Re: apt-get invalid signature again
On Sat, Jan 28, 2006 at 11:38:56PM -0500, Joey Hess wrote:
> Joey Hess wrote:
> > Ross Boylan wrote:
> > > Starting last night I see
> > > W: GPG error: http://localhost sarge/updates Release: The following signatures were invalid: BADSIG F1D53D8C4F368D5D Debian Archive Automatic Signing Key (2005) <ftpmaster@debian.org>
> > >
> > > Anyone know what's up? I don't see messages about this latest
> > > occurrence.
> >
> > The sarge security updates repository has a still valid signature from
> > the 2005 key.
> >
> > A broken cache could certianly cause your problem.
>
> I managed to reproduce your problem. security.debian.org is on round
> robin dns, and one of the mirrors is not updating. If apt downloads some
> (but not all) files from this mirror, it will detect a bad signature.
>
Thanks for tracking that down. Is there a work-around?
Ross
Reply to: