Re: GPG errors from apt update

["Sam Morris" <sam@robots.org.uk>]

On Thu, 31 Aug 2006 11:50:44 -0700, Robert Dobbs wrote:
> That key is in debian-keyring, but was not in apt.
> 
> I had to manually add the /usr/share/keyrings/debian-keyring.* keyrings to 
> ~root/.gnupg/gpg.conf, then extract the keys and add with apt-key.
> 
> Shouldn't this be automatic?
> 
> But it does not matter.  I still get the same error on `apt-get update`:
> 
> W: GPG error: http://security.debian.org stable/updates Release: The 
> following signatures were invalid: BADSIG 010908312D230C5F Debian Archive 
> Automatic Signing Key (2006) <ftpmaster@debian.org>
> W: GPG error: http://security.debian.org testing/updates Release: The 
> following signatures were invalid: BADSIG 010908312D230C5F Debian Archive 
> Automatic Signing Key (2006) <ftpmaster@debian.org>

Isn't BADSIG indicative of a bad signature rather than a missing key?

-- 
Sam Morris
http://robots.org.uk/

PGP key id 1024D/5EA01078
3412 EA18 1277 354B 991B  C869 B219 7FDB 5EA0 1078