<div dir="ltr">Hi,<div><br></div><div>this could be a reappearance of <a href="https://tug.org/pipermail/tex-live/2018-June/041880.html" target="_blank">https://tug.org/pipermail/tex-live/2018-June/041880.html</a> - at least that's the only thing I found.</div><div>When running</div><div><span style="color:rgb(0,0,0);font-family:monospace">sudo tlmgr update --self repository ctan && sudo tlmgr update --list repository ctan && sudo tlmgr update --all repository ctan</span></div><div><span style="color:rgb(0,0,0);font-family:monospace">the last part, i.e., </span>sudo tlmgr update --all repository ctan, fails with a signature verification error.</div><div>The same happens when running sudo tlmgs gui and choosing the standard repository:</div><div><span style="font-family:monospace"><span style="font-weight:bold;color:rgb(84,255,84)">$</span><span style="color:rgb(0,0,0)"> sudo tlmgr gui
</span><br>Lade lokale TeX Live Datenbank
<br> (/usr/local/texlive/2020/tlpkg/texlive.tlpdb)
<br>Dies kann eine Weile dauern, bitte warten ...
<br>… fertig geladen.
<br>
<br>/usr/local/bin/tlmgr: signature verification error of /tmp/PtLG8C2hHU/ce9a6skcVg from <a href="https://ftp.agdsn.de/pub/mirrors/latex/dante/systems/texlive/tlnet/tlpkg/texlive.tlpdb">https://ftp.agdsn.de/pub/mirrors/latex/dante/systems/texlive/tlnet/tlpkg/texlive.tlpdb</a>: cryptographic <br>signature verification of
<br> /tmp/PtLG8C2hHU/DUFXJfBcNh
<br>against
<br> <a href="https://ftp.agdsn.de/pub/mirrors/latex/dante/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc">https://ftp.agdsn.de/pub/mirrors/latex/dante/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc</a>
<br>failed. Output was:
<br>gpg: Signature made Sat May 2 01:58:00 2020 CEST
<br>gpg: using RSA key 4CE1877E19438C70
<br>gpg: BAD signature from "TeX Live Distribution <<a href="mailto:tex-live@tug.org">tex-live@tug.org</a>>" [ultimate]
<br>
<br>Please try from a different mirror and/or wait a few minutes
<br>and try again; usually this is because of transient updates.
<br>If problems persist, feel free to report to <a href="mailto:texlive@tug.org">texlive@tug.org</a>.<br></span></div><div>When running verbose I get the following output:</div><div><span style="font-family:monospace"><span style="font-weight:bold;color:rgb(84,255,84)">$</span><span style="color:rgb(0,0,0)"> sudo tlmgr -v update --all repository ctan </span><br>D:appending to package log file: /usr/local/texlive/2020/texmf-var/web2c/tlmgr.log
<br>D:tlmgr:main: ::tldownload_server not defined
<br>D:setup_programs: preferring system versions
<br>D:program curl found in path
<br>D:program wget found in path
<br>D:program lz4 found in path
<br>D:program gzip found in path
<br>D:program xz found in path
<br>D:Using checksum method digest::sha
<br>D:Testing for gpg in gpg
<br>D: ... gpg ok! [gpg --version >/dev/null 2>&1]
<br>D:gpg command line: gpg --homedir "/usr/local/texlive/2020/tlpkg/gpg" --no-secmem-warning --no-permission-warning --lock-never <br>D:will verify cryptographic signatures
<br>D:TLUtils::_download_file_program: curl <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512</a> /tmp/gN9bcmmBWn/gmlVWaSItB
<br>D:downloading <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512</a> using curl --user-agent texlive/curl --retry 4 --retry-delay 5 --fail --location --con<br>nect-timeout 30 --silent --output
<br>D:download of <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512</a> succeeded
<br>D:TLUtils::download_file: downloading using curl succeeded
<br>D:TLUtils::_download_file_program: curl <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc</a> /tmp/gN9bcmmBWn/eLhZInvK2i
<br>D:downloading <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc</a> using curl --user-agent texlive/curl --retry 4 --retry-delay 5 --fail --location -<br>-connect-timeout 30 --silent --output
<br>D:download of <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512.asc</a> succeeded
<br>D:TLUtils::download_file: downloading using curl succeeded
<br>D:STATUS OUTPUT
<br>[GNUPG:] NEWSIG
<br>[GNUPG:] KEY_CONSIDERED C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC 0
<br>[GNUPG:] SIG_ID QWkGUf40sMBKDtEjtBeFe/QkQpg 2020-05-04 1588554677
<br>[GNUPG:] KEY_CONSIDERED C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC 0
<br>[GNUPG:] GOODSIG 4CE1877E19438C70 TeX Live Distribution <<a href="mailto:tex-live@tug.org">tex-live@tug.org</a>>
<br>[GNUPG:] VALIDSIG D8F2F86057A857E42A88106A4CE1877E19438C70 2020-05-04 1588554677 0 4 0 1 10 01 C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC
<br>[GNUPG:] KEY_CONSIDERED C78B82D8C79512F79CC0D7C80D5E5D9106BAB6BC 0
<br>[GNUPG:] TRUST_ULTIMATE 0 pgp
<br>[GNUPG:] VERIFICATION_COMPLIANCE_MODE 23D:verification succeeded, output:
<br>gpg: Signature made Mon May 4 03:11:17 2020 CEST
<br>gpg: using RSA key 4CE1877E19438C70
<br>gpg: Good signature from "TeX Live Distribution <<a href="mailto:tex-live@tug.org">tex-live@tug.org</a>>" [ultimate]
<br>
<br>D:cryptographic signature of <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512</a> verified
<br>D:verify_checksum: found remote digest
<br> 1f28c9ef4d21ff7c0460ec8074d27dc5a27771295a184bb8532de5c9221852540c3e2df04de3bf21e1a4912823796dc06a45738e0b77a65ff7d774b0b6d6170c
<br>from
<br> /tmp/gN9bcmmBWn/gmlVWaSItB
<br>for
<br> /usr/local/texlive/2020/tlpkg/texlive.tlpdb.3fa7fda404e9c1926412f4d43d381cc7
<br>and
<br> <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet/tlpkg/texlive.tlpdb.sha512</a>
<br>D:tlchecksum(/usr/local/texlive/2020/tlpkg/texlive.tlpdb.3fa7fda404e9c1926412f4d43d381cc7): ===1f28c9ef4d21ff7c0460ec8074d27dc5a27771295a184bb8532de5c9221852540c3e2df04de3bf21e1a4912823796<br>dc06a45738e0b77a65ff7d774b0b6d6170c===
<br>D:verify_checksum: local_digest = 1f28c9ef4d21ff7c0460ec8074d27dc5a27771295a184bb8532de5c9221852540c3e2df04de3bf21e1a4912823796dc06a45738e0b77a65ff7d774b0b6d6170c
<br>D:checksum of local copy identical with remote hash
<br>tlmgr: package repository <a href="http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet">http://packages.oth-regensburg.de/ctan/systems/texlive/tlnet</a> (verified)
<br>D:Automatic backups activated, keeping 1 backups.
<br>tlmgr: saving backups to /usr/local/texlive/2020/tlpkg/backups
<br>D:tlmgr: new pkgs: <br>D:tlmgr: deleted : <br>D:tlmgr: forced : <br>tlmgr: no updates available<br></span></div><div><span style="font-family:monospace"><br></span></div><div><span style="font-family:monospace">Choosing the network directory (i.e., the non-standard source) in the gui application allows me to update packages.</span></div><div><span style="font-family:monospace"><br></span></div><div><font face="monospace">Please let me know if you need more information in order to squash the bug.</font></div><div><font face="monospace"><br></font></div><div><font face="monospace">Cheers,<br>Sebastian</font></div></div>