[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#376817: apt-get update complains about GPG error and invalid signature.



Package: apt
Version: 0.6.44.2
Severity: normal


Hello,

when I do an 'apt-get update' (e.g. at the beginning of the day, I get
this kind of messages:

# apt-get update
[...]
Fetched 372kB in 30s (12.2kB/s)
Reading package lists... Done
W: GPG error: http://ftp.de.debian.org testing Release: The following
signatures were invalid: BADSIG 010908312D230C5F Debian Archive
Automatic Signing Key (2006) <ftpmaster@debian.org>
W: GPG error: http://ftp.de.debian.org unstable Release: The following
signatures were invalid: BADSIG 010908312D230C5F Debian Archive
Automatic Signing Key (2006) <ftpmaster@debian.org>
W: GPG error: http://ftp.de.debian.org ../project/experimental Release:
The following signatures were invalid: BADSIG 010908312D230C5F Debian
Archive Automatic Signing Key (2006) <ftpmaster@debian.org>
W: GPG error: http://INTERNALSERVER testing Release: The following
signatures were invalid: BADSIG C5EA28B58966589F LinuxCOE
<spheniscus@INTERNALSERVER>
W: You may want to run apt-get update to correct these problems

And a second apt-get update does in deed correct the issue, but this is
quite annoying and might hide any *real* issue with wrong signature.

Thanks, Eric

PS: as for the configuration below, I also have the environment variable
http_proxy defined, and some more files in /etc/apt/sources.list.d/

-- Package-specific info:

-- apt-config dump --

APT "";
APT::Architecture "i386";
APT::Build-Essential "";
APT::Build-Essential:: "build-essential";
APT::Default-Release "testing";
APT::Cache-Limit "20000000";
Dir "/";
Dir::State "var/lib/apt/";
Dir::State::lists "lists/";
Dir::State::cdroms "cdroms.list";
Dir::State::userstatus "status.user";
Dir::State::status "/var/lib/dpkg/status";
Dir::Cache "var/cache/apt/";
Dir::Cache::archives "archives/";
Dir::Cache::srcpkgcache "srcpkgcache.bin";
Dir::Cache::pkgcache "pkgcache.bin";
Dir::Etc "etc/apt/";
Dir::Etc::sourcelist "sources.list";
Dir::Etc::sourceparts "sources.list.d";
Dir::Etc::vendorlist "vendors.list";
Dir::Etc::vendorparts "vendors.list.d";
Dir::Etc::main "apt.conf";
Dir::Etc::parts "apt.conf.d";
Dir::Etc::preferences "preferences";
Dir::Bin "";
Dir::Bin::methods "/usr/lib/apt/methods";
Dir::Bin::dpkg "/usr/bin/dpkg";
DPkg "";
DPkg::Pre-Install-Pkgs "";
DPkg::Pre-Install-Pkgs:: "/usr/sbin/dpkg-preconfigure --apt || true";
DPkg::Post-Invoke "";
DPkg::Post-Invoke:: "if [ -x /usr/bin/debsums ]; then /usr/bin/debsums --generate=nocheck -sp /var/cache/apt/archives; fi";
 "Apt::Get::Purge";
http "";
http::Proxy "http://WEBPROXY:PORT/";;
http::Proxy::INTERNALSERVER "DIRECT";

-- (no /etc/apt/preferences present) --


-- /etc/apt/sources.list --

# See sources.list(5) for more information, especialy
# Remember that you can only use http, ftp or file URIs
# CDROMs are managed through the apt-cdrom tool.

# Testing Security
deb http://security.debian.org testing/updates main contrib non-free
deb-src http://security.debian.org testing/updates main contrib non-free

# Testing
deb http://ftp.de.debian.org/pub/debian testing main contrib non-free
deb-src http://ftp.de.debian.org/pub/debian testing main contrib non-free

# Unstable
deb http://ftp.de.debian.org/debian unstable main contrib non-free
deb-src http://ftp.de.debian.org/debian unstable main contrib non-free

# Experimental
deb http://ftp.de.debian.org/debian/ ../project/experimental main


-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-8nc6k1
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)

Versions of packages apt depends on:
ii  libc6                         2.3.6-15   GNU C Library: Shared libraries
ii  libgcc1                       1:4.1.1-5  GCC support library
ii  libstdc++6                    4.1.1-5    The GNU Standard C++ Library v3

Versions of packages apt recommends:
pn  debian-archive-keyring        <none>     (no description available)

-- no debconf information



Reply to: