Re: W: GPG error: http://mirrors.mydomain.com testing Release: The following signatures were invalid: BADSIG AED4B06F473041FA Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>
On Tue, Dec 6, 2011 at 10:35 PM, Peter Palfrader <weasel@debian.org> wrote:
> On Tue, 06 Dec 2011, Benjamin Henrion wrote:
>
>> I made a mirror of snapshot.debian.org on mirrors.mydomain.com, and
>> when I do an apt-get update towards this mirror, apt-get complains
>> with the following:
>>
>> W: GPG error: http://mirrors.mydomain.com testing Release: The
>> following signatures were invalid: BADSIG AED4B06F473041FA Debian
>> Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>
>>
>> When I change the mirror to snapshot.debian.org, I do not have this problem.
>>
>> Any idea how to fix that?
>
> Without knowing what you mirrored and what you tried that is impossible
> to tell.
Here is the debmirror command:
==============================================================
root@mirrors /var/www/scripts [21]# cat
update-mirror-debian-squeeze+testing-20111129T153842Z.sh
#!/bin/bash
debmirror -v /var/www/mirrors/debian/20111129T153842Z \
--progress \
--nosource \
--method=http \
--host=snapshot.debian.org \
--root=/archive/debian/20111129T153842Z \
--dist=testing,squeeze \
--di-dist=testing,squeeze \
--section=main,contrib,non-free,main/debian-installer \
--arch=amd64 \
--di-arch=amd64 \
--passive \
#--ignore-release-gpg \
#--cleanup \
#--allow-dist-rename \
--i18n \
--method=rsync
==============================================================
> Also, you can't really mirror snapshot.debian.org using debmirror (or
> rsync for that matter).
What should I use to make a mirror of snapshot.debian.org then?
The problem was that the GPG key disappeared from the debian
keyserver, I found it back on the gpg.mit.edu server and debmirror
does not complain anymore:
============================================================
root@mirrors /var/www/scripts [11]# gpg --no-default-keyring
--keyring trustedkeys.gpg --keyserver keyring.debian.org --recv-keys
AED4B06F473041FA
gpg: requesting key 473041FA from hkp server keyring.debian.org
gpgkeys: key AED4B06F473041FA not found on keyserver
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
root@mirrors /var/www/scripts [12]# gpg --no-default-keyring
--keyring trustedkeys.gpg --keyserver pgp.mit.edu --recv-keys
AED4B06F473041FA
gpg: requesting key 473041FA from hkp server pgp.mit.edu
gpg: key 473041FA: "Debian Archive Automatic Signing Key (6.0/squeeze)
<ftpmaster@debian.org>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
============================================================
Best,
--
Benjamin Henrion <bhenrion at ffii.org>
FFII Brussels - +32-484-566109 - +32-2-4148403
"In July 2005, after several failed attempts to legalise software
patents in Europe, the patent establishment changed its strategy.
Instead of explicitly seeking to sanction the patentability of
software, they are now seeking to create a central European patent
court, which would establish and enforce patentability rules in their
favor, without any possibility of correction by competing courts or
democratically elected legislators."
Reply to: