repository as most literature and posts refer to use of this switch. I
  was able to discover a workaround though the time invested was steep.
  The [trusted=yes] option in sources.list(5) functions correctly and
  will bypass this authentication check. It would be helpful at a
  minimum if the apt --allow-unauthenticated description in the apt-get
  documentation referred to sources.list(5) option trusted=yes with an
  example if this switch is being deprecated.

  Steps for Reproduction.

  Bootup 16.10 LiveCD

  Add to APT Sources
  deb file:/tmp/local/ ./

  Run the command, "apt-get --allow-unauthenticated update"

  Output as follows with no internet connection:

  https://pastebin.com/6h8tiHbN

  *Initial apt-get --allow-unauthenticated update failed due to missing release file.
  Generated generic release file to obtain the above output.

  
  "apt install" for packages included cannot find desired package.

  Local repo was set up via these instructions:
  http://askubuntu.com/questions/170348/how-to-create-a-local-apt-repository

  
  Packages.gz was generated using the below command.
  dpkg-scanpackages ./ | gzip -9c > Packages.gz

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/1680261/+subscriptions