# Elasticsearch fails to install with Header V4 RSA/SHA1 signature: BAD, key ID d88e42b4 **URL:** \ **Category:** Elasticsearch\ **Created:** [April 3, 2016, 2:04am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146 "2016-04-03T02:04:21Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![ikovalev](https://avatars.discourse-cdn.com/v4/letter/i/3bc359/32.png) [@ikovalev](https://discuss.elastic.co/u/ikovalev)\ **Post date:** [April 3, 2016, 2:04am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/1 "2016-04-03T02:04:21Z")
I am in restricted environment and cannot do rpm --import [https://packages.elastic.co/GPG-KEY-elasticsearch](https://packages.elastic.co/GPG-KEY-elasticsearch) . Therefore I downloaded elasticsearch-2.3.0.rpm from website to install on RedHat 2.6.18-407.el5 #1 SMP Fri Oct 16 12:04:40 EDT 2015 x86\_64 x86\_64 x86\_64 GNU/Linux. I am getting this error: "error: elasticsearch-2.3.0-1: Header V4 RSA/SHA1 signature: BAD, key ID d88e42b4" After that RPM is reported as installed, but this is not true, package is not there. I was using --nogpgcheck and tested yum install or yum localinstall or rpm -ivh . ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [April 3, 2016, 2:06am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/2 "2016-04-03T02:06:34Z")
Why not download the signature as well and then just import from a file? ---
**Author:** ![ikovalev](https://avatars.discourse-cdn.com/v4/letter/i/3bc359/32.png) [@ikovalev](https://discuss.elastic.co/u/ikovalev)\ **Post date:** [April 3, 2016, 2:44am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/3 "2016-04-03T02:44:18Z")
How do I download signature? ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [April 3, 2016, 2:46am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/4 "2016-04-03T02:46:20Z")
`wget https://packages.elastic.co/GPG-KEY-elasticsearch`. ---
**Author:** ![ikovalev](https://avatars.discourse-cdn.com/v4/letter/i/3bc359/32.png) [@ikovalev](https://discuss.elastic.co/u/ikovalev)\ **Post date:** [April 3, 2016, 2:58am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/5 "2016-04-03T02:58:52Z")
I did rpm --import ./GPG-KEY-elasticsearch yum install ./elasticsearch-2.3.0.rpm The same result: error: rpmts\_HdrFromFdno: Header V4 RSA/SHA1 signature: BAD, key ID d88e42b4 Problem opening package elasticsearch-2.3.0.rpm And if I do --nogpgcheck, it reports the same error and does not install. Am I doing something wrong? ---
**Author:** ![ikovalev](https://avatars.discourse-cdn.com/v4/letter/i/3bc359/32.png) [@ikovalev](https://discuss.elastic.co/u/ikovalev)\ **Post date:** [April 3, 2016, 3:21am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/6 "2016-04-03T03:21:16Z")
Checking public keys: rpm -qa gpg-pubkey\*  gpg-pubkey-d88e42b4-52371eca gpg-pubkey-37017186-45761324 [root@webwhgn3l ~]# rpm -qa gpg-pubkey\* --qf "%{name}-%{version}-%{release}-%{summary}\n" gpg-pubkey-d88e42b4-52371eca-gpg(Elasticsearch (Elasticsearch Signing Key) [dev\_ops@elasticsearch.org](mailto:dev_ops@elasticsearch.org))  gpg-pubkey-37017186-45761324-gpg(Red Hat, Inc. (release key) [security@redhat.com](mailto:security@redhat.com)) So, the key from Elastic is there. At the same time: rpm -qi gpg-pubkey-d88e42b4-52371eca-gpg package gpg-pubkey-d88e42b4-52371eca-gpg is not installed And /etc/pki/rpm-gpg/ directory has completely different keys. Sorry, I am confused and do not understand how it is that I can see Elasic key installed and not installed at the same time. ---
**Author:** ![ikovalev](https://avatars.discourse-cdn.com/v4/letter/i/3bc359/32.png) [@ikovalev](https://discuss.elastic.co/u/ikovalev)\ **Post date:** [April 3, 2016, 3:35am UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/7 "2016-04-03T03:35:32Z")
Latest question was resolved: " rpm -qi gpg-pubkey-d88e42b4-52371eca" instead of "rpm -qi gpg-pubkey-d88e42b4-52371eca-gpg" shows that Elastic key is in fact installed. That did not help me with package installation though. ---
**Author:** ![tomi](https://avatars.discourse-cdn.com/v4/letter/t/f4b2a3/32.png) [@tomi](https://discuss.elastic.co/u/tomi)\ **Post date:** [December 21, 2016, 4:51pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/8 "2016-12-21T16:51:31Z")
Hi Not sure if you are still having this issue. for references. I used wget to downaload the package then I run 1. rpm --delsign filebeat-5.1.1-i686.rpm 2. yum localinstall --nogpgcheck filebeat-5.1.1-i686.rpm ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 5, 2017, 10:04pm UTC](https://discuss.elastic.co/t/elasticsearch-fails-to-install-with-header-v4-rsa-sha1-signature-bad-key-id-d88e42b4/46146/9 "2017-07-05T22:04:43Z")