Hi, this morning i was unable to run apt-get update on any of my etch boxes. I run 'apt-get update' and it throws an error: W: GPG error: http://security.debian.org etch/updates Release: The following signatures were invalid: BADSIG A70DAF536070D3A1 Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org> W: You may want to run apt-get update to correct these problems" Full listing: debian40server:~# apt-get update Get:1 http://security.debian.org etch/updates Release.gpg [189B] Hit http://security.debian.org etch/updates Release Err http://security.debian.org etch/updates Release Get:2 http://security.debian.org etch/updates Release [37.6kB] Get:3 http://ftp.debian.org etch Release.gpg [378B] Hit http://ftp.debian.org etch Release Ign http://security.debian.org etch/updates Release Ign http://ftp.debian.org etch/main Packages/DiffIndex Ign http://security.debian.org etch/updates/main Packages/DiffIndex Ign http://ftp.debian.org etch/main Sources/DiffIndex Ign http://security.debian.org etch/updates/contrib Packages/DiffIndex Hit http://ftp.debian.org etch/main Packages Ign http://security.debian.org etch/updates/main Sources/DiffIndex Ign http://security.debian.org etch/updates/contrib Sources/DiffIndex Hit http://security.debian.org etch/updates/main Packages Hit http://security.debian.org etch/updates/contrib Packages Hit http://ftp.debian.org etch/main Sources Hit http://security.debian.org etch/updates/main Sources Hit http://security.debian.org etch/updates/contrib Sources Fetched 37.8kB in 3s (9730B/s) Reading package lists... Done W: GPG error: http://security.debian.org etch/updates Release: The following signatures were invalid: BADSIG A70DAF536070D3A1 Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org> W: You may want to run apt-get update to correct these problems My apt sources list is as follows: debian40server:~# cat /etc/apt/sources.list # # deb cdrom:[Debian GNU/Linux 4.0 r1 _Etch_ - Official i386 NETINST Binary-1 20070820-20:21]/ etch contrib main #deb cdrom:[Debian GNU/Linux 4.0 r1 _Etch_ - Official i386 NETINST Binary-1 20070820-20:21]/ etch contrib main deb http://ftp.debian.org/debian/ etch main deb-src http://ftp.debian.org/debian/ etch main deb http://security.debian.org/ etch/updates main contrib deb-src http://security.debian.org/ etch/updates main contrib And apt-key list is as follows: debian40server:~# apt-key list /etc/apt/trusted.gpg -------------------- pub 1024D/2D230C5F 2006-01-03 [expired: 2007-02-07] uid Debian Archive Automatic Signing Key (2006) <ftpmaster@debian.org> pub 1024D/6070D3A1 2006-11-20 [expires: 2009-07-01] uid Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org> pub 1024D/ADB11277 2006-09-17 uid Etch Stable Release Key <debian-release@lists.debian.org> pub 1024D/BBE55AB3 2007-03-31 [expires: 2010-03-30] uid Debian-Volatile Archive Automatic Signing Key (4.0/etch) sub 2048g/36CA98F3 2007-03-31 [expires: 2010-03-30] I try re-running 'apt-get update' multiple times, i tried 'apt-key update', but still get the same error. Its been like this for the past 12 hours now, yesterday it was fine. Would anyone be kind enough to give me some insight as to what's happened? Its not isolated, all my Debian boxes are affected. Is the security mirror synching or some other issue? Is this a temporal issue? Many thanks in advance, Chris Get fish-slapping on Messenger! Play Now |