in reply to CPAN (and CPANPLUS) won't install because of a bad signature.

Do you think that you're downloading from a good URL or one that is trying to inject a trojan SQL::Translator? If you think its a good source, delete Module::Signature and that will "solve" your problem.

Module::Signature has had newline issues in some situations, so it's not always reliable. In the link you gave, it's a problem finding the right key to use. Many people run CPAN without Module::Signature and it's just fine. (Module::Signature has been removed from Bundle::CPAN because of the problems that people have had with it.)

You can also manually download and install SQL::Translator if you don't want to delete Module::Signature.

-xdg

Code written by xdg and posted on PerlMonks is public domain. It is provided as is with no warranties, express or implied, of any kind. Posted code may not have been tested. Use of posted code is at your own risk.

  • Comment on Re: CPAN (and CPANPLUS) won't install because of a bad signature.

Replies are listed 'Best First'.
Re^2: CPAN (and CPANPLUS) won't install because of a bad signature.
by tphyahoo (Vicar) on Aug 21, 2006 at 12:01 UTC
    Thanks for the tip. I used it.

    Matt Trout from DBIC suggested rm -f `perldoc -l Module::Signature` as a nice way to do that.

    Also, when rerunning cpanp...

    Could not find or check module 'Module::Signature' [THIS MAY BE A PROB +LEM!] at /usr/lib/perl5/site_perl/5.8.8/CPANPLUS/Dist.pm line 430 Running [/usr/bin/perl -MCPANPLUS::Internals::Utils::Autoflush Makefil +e.PL ]... Looking for GNU Privacy Guard (gpg), a cryptographic signature tool... GnuPG found (/usr/bin/gpg). Import PAUSE and author keys to GnuPG? [y] n

    The default was yes, I answered no.