Re: amd64 stable release signature problems?

["Ed L. Cashin" <ecashin@coraid.com>]

Goswin von Brederlow <brederlo@informatik.uni-tuebingen.de> writes:

> Jo Shields <jo.shields@comlab.ox.ac.uk> writes:
> 
> > Török Edvin wrote:
> >> Hi,
> >>
> >> Today I got this error while running `aptitude update`:
> >>
> >> W: GPG error: http://amd64.debian.net stable Release: The following
> >> signatures were invalid: BADSIG E415B2B4B5F5BBED Debian AMD64 Archive
> >> Key <debian-amd64@lists.debian.org>
...
> Doh, it is BADSIG. That means the signature in Release.gpg does not
> match the Release file. Doesn't matter who signed it or if the key is
> known, it is just broken.
> 
> 
> Ganneff, can you check this and comment?

Has there been any news about the amd64 BADSIG on the Release file at
amd64.debian.net?

I checked the archives but didn't see any further followups.  I still
get the error if I include the stable amd64 APT repo in my list of
sources.

  makki:~# cat /etc/apt/sources.list
  deb http://ftp.us.debian.org/debian/ testing main
  deb http://amd64.debian.net/debian-amd64/ stable main
  makki:~# apt-get update
  Get:1 http://ftp.us.debian.org testing Release.gpg [189B]
  Hit http://ftp.us.debian.org testing Release       
  Hit http://ftp.us.debian.org testing/main Packages/DiffIndex
  Get:2 http://amd64.debian.net stable Release.gpg [189B]
  Hit http://amd64.debian.net stable Release
  Err http://amd64.debian.net stable Release
    
  Get:3 http://amd64.debian.net stable Release [4813B]
  Ign http://amd64.debian.net stable Release
  Ign http://amd64.debian.net stable/main Packages/DiffIndex
  Hit http://amd64.debian.net stable/main Packages
  Fetched 5003B in 1s (4674B/s)
  Reading package lists... Done
  W: GPG error: http://amd64.debian.net stable Release: The following signatures were invalid: BADSIG E415B2B4B5F5BBED Debian AMD64 Archive Key <debian-amd64@lists.debian.org>
  W: You may want to run apt-get update to correct these problems

... and ...

  makki:~# apt-key list
  /etc/apt/trusted.gpg
  --------------------
  pub   1024R/1DB114E0 2004-01-15 [expired: 2005-01-27]
  uid                  Debian Archive Automatic Signing Key (2004) <ftpmaster@debian.org>
  
  pub   1024D/4F368D5D 2005-01-31 [expired: 2006-01-31]
  uid                  Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
  
  pub   1024D/B5F5BBED 2005-04-24
  uid                  Debian AMD64 Archive Key <debian-amd64@lists.debian.org>
  sub   2048g/34FC6FE5 2005-04-24
  
  pub   1024D/2D230C5F 2006-01-03 [expires: 2007-02-07]
  uid                  Debian Archive Automatic Signing Key (2006) <ftpmaster@debian.org>
  

I thought maybe there would be a new key out, even though the AMD64
Archive Key doesn't mention expiration, but I didn't see any Debian
AMD64 Archive Key in the keyrings here:

  http://amd64.debian.net/debian-amd64/doc/debian-keyring.tar.gz

-- 
  Ed L Cashin <ecashin@coraid.com>