protonscr

steamlink fails to download update with "bad signature" from pgp

steamclosed
ValveSoftware/steam-for-linux#6840 · opened 2020-01-22 by spexgaelen · updated 2022-05-27 · 3 comments · github
Sspexgaelen 2020-01-22 github

Your system information

  • Steam client version (build number or date): N/A
  • Distribution (e.g. Ubuntu): Raspbian
  • Opted into Steam client beta?: Yes
  • Have you checked for system updates?: Yes

Please describe your issue in as much detail as possible:

Describe what you expected should happen and what did happen. Please link any large code pastes as a Github Gist

Steps for reproducing this issue:

  1. steamlink (at the cli prompt on RaspberryPi running raspbian)
  2. get a failed to download dialog box
  3. read console output:
    gpg: WARNING: unsafe permissions on homedir '/home/pi/.gnupg'
    gpg: WARNING: unsafe permissions on homedir '/home/pi/.gnupg'
    gpg: Signature made Tue 14 Jan 2020 12:55:20 AM EST
    gpg: using RSA key 387C648A24C0E740
    gpg: BAD signature from "Valve Steam Link Release Key [email protected]" [unknown]
  4. app loads anyway, but presumably not having downloaded the latest steamlink/remote-play client

I have tried uninstalling and reinstalling to no effect.
I used the app to contact steam support, but they sent me here.

Sspexgaelen 2020-02-04 github

After plugging away at this a bit more, it seems that your URL is being blocked on my end for some sort of security nonsense. However, the app doesn't seem to know the difference between an intercepted URL and a corrupted download.
When I was able to catch the URL (which wasn't easy, because it is not sent to stdout or stderr, but is only sometimes visible in a window brifely), I was able to download it using https.

http://media.steampowered.com/steamlink/rpi/steamlink-rpi3-1.1.52.121.tar.gz

However, it seems the server is self-signed, so I have to click past a security warning to do so.

And then I had to figure out how to install it so that I didn't wipe out my existing keys. I'm not sure I properly removed the older version. But I did get the newer client running.

Please put this on a properly certified https server, and update the downloads to https.
[And detect the difference between a warning web page and a corrupted tarball, with appropriate error messaging.]

thx -sg

Rrsjuls 2020-10-13 github

I have the exact same issue. Any progress on this?

Kkisak-valve maintainer 2022-05-27 github

Hello @spexgaelen, @rsjuls, if either of you are still experiencing this issue, please use https://steamcommunity.com/app/353380/discussions/6/ for feedback related to the Steam Link for Raspberry Pi app.

Closing as out-of-scope for the Steam for Linux desktop client issue tracker.

Nothing extracted yet.