[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Problem with private repository, GPG signing, and apt-transport-https



	I've set up a private apt repository and signed my own packages with my own 
key. Furthermore, on the client computers I installed apt-transport-https. 
When I 'apt-get update', however, 50% of the time I get the following 
warnings:

W: Bizarre Error - File size is not what the server reported 0 728
W: GPG error: https://packages.mydomain.org unstable Release: The following 
signatures were invalid: BADSIG 6A3E7382C8A7B074 Peter Clark 
<peter@mydomain.org>
W: You may want to run apt-get update to correct these problems

	When I run 'apt-get update' again, these problems do disappear...only to 
reappear the next time. So the error appears very consistently, 50% of the 
time. When I change the relevant line in /etc/apt/sources.list from:

deb https://packages.mydomain.org unstable main

to:

deb http://packages.mydomain.org unstable main

everything works fine; no weird file sizes, no GPG errors.
	Additional note: the SSL certificate served by mydomain.org is self-signed; I 
don't know if that makes a difference or not.
	Any clues as to why apt-transport-https (apparently) makes things break like 
this?
	Thanks,
	:Peter



Reply to: