Missing server-list.db.sig

Hello everyone,
I have recently installed Ipfire in raspberry pi. Trying to refresh package list it throws this error:

Jul 1 13:11:46 ipfire pakfire: PAKFIRE INFO: IPFire Pakfire 2.29-aarch64 started!
Jul 1 13:11:46 ipfire pakfire: DOWNLOAD STARTED: 2.29-aarch64/lists/server-list.db
Jul 1 13:11:46 ipfire pakfire: DOWNLOAD INFO: Host: pakfire.ipfire.org (HTTPS) - File: 2.29-aarch64/lists/server-list.db
Jul 1 13:11:47 ipfire pakfire: DOWNLOAD INFO: 2.29-aarch64/lists/server-list.db has size of 2336 bytes
Jul 1 13:11:47 ipfire pakfire: DOWNLOAD INFO: HTTP-Status-Code: 200 - 200 OK
Jul 1 13:11:47 ipfire pakfire: DOWNLOAD INFO: File received. Start checking signature…
Jul 1 13:11:47 ipfire pakfire: DOWNLOAD ERROR: The downloaded file (2.29-aarch64/lists/server-list.db) wasn’t verified by IPFire.org. Sorry - Exiting…
Jul 1 13:11:48 ipfire pakfire: TIME INFO: Time Server 174.138.208.0 has -0.002588 sec offset to localtime.
Jul 1 13:11:48 ipfire pakfire: PAKFIRE INFO: Pakfire has finished. Closing.

After some research I found out that server-list.db.sig is missing.

any ideas?

thanks in advance

Hello @ahrafa

Welcome to the IPFire community.

No the file is not missing. It does not exist. All the lists include the signature within themselves. So for the server-list.db the signature is within that file. There are no .sig files for the lists.

Getting the message

The problem that most often causes this message is that your DNS is not working properly.

After installing IPFire did you set up the DNS Web User Interface (WUI) page.

https://www.ipfire.org/docs/installation/step6

Did you leave your ISP DNS servers enabled on that page or did you disable them.
Some ISP’s provide DNS servers that do not support DNSSEC and those will not work with IPFire. IPFire requires DNS servers that support DNSSEC.

Maybe you could provide a screenshot of your DNS Server WUI page.

1 Like

Thanks for the quick reply. here is a screen shot of the dns servers:

So the main status shows Working in green, so that is a good start.

However can you press the button labelled Check DNS Servers. If they are working then you should get a green OK status for each of the lines. If the status is red then hold your mouse over the status and wait for a few seconds and you should get a pop up message with what the problem that IPFire is having with that server.

If they are both green OK then it means that your ISP’s servers are DNSSEC compliant.

1 Like

Not validating status is shown

That means, your ISP’s DNS servers don’t comply to DNSSEC. Add one of the recommended servers from the wiki.
For confidence use Lightning Wire Labs ( the company, which supports IPFire :wink: ).

1 Like

But DNS should not the reason here, because you have got data but you system fail to verify it.

Looks like the file got corrupted somewhere or gpg is not correct initialised or the keyring is corrupt. (Check for zero byte files in the .gpg folders in / and /root/)

2 Likes