Re: amd64 stable release signature problems?
On Tue, Jul 25, 2006 at 12:19:54PM -0400, Ed L. Cashin wrote:
> Has there been any news about the amd64 BADSIG on the Release file at
> amd64.debian.net?
If you are running etch, why are you still pointing a deb source at
amd64.debian.net at all?
> I checked the archives but didn't see any further followups. I still
> get the error if I include the stable amd64 APT repo in my list of
> sources.
>
> makki:~# cat /etc/apt/sources.list
> deb http://ftp.us.debian.org/debian/ testing main
> deb http://amd64.debian.net/debian-amd64/ stable main
> makki:~# apt-get update
> Get:1 http://ftp.us.debian.org testing Release.gpg [189B]
> Hit http://ftp.us.debian.org testing Release
> Hit http://ftp.us.debian.org testing/main Packages/DiffIndex
> Get:2 http://amd64.debian.net stable Release.gpg [189B]
> Hit http://amd64.debian.net stable Release
> Err http://amd64.debian.net stable Release
>
> Get:3 http://amd64.debian.net stable Release [4813B]
> Ign http://amd64.debian.net stable Release
> Ign http://amd64.debian.net stable/main Packages/DiffIndex
> Hit http://amd64.debian.net stable/main Packages
> Fetched 5003B in 1s (4674B/s)
> Reading package lists... Done
> W: GPG error: http://amd64.debian.net stable Release: The following signatures were invalid: BADSIG E415B2B4B5F5BBED Debian AMD64 Archive Key <debian-amd64@lists.debian.org>
> W: You may want to run apt-get update to correct these problems
>
> ... and ...
>
> makki:~# apt-key list
> /etc/apt/trusted.gpg
> --------------------
> pub 1024R/1DB114E0 2004-01-15 [expired: 2005-01-27]
> uid Debian Archive Automatic Signing Key (2004) <ftpmaster@debian.org>
>
> pub 1024D/4F368D5D 2005-01-31 [expired: 2006-01-31]
> uid Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
>
> pub 1024D/B5F5BBED 2005-04-24
> uid Debian AMD64 Archive Key <debian-amd64@lists.debian.org>
> sub 2048g/34FC6FE5 2005-04-24
>
> pub 1024D/2D230C5F 2006-01-03 [expires: 2007-02-07]
> uid Debian Archive Automatic Signing Key (2006) <ftpmaster@debian.org>
>
>
> I thought maybe there would be a new key out, even though the AMD64
> Archive Key doesn't mention expiration, but I didn't see any Debian
> AMD64 Archive Key in the keyrings here:
>
> http://amd64.debian.net/debian-amd64/doc/debian-keyring.tar.gz
Not sure about this, but I think the simple answer is to just not use
amd64.debian.net anymore.
--
Len Sorensen
Reply to: