I can not get upgrate by embargo #2686

jyu99 · 2020-12-15T03:51:19Z

jyu99
Dec 15, 2020
Collaborator

03:40:37:0113 FuCommon             reading /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz with 1277 bytes
03:40:37:0113 FuCommon             reading /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz.jcat with 1240 bytes
03:40:37:0113 Jcat                 got 1 PKCS7 signatures
03:40:37:0113 Jcat                 signature failure: failed to verify data for O=Linux Vendor Firmware Project,CN=LVFS CA: Public key signature verification has failed. [-89]
03:40:37:0116 Jcat                 returned signature fingerprint 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
03:40:37:0116 Jcat                 verified: JcatResult:
Timestamp:             2020-12-14T07:06:54Z
Authority:             3FC6B804410ED0840D8F2F9748A6D80E4538BAC2
JcatGpgEngine:
Kind:                gpg
VerifyKind:          signature

03:40:37:0117 FuCommon             writing /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz with 1277 bytes
03:40:37:0117 FuCommon             writing /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz.jcat with 1240 bytes
03:40:37:0117 XbSilo               attempting to load /home/jimmy_yu/Jimmy/Test/var/cache/fwupd/metadata.xmlb
03:40:37:0117 XbSilo               file: 84756e79-0fdb-cc5c-32f1-f5feba944608, current:9520ac98-4cf5-577a-0393-2cef2fce351e, cached: (null)
03:40:37:0117 XbSilo               compiling /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz:ctime=1608003637.116785:func-id=AppStreamUpgrade@3:value=/home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz:value=pixart-embargo…
03:40:37:0117 XbSilo               compiling /home/jimmy_yu/Jimmy/Test/share/fwupd/remotes.d/dell-esrt/metadata.xml:ctime=1608001533.300244:func-id=AppStreamUpgrade@3:value=/home/jimmy_yu/Jimmy/Test/share/fwupd/remotes.d/dell-esrt/metadata.xml:value=dell-esrt…
03:40:37:0117 XbSilo               compiling /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/lvfs/metadata.xml.gz:ctime=1608003598.815897:func-id=AppStreamUpgrade@3:value=/home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/lvfs/metadata.xml.gz:value=lvfs…
03:40:37:0220 FuEngine             505 components now in silo


├─Embargoed for pixart:
│     Remote ID:          pixart-embargo
│     Type:               download
│     Keyring:            jcat
│     Enabled:            true
│     Checksum:           df96e07f787e16f8074052a5662d3571a72ac56f50fa0977da78a5ba1f95a183
│     Age:                3.08m
│     Priority:           1
│     Filename:           /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz
│     Filename Signature: /home/jimmy_yu/Jimmy/Test/var/lib/fwupd/remotes.d/pixart-embargo/metadata.xml.gz.jcat
│     Metadata URI:       https://fwupd.org/downloads/firmware-fddc222bd7a6146f4c4f63296ec6c956365cf171837ec34fc92a5c9c1d7d2082.xml.gz
│     Metadata Signature: https://fwupd.org/downloads/firmware-fddc222bd7a6146f4c4f63296ec6c956365cf171837ec34fc92a5c9c1d7d2082.xml.gz.jcat
│     Report URI:         https://fwupd.org/lvfs/firmware/report
│     Automatic Reporting:false

I had done local vendor-directory. It's all fine for upgrated. Then I try to use pixart-embargo. I can't get the upgrade info
I guess it cause by the pgp verify fail.

Does anyone get this problem before?

superm1 · 2020-12-15T04:41:53Z

superm1
Dec 15, 2020
Maintainer

What host OS? Is this hand compiled fwupd and jcat?

9 replies

hughsie Dec 15, 2020
Maintainer

So the problem was that the PyGnuTLS code was not saving the certificate to the signature -- I've fixed that in https://gitlab.com/fwupd/lvfs-website/-/commit/6659b6b23bfb4589e5359490000d34bbde5caa70 -- just one added line but it took most of today to track down!

With the regenerated admin metadata I now get:

PASSED pkcs7: O=Linux Vendor Firmware Project,CN=LVFS CA
PASSED gpg: 3FC6B804410ED0840D8F2F9748A6D80E4538BAC2

for jcat-tool verify firmware.xml.gz.jcat --public-keys /etc/pki/fwupd-metadata/ -- I'll resign all the metadata remotes now, and that will take a few minutes to complete.

hughsie Dec 15, 2020
Maintainer

@jyu99 I've resigned pixart just now, effective immediate -- same for @superm1 with dell. All the others will regenerate in ~3 hours.

superm1 Dec 15, 2020
Maintainer

Pixart probably needs a new URL since this one was leaked...

hughsie Dec 15, 2020
Maintainer

I think this might be the right time to think about either username/password or username/token for the download of the per-vendor metadata... Agreed?

superm1 Dec 15, 2020
Maintainer

I think between those two I would rather see revokable tokens tied to a user login.

hughsie · 2020-12-15T21:09:39Z

hughsie
Dec 15, 2020
Maintainer

@jyu99 can you also fix the problem specified in https://fwupd.org/lvfs/firmware/6053/problems -- I think that's actually the issue here (although the PKCS thing needed fixing anyway!) -- and with the update protocol set it should just work.

8 replies

jyu99 Dec 17, 2020
Collaborator Author

@hughsie thank your help . I still have a problem. where can I apply the update protocol in LVFS?
or should I upload our plugin to repository in first step?

hughsie Dec 17, 2020
Maintainer

@jyu99 you need to change the protocol to presumably DFU in https://fwupd.org/lvfs/components/7253

jyu99 Dec 17, 2020
Collaborator Author

but if I want set unique update protocol, just like "com.pixart.sdrf.hid", where can I apply ?or I need upload the our plugin via pull request? Let you know our update protocol and then you will help us add into LVFS ?

hughsie Dec 17, 2020
Maintainer

or I need upload the our plugin via pull request

You need to submit your plugin code to fwupd before we can add custom protocols to the LVFS I'm afraid.

jyu99 Dec 17, 2020
Collaborator Author

Thank your reply @hughsie

jyu99 · 2020-12-18T08:52:18Z

jyu99
Dec 18, 2020
Collaborator Author

Is there Any way to get the release version in fu_device_write_firmware function or fu_device_prepare_firmware function ?

0 replies

hughsie · 2020-12-18T09:08:40Z

hughsie
Dec 18, 2020
Maintainer

Any way to get the release version

If the firmware can know the version, you can use fu_firmware_get_version() -- but if you need to know the version in the metainfo.xml file please file a new issue and we can try and support that for you.

0 replies

I can not get upgrate by embargo #2686

Uh oh!

jyu99 Dec 15, 2020 Collaborator

Replies: 4 comments · 17 replies

Uh oh!

superm1 Dec 15, 2020 Maintainer

Uh oh!

hughsie Dec 15, 2020 Maintainer

Uh oh!

hughsie Dec 15, 2020 Maintainer

Uh oh!

superm1 Dec 15, 2020 Maintainer

Uh oh!

hughsie Dec 15, 2020 Maintainer

Uh oh!

superm1 Dec 15, 2020 Maintainer

Uh oh!

hughsie Dec 15, 2020 Maintainer

Uh oh!

Uh oh!

jyu99 Dec 17, 2020 Collaborator Author

Uh oh!

hughsie Dec 17, 2020 Maintainer

Uh oh!

Uh oh!

jyu99 Dec 17, 2020 Collaborator Author

Uh oh!

hughsie Dec 17, 2020 Maintainer

Uh oh!

jyu99 Dec 17, 2020 Collaborator Author

Uh oh!

Uh oh!

jyu99 Dec 18, 2020 Collaborator Author

Uh oh!

hughsie Dec 18, 2020 Maintainer

jyu99
Dec 15, 2020
Collaborator

Replies: 4 comments 17 replies

superm1
Dec 15, 2020
Maintainer

hughsie Dec 15, 2020
Maintainer

hughsie Dec 15, 2020
Maintainer

superm1 Dec 15, 2020
Maintainer

hughsie Dec 15, 2020
Maintainer

superm1 Dec 15, 2020
Maintainer

hughsie
Dec 15, 2020
Maintainer

jyu99 Dec 17, 2020
Collaborator Author

hughsie Dec 17, 2020
Maintainer

jyu99 Dec 17, 2020
Collaborator Author

hughsie Dec 17, 2020
Maintainer

jyu99 Dec 17, 2020
Collaborator Author

jyu99
Dec 18, 2020
Collaborator Author

hughsie
Dec 18, 2020
Maintainer