Whonix workstation update unable to authenticate after multiple attempts, and gateway whonix update suspected cause of deletion of host PGP 64bit linux exe

Updating is documented here:

Operating System Software and Updates - Kicksecure

No I don’t use PGP4USB with whonix I use it on the host on whonix I use KGPG my point is somehow the PGP4USB 64 bit linux exe file (the ONLY one I use) from the many exe files that are there from the zip extraction was some how deleted. That is what I don’t understand what would cause the one exe file that I use on my host to be deleted I don’t know that it has anything to do with whonix update but I do know that it happened after I completed the gateway update.

It is very much unlikely that PGP 64bit linux exe on the host would
influence anything inside Whonix.

Ok I have tried everything the update link suggested and I am still getting the following message:

The following packages will be upgraded:
apt apt-transport-https apt-utils base-files ca-certificates file
libapt-inst1.5 libapt-pkg4.12 libc-bin libc-dev-bin libc6 libc6-dev
libgudev-1.0-0 libjavascriptcoregtk-3.0-0 libldap-2.4-2 libmagic1
libpam-modules libpam-modules-bin libpam-runtime libpam-systemd libpam0g
libpcre3 libperl5.20 libraw10 libssh-gcrypt-4 libsystemd0 libudev1 libvlc5
libvlccore8 libwebkitgtk-3.0-0 libwebkitgtk-3.0-common linux-kbuild-3.16
locales login multiarch-support openvpn passwd perl perl-base perl-modules
rsyslog systemd systemd-sysv tzdata udev vlc vlc-data vlc-nox
vlc-plugin-pulse
49 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 51.1 MB of archives.
After this operation, 958 kB disk space will be freed.
Do you want to continue? [Y/n] y
WARNING: The following packages cannot be authenticated!
base-files login perl libperl5.20 perl-base perl-modules libc6-dev
libc-dev-bin libc-bin libc6 libapt-pkg4.12 apt libudev1 udev libsystemd0
systemd systemd-sysv libpam-systemd libpam0g libpam-modules-bin
libpam-modules libpam-runtime libpcre3 libapt-inst1.5 libldap-2.4-2 file
libmagic1 libgudev-1.0-0 libwebkitgtk-3.0-common libwebkitgtk-3.0-0
libjavascriptcoregtk-3.0-0 libraw10 libssh-gcrypt-4 multiarch-support passwd
tzdata apt-utils rsyslog locales apt-transport-https ca-certificates vlc
vlc-plugin-pulse libvlccore8 vlc-data vlc-nox libvlc5 linux-kbuild-3.16
openvpn

I cannot seem to get it to authenticate I have tried new tor circuits I have tried running the commands suggested and attempting to upgrade again still I can not get the upgrade to authenticate. The upgrade link suggests that if I keep getting this something must be broken what could be causing this?? Any advice??

Thanks

Also when I run a whonix check I get the following message which I don’t normally get:

INFO: Whonix News Result:
√ Up to date: whonix-workstation-packages-dependencies 2.9-1
√ Up to date: Whonix Build Version: 11.0.0.3.0
WARNING: Debian Package Update Check Result: Could not check for software updates! (apt-get code: 125)
Please manually check:
(Open a terminal, Start Menu -> Applications -> System -> Terminal.)
sudo apt-get update && sudo apt-get dist-upgrade

I have never had it be unable to check for new updates.

Just re-run sudo apt-get update as suggested in documentation.

Thank you Patrick but believe me I have tried that many times I am definitely new but I wouldn’t bother posting if the solution posted actually worked for me. When I run commandthat I get the following:

W: GPG error: http://ftp.us.debian.org jessie Release: The following signatures were invalid: BADSIG 8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) ftpmaster@debian.org

Then when I run get update again I get the same thing. It says something about possible man in the middle attacks when it comes to signatures being bad could that be what is happening?

You’re using an outdated version of Whonix which is Debian wheezy based.
In that case, upgrade if that still works or get newer Whonix.

Or you accidentally added a wheezy line to your sources list. In that
case, remove those.

Ok again forgive my the fact I am a Linux noob. I am running Ubuntu 14.04, I was under the noob’s impression that when I update the Whonix packets that I was updating to a newer version of Whonix itself. Do I have to actually download fresh imagines and import them back to VB and then reinstall my chat clients and PGP contacts info?? Do you think that is the problem?? I am totally unfamiliar with Wheezy I don’t know how I would have got it. As the only thing I ever download or change is when there are new whonix packages to install.

Thanks in advance!!

So only command I ever type in is the update command to run the new whonix packages. I don’t know where Wheezy lines would have been added. What do you suggest I do?? Does this happen when you have been running whonix for awhile?? Where it goes outdated and you have to get new images?

whonixcheck Whonix News should inform you when your Whonix version is
outdated.

Wheezy based Whonix is old.

Follow latest important news according to:

Otherwise after so much time passed it creates a mess for everyone.

The upgrading instructions may or may not work. (Since they’re old and
we’re at Whonix 12 already.)

If they don’t work, it’s unsupported. (
Frequently Asked Questions - Whonix ™ FAQ )

So the easiest would be importing new images.

It sounds like because I am running an untested host Ubuntu and VB that the whonix check did not update from 11 to 12. So like the link above says unsupported tasks pile up and one has to eventually manually upgrade. You are correct those instructions do not work. Should I just go to the Whonix website and just download the latest image and install on VB? Is that the best solution since the above does not work??

The host is unrelated here.

whonixcheck doesn’t update. It informs about missing Debian, and Whonix updates.

More complex upgrades such as when Debian requires a suite (wheezy -> jessie) upgrade always required special steps. That’s the case in Debian so Whonix since based on Debian can’t magically make this go away. You’ll find out about that in whonixcheck and by following the news. Once instructions are posted these are working for most people and supported for one month.

As already said, downloading and importing new images would be easiest.

Thank you for you help and patience.

I found a reasonably priced PC that is compatible with Qubes so I hope to try running Whonix on Qubes although I assume it is much more advanced than running it on VB,

LOL just downloaded Whonix 12 and ran it for the first time and same problem gateway works but workstation whonix check gives me this:

NFO: Whonix News Result:
√ Up to date: whonix-workstation-packages-dependencies 2.9-1
√ Up to date: Whonix Build Version: 12.0.0.3.2
WARNING: Debian Package Update Check Result: Could not check for software updates! (apt-get code: 100)
Please manually check:
(Open a terminal, Start Menu -> Applications -> System -> Terminal.)
sudo apt-get update && sudo apt-get dist-upgrade

I ran a manual get update and then ran whonix check again to see if I was up to date and got the same message.

Tried again from a new tor connection and got same message.

Again thanks for your help and patience.

Also noticed when running the gateway although it runs fine it says “Failed to create encrypted swap file” What does that mean?? With all these problems do you think I should just use TBB until I have a laptop I can run Qubes on?

Patrick again thank you for all of your help and time. At this point aside from what is mentioned above when I run sudo apt-get update I get the following order of messages on terminal. Please advise what could be the problem. Again I have tried new tor connections several times. Thanks again

user@host:~$ sudo apt-get update
[sudo] password for user:
Ign http://ftp.us.debian.org jessie InRelease
Get:1 http://mirror.whonix.de jessie InRelease [13.1 kB]
Hit http://security.debian.org jessie/updates InRelease
Ign http://deb.torproject.org jessie InRelease
Get:2 http://mirror.whonix.de jessie/main i386 Packages [41.6 kB]
Err http://ftp.us.debian.org jessie Release.gpg
Connection failed
Hit http://security.debian.org jessie/updates/non-free i386 Packages
Ign http://ftp.us.debian.org jessie Release
Err http://deb.torproject.org jessie Release.gpg
Connection failed
Ign http://ftp.us.debian.org jessie/main i386 Packages/DiffIndex
Hit http://security.debian.org jessie/updates/non-free Translation-en
Ign http://ftp.us.debian.org jessie/contrib i386 Packages/DiffIndex
Hit http://security.debian.org jessie/updates/main i386 Packages
Ign http://ftp.us.debian.org jessie/non-free i386 Packages/DiffIndex
Hit http://security.debian.org jessie/updates/contrib i386 Packages
Hit http://security.debian.org jessie/updates/contrib Translation-en
Ign http://deb.torproject.org jessie Release
Hit http://security.debian.org jessie/updates/main Translation-en
Ign http://mirror.whonix.de jessie/main Translation-en_US
Ign http://mirror.whonix.de jessie/main Translation-en
Ign http://deb.torproject.org jessie/main i386 Packages/DiffIndex
Hit http://ftp.us.debian.org jessie/contrib Translation-en
Hit http://ftp.us.debian.org jessie/main Translation-en
Hit http://ftp.us.debian.org jessie/non-free Translation-en
Hit http://ftp.us.debian.org jessie/main i386 Packages
Hit http://ftp.us.debian.org jessie/contrib i386 Packages
Ign http://deb.torproject.org jessie/main Translation-en_US
Hit http://ftp.us.debian.org jessie/non-free i386 Packages
Ign http://deb.torproject.org jessie/main Translation-en
Hit http://deb.torproject.org jessie/main i386 Packages
Ign http://ftp.us.debian.org jessie/contrib Translation-en_US
Ign http://ftp.us.debian.org jessie/main Translation-en_US
Ign http://ftp.us.debian.org jessie/non-free Translation-en_US
Fetched 13.1 kB in 26s (502 B/s)
W: Failed to fetch http://ftp.us.debian.org/debian/dists/jessie/Release.gpg Connection failed

W: Failed to fetch http://deb.torproject.org/torproject.org/dists/jessie/Release.gpg Connection failed

E: Some index files failed to download. They have been ignored, or old ones used instead.
user@host:~$

Good day,

a solution for the index files problem, may be found here: Security Guide - Whonix

Have a nice day,

Ego

If you have Whonix 12, and the following error.

W: GPG error: http://ftp.us.debian.org
jessie Release: The following signatures were invalid: BADSIG
8B48AD6246925553 Debian Archive Automatic Signing Key (7.0/wheezy) ftpmaster@debian.org

Then you or a script/program you used must have added the wheezy line to either /etc/apt/sources.list file or to a file inside the /etc/apt/sources.list.d folder. That does not happen on itself. Open that file with root rights and remove any unneeded repository.

( Template:Open with root rights - Whonix )

The two files coming with Whonix look like this:

Also noticed when running the gateway although it runs fine it says “Failed to create encrypted swap file” What does that mean??

That it failed to create the encrypted swap file. It’s unrelated. Search what swap is. Search what encryption is. It’s not critical. Please do not post unrelated things in the same thread. Please search the forum before posting. Putting “Failed to create encrypted swap file” into the forum search comes up with that topic.

https://forums.whonix.org/t/failed-to-start-encrypted-swap-file-creator

With all these problems do you think I should just use TBB until I have a laptop I can run Qubes on?

Not every random issue means the end of the world.