Nick Rout | 3 Mar 09:23
Picon

gpg problem with NZ ubuntu repo

On an apt-get update or aptitude update I get:

W: GPG error: http://nz.archive.ubuntu.com intrepid-updates Release:
The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu
Archive Automatic Signing Key <ftpmaster <at> ubuntu.com>
W: You may want to run apt-get update to correct these problems

anyone else seeing this or able to tell me what to do to correct it?

_______________________________________________
NZLUG mailing list NZLUG <at> linux.net.nz
http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug

Tim Frost | 3 Mar 09:59
Picon

Re: gpg problem with NZ ubuntu repo

On Tue, 2009-03-03 at 21:23 +1300, Nick Rout wrote:
> On an apt-get update or aptitude update I get:
> 
> W: GPG error: http://nz.archive.ubuntu.com intrepid-updates Release:
> The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu
> Archive Automatic Signing Key <ftpmaster <at> ubuntu.com>
> W: You may want to run apt-get update to correct these problems

options:
1: Check disk space for your /var/lib/apt directory/filesystem
2: reload/retry
3: try nz2.archive.ubuntu.com (Ihug)

I am updating from citylink (nz.archive.ubuntu.com) with no errors, and
did the same from ihug (nz2.archive.ubuntu.com) five minutes ago

Signature errors are usually because either the data file
(intrepid-updates/Release here) wasn't downloaded correctly, or because
the signature (intrepid-updates/Release.gpg) wasn't downloaded
correctly.  Both problems tend to occur if your file system has run out
of space (or, in rare cases, a lack of inodes), or if you started a
download  at about the same time as a repository resynchronisation was
updating either of those files.

If the problem was a timing issue at the repository, a repeat of the
apt-get update should fix the problem.

If your disk has run out of space/inodes, then you need to fix that. 

> 
(Continue reading)

Daniel Lawson | 3 Mar 09:44
Picon
Gravatar

Re: gpg problem with NZ ubuntu repo


> On an apt-get update or aptitude update I get:
>
> W: GPG error: http://nz.archive.ubuntu.com intrepid-updates Release:
> The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu
> Archive Automatic Signing Key <ftpmaster <at> ubuntu.com>
> W: You may want to run apt-get update to correct these problems
>   

https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/24061

It's old (for hoary), but it has two possible leads: that your repo is
being updated at the moment, and you should try again later; and that
you're using a proxy that demonstrates broken behaviour. In the latter
case, it's possible that your ISP has a transproxy that is doing broken
things. The thread has some suggestions to work around this, namely adding

Acquire::http::No-Cache "true";
Acquire::http::Max-Age "0";

to

/etc/apt/apt.conf.d/10broken_proxy

And you could also try using the nz2.archive.ubuntu.com mirror instead.

_______________________________________________
NZLUG mailing list NZLUG <at> linux.net.nz
http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug

(Continue reading)

Andrew Simpson | 4 Mar 05:40
Picon

Re: gpg problem with NZ ubuntu repo

On Tue, 03 Mar 2009 21:23:46 +1300
Nick Rout <nick.rout <at> gmail.com> wrote:

> On an apt-get update or aptitude update I get:
> 
> W: GPG error: http://nz.archive.ubuntu.com intrepid-updates Release:
> The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu
> Archive Automatic Signing Key <ftpmaster <at> ubuntu.com>
> W: You may want to run apt-get update to correct these problems
> 
> 
> anyone else seeing this or able to tell me what to do to correct it?

Yes, very frequently seen until I started using this command instead:

$ sudo apt-get update -o Acquire::http::No-Cache=true

I guess it's a proxy caching issue - probably I suspect with my ISP.

Andrew

_______________________________________________
NZLUG mailing list NZLUG <at> linux.net.nz
http://www.linux.net.nz/cgi-bin/mailman/listinfo/nzlug

Daniel Pittman | 4 Mar 06:23
Gravatar

Re: gpg problem with NZ ubuntu repo

Andrew Simpson <andrew.simpson <at> corokia.co.nz> writes:
> On Tue, 03 Mar 2009 21:23:46 +1300
> Nick Rout <nick.rout <at> gmail.com> wrote:
>
>> On an apt-get update or aptitude update I get:
>> 
>> W: GPG error: http://nz.archive.ubuntu.com intrepid-updates Release:
>> The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu
>> Archive Automatic Signing Key <ftpmaster <at> ubuntu.com>
>> W: You may want to run apt-get update to correct these problems
>> 
>> 
>> anyone else seeing this or able to tell me what to do to correct it?
>
> Yes, very frequently seen until I started using this command instead:
> $ sudo apt-get update -o Acquire::http::No-Cache=true
> I guess it's a proxy caching issue - probably I suspect with my ISP.

Yeah, your ISP suck.  Specifically, their cache doesn't play nicely with
updates from that mirror, so the release file and the detached signature
file get out of sync.

You could contact either the ISP or the mirror operator about this; the
ISP are probably at fault, but the mirror operator could improve this by
ensuring that the HTTP cache headers are appropriate to the content.

...or just use FTP or HTTPS, neither of which have this problem.  They
do pose their own ... challenges, though. :)

Regards,
(Continue reading)


Gmane