# Workaround for broken pgp signature on es 1.7.6 debian repo

**URL:** <https://discuss.elastic.co/t/workaround-for-broken-pgp-signature-on-es-1-7-6-debian-repo/193547>\
**Category:** Elasticsearch\
**Created:** [August 2, 2019, 1:43pm UTC](https://discuss.elastic.co/t/workaround-for-broken-pgp-signature-on-es-1-7-6-debian-repo/193547 "2019-08-02T13:43:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jillesvangurp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jillesvangurp/32/3863_2.png) [@jillesvangurp](https://discuss.elastic.co/u/jillesvangurp)\
**Post date:** [August 2, 2019, 1:43pm UTC](https://discuss.elastic.co/t/workaround-for-broken-pgp-signature-on-es-1-7-6-debian-repo/193547/1 "2019-08-02T13:43:11Z")

</div>

I just tried to rebuild some AMIs for our very outdated 1.7 cluster and discovered that our ansible scripts now fail with a signature error on the elastic repo which used to work as documented here:  
[https://www.elastic.co/guide/en/elasticsearch/reference/1.7/setup-repositories.html](https://www.elastic.co/guide/en/elasticsearch/reference/1.7/setup-repositories.html)

The error I'm getting is:

```
==> null: W: GPG error: http://packages.elastic.co/elasticsearch/1.7/debian stable Release: The following signatures were invalid: 46095ACC8548582C1A2699A9D27D666CD88E42B4
==> null: E: The repository 'http://packages.elastic.co/elasticsearch/1.7/debian stable Release' is not signed.

```

To work around this, I simply curled the package and used dpkg -i to install it.

```
curl -L -O https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-1.7.6.deb
dpkg -i elasticsearch-1.7.6.deb

```

If anyone has a better solution for this, I'd be interested to know. Any Elastic people reading this, please update the documentation for this or fix the signature; probably there are some more people getting stuck on this. Also, I think this may affect other packages as well.

For reference, here's my ansible code with the old way of installing commented out.

```
  # - name: Install es add-apt-repostory
  # become: yes
  # apt: name=software-properties-common state=latest
  # - name: Add es apt key
  # become: yes
  # apt_key: url=https://packages.elastic.co/GPG-KEY-elasticsearch state=present
  # - name: Add es Repository
  # become: yes
  # apt_repository: repo='deb http://packages.elastic.co/elasticsearch/1.7/debian stable main' state=present
  # - name: Install ES 1.7.x
  # become: yes
  # apt: name=elasticsearch state=present allow-unauthenticated=true
  # NOTE official repo signature no longer works so working around it by installing using dpkg; should be the same package as before
  - name: download es deb package
    get_url:
      url: https://download.elastic.co/elasticsearch/elasticsearch/elasticsearch-1.7.6.deb
      dest: /tmp/elasticsearch-1.7.6.deb
  - name: install the es deb
    shell: dpkg -i /tmp/elasticsearch-1.7.6.deb
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 30, 2019, 1:43pm UTC](https://discuss.elastic.co/t/workaround-for-broken-pgp-signature-on-es-1-7-6-debian-repo/193547/2 "2019-08-30T13:43:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.