Joey Hess wrote: > Ross Boylan wrote: > > Starting last night I see > > W: GPG error: http://localhost sarge/updates Release: The following signatures were invalid: BADSIG F1D53D8C4F368D5D Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org> > > > > Anyone know what's up? I don't see messages about this latest > > occurrence. > > The sarge security updates repository has a still valid signature from > the 2005 key. > > A broken cache could certianly cause your problem. I managed to reproduce your problem. security.debian.org is on round robin dns, and one of the mirrors is not updating. If apt downloads some (but not all) files from this mirror, it will detect a bad signature. -- see shy jo
Attachment:
signature.asc
Description: Digital signature