Sign in Start free trial
← Help centre

Why does installation stop with an invalid signature?

Identify whether the installer or downloaded Safenix program failed signature verification and learn the correct next step.

Safenix stops installation when it cannot verify that the downloaded program was signed by Safenix. It installs nothing and deletes the downloaded file. There is nothing to clean up on the server.

Do not bypass the signature check. The check is what confirms that the program being installed is really from Safenix. Continuing despite a failed check would execute a program of uncertain origin as root.

First, identify which component failed

The error message tells you whether the problem is with the installer itself or with the program the installer downloaded.

Problem with the installer

These messages indicate that the installer copy cannot be trusted or used:

  • the signing key pinned in this installer could not be imported
    The installer copy is damaged. Download the installer again.
  • the pinned key does not match the pinned fingerprint
    The installer copy has been altered. Do not use it. Download the installer again from the official source.

Problem with the downloaded program

These messages concern the program downloaded by the installer. Do not work around the error. Report it to security@safenix.eu.

  • THE CHECKSUM MANIFEST IS NOT CORRECTLY SIGNED
    The document listing the programs and their fingerprints does not have a valid signature. The download may have been corrupted, something between the server and Safenix may be modifying the traffic, or the distribution server may have been compromised.
  • THE DOWNLOADED BINARY IS NOT CORRECTLY SIGNED
    The downloaded program does not have a valid signature.
  • THE DOWNLOADED BINARY DOES NOT MATCH THE SIGNED MANIFEST
    The signature is valid, but the downloaded content does not match what was declared.
  • the verified binary reports ... not ...
    The signature is valid, but the program reports a different version from the one requested.

What happens to the server?

In every case above, the installer stops before modifying the system. Nothing is created on the server, and there is nothing to remove or repair from this failed installation attempt.

For an installer error, download the installer again; when the message says the pinned key does not match the pinned fingerprint, use only a copy obtained from the official source. For any downloaded-program error, do not bypass the check and report the exact message to security@safenix.eu.

Still stuck?

If this page did not solve it, write to us and a person answers.

Contact