Reloading complains about key error
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
apt (Ubuntu) |
Fix Released
|
Medium
|
Michael Vogt |
Bug Description
The error:
W: GPG error: http://
were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key
<email address hidden>
W: GPG error: http://
signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
Signing Key <email address hidden>
my sources.list
#deb cdrom:[Ubuntu 5.04 _Hoary Hedgehog_ - Preview i386 Binary-1 (20050317)]/
hoary main restricted
## The following lines pertain to supported packages:
deb http://
deb-src http://
## The following lines pertain to security updates:
deb http://
deb-src http://
## Uncomment after release to continue getting updates:
# deb http://
## IMPORTANT:
## Software from the following repositories are ENTIRELY UNSUPPORTED by
## the Ubuntu team, and may not be under a free licence. This means that
## software in these repositories WILL NOT receive any review or updates
## from the Ubuntu security team either. These packages are provided as a
## service to our users and nothing more.
## Uncomment the following two lines to add software from the 'universe' and
## 'multiverse' repositories:
deb http://
deb-src http://
# Video and Audio
#deb ftp://ftp.
#deb ftp://ftp.
#deb ftp://ftp.
## Uncomment the following line to add Java software:
# deb http://
Related branches
Jery Wang (jery-wang2002) wrote : | #1 |
Michael Vogt (mvo) wrote : | #2 |
Thanks for your bugreport.
I think this is actually a problem with apt or it may also be a race condition
when the Packages.gz file on the server is updated. Apt will first download the
Release.gpg file and then the Release file. If the Release file is updated while
the Release.gpg is downloaded this can happen. I wonder if you may have hit
that. Have you seen this kind of problem often? Or do you know some way to
reproduce it even :) ?
Thanks,
Michael
Matt Zimmerman (mdz) wrote : | #3 |
While it is possible for Release and Packages to get out of sync, it should be
very unlikely for Release and Release.gpg to get out of sync. Is there a
caching proxy involved?
Jery Wang (jery-wang2002) wrote : | #4 |
Have you seen this kind of problem often? Or do you know some way to
> reproduce it even :) ?
>
> Thanks,
> Michael
Almost always. It is very rare that I do not see that error. But the funny thing
is, I press reload the second time, it is 'ALWAYS' successful.
If I did not press the second time, and I continue to try to install the package
despite the error, synaptic complains that the package is not authenticated.
Thanks.
Great job on Ubuntu Hoary and it's fast update.
Jery Wang (jery-wang2002) wrote : | #5 |
Is there a
> caching proxy involved?
Direct connection without proxy via cable modem 1500Kbps
Michael Vogt (mvo) wrote : | #6 |
Could you please make a debug trace and attach it to the bugreport? Here is the
commandline:
$ sudo apt-get -o Debug::
Debug::
Please make one trace with the error and one without so that I can compare the two.
Thanks,
Michael
Jery Wang (jery-wang2002) wrote : | #7 |
(In reply to comment #6)
> Could you please make a debug trace and attach it to the bugreport? Here is the
> commandline:
>
> $ sudo apt-get -o Debug::
> Debug::
>
> Please make one trace with the error and one without so that I can compare the
two.
>
> Thanks,
> Michael
Hi,
I run:
sudo apt-get -o Debug::
Debug::
And the debug.txt contains nothing.
The error I encountered is when I used synaptic. I pop ups error dialog box
with error text mentioned.
Jery Wang (jery-wang2002) wrote : | #8 |
(In reply to comment #7)
> (In reply to comment #6)
> > Could you please make a debug trace and attach it to the bugreport? Here is the
> > commandline:
> >
> > $ sudo apt-get -o Debug::
> > Debug::
> >
> > Please make one trace with the error and one without so that I can compare the
> two.
> >
> > Thanks,
> > Michael
>
> Hi,
>
> I run:
>
> sudo apt-get -o Debug::
> Debug::
>
> And the debug.txt contains nothing.
>
> The error I encountered is when I used synaptic. I pop ups error dialog box
> with error text mentioned.
This is the output I saw on the terminal:
apt 0.6.35 for linux i386 compiled on Mar 26 2005 18:07:56
Usage: apt-get [options] command
apt-get [options] install|remove pkg1 [pkg2 ...]
apt-get [options] source pkg1 [pkg2 ...]
apt-get is a simple command line interface for downloading and
installing packages. The most frequently used commands are update
and install.
Commands:
update - Retrieve new lists of packages
upgrade - Perform an upgrade
install - Install new packages (pkg is libc6 not libc6.deb)
remove - Remove packages
source - Download source archives
build-dep - Configure build-dependencies for source packages
dist-upgrade - Distribution upgrade, see apt-get(8)
dselect-upgrade - Follow dselect selections
clean - Erase downloaded archive files
autoclean - Erase old downloaded archive files
check - Verify that there are no broken dependencies
Options:
-h This help text.
-q Loggable output - no progress indicator
-qq No output except for errors
-d Download only - do NOT install or unpack archives
-s No-act. Perform ordering simulation
-y Assume Yes to all queries and do not prompt
-f Attempt to continue if the integrity check fails
-m Attempt to continue if archives are unlocatable
-u Show a list of upgraded packages as well
-b Build the source package after fetching it
-V Show verbose version numbers
-c=? Read this configuration file
-o=? Set an arbitrary configuration option, eg -o dir::cache=/tmp
See the apt-get(8), sources.list(5) and apt.conf(5) manual
pages for more information and options.
Michael Vogt (mvo) wrote : | #9 |
I'm very sorry, I missed the importend bit in the command :/
Here is the correct commandline:
$ sudo apt-get -o Debug::
Debug::
$ sudo apt-get -o Debug::
Debug::
(tested this time). It will create a file named "debug.txt" and "debug6762.txt". It
would be really good if the first would contain the case with the error (you
should see the error at the end of the file) and the second the successfull run.
Thanks and sorry for the confusion my wrong cmd caused.
Jery Wang (jery-wang2002) wrote : | #10 |
(In reply to comment #9)
> Here is the correct commandline:
> $ sudo apt-get -o Debug::
> Debug::
>
> $ sudo apt-get -o Debug::
> Debug::
>
>
debug.txt:
-------
Fetching http://
to /var/lib/
Queue is: http:archive.
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
Range: bytes=188-
If-Range: Wed, 30 Mar 2005 16:04:28 GMT
User-Agent: Debian APT-HTTP/1.3
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
Range: bytes=188-
If-Range: Wed, 30 Mar 2005 16:04:30 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 206 Partial Content
Date: Wed, 30 Mar 2005 16:40:02 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:04:30 GMT
ETag: "29f4002-
Accept-Ranges: bytes
Content-Type: text/plain
Content-Range: bytes 188-188/189
Content-Length: 1
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
HTTP/1.1 206 Partial Content
Date: Wed, 30 Mar 2005 16:40:02 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:04:28 GMT
ETag: "2710050-
Accept-Ranges: bytes
Content-Type: text/plain
Content-Range: bytes 188-188/189
Content-Length: 1
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:04:30 GMT
User-Agent: Debian APT-HTTP/1.3
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to /var/lib/
Queue is: http:archive.
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:04:28 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 304 Not Modified
Connection: Keep-Alive
Date: Wed, 30 Mar 2005 16:40:03 GMT
Last-Modified: Mon, 28 Mar 2005 06:56:51 GMT
Etag: "2710037-
Via: 1.1 Application and Content Networking...
Jery Wang (jery-wang2002) wrote : | #11 |
debug6762.txt:
Fetching http://
to /var/lib/
Queue is: http:archive.
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
Range: bytes=188-
If-Range: Wed, 30 Mar 2005 16:04:30 GMT
User-Agent: Debian APT-HTTP/1.3
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
Range: bytes=188-
If-Range: Wed, 30 Mar 2005 16:04:28 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 206 Partial Content
Date: Thu, 31 Jul 2003 05:37:00 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:04:28 GMT
ETag: "2710050-
Accept-Ranges: bytes
Content-Type: text/plain
Content-Range: bytes 188-188/189
Content-Length: 1
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
HTTP/1.1 206 Partial Content
Date: Wed, 30 Mar 2005 16:40:31 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:04:30 GMT
ETag: "29f4002-
Accept-Ranges: bytes
Content-Type: text/plain
Content-Range: bytes 188-188/189
Content-Length: 1
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to /var/lib/
Queue is: http:archive.
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:04:28 GMT
User-Agent: Debian APT-HTTP/1.3
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:04:30 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 304 Not Modified
Connection: Keep-Alive
Date: Wed, 30 Mar 2005 16:40:32 GMT
Last-Modified: Wed, 30 Mar 2005 16:04:28 GMT
Etag: "2710037-
Via: 1.1 Application and Content Networking System Software 5.1.13
Dequeuing /var/lib/
Dequeuing /var/lib/
HTTP/1.1 304 Not Modified
Connection: Keep-Alive
Date: Wed, 30 Mar 2005 16:40:32 GMT
Last-Modified: Wed, 30 Mar 2005 16:04:30 GMT
Etag: "29f400b-
...
Jery Wang (jery-wang2002) wrote : | #12 |
Repeat the same process again, got the error!
debug.txt:
=======
Fetching http://
to /var/lib/
Queue is: http:archive.
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
Range: bytes=188-
If-Range: Wed, 30 Mar 2005 16:04:28 GMT
User-Agent: Debian APT-HTTP/1.3
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
Range: bytes=188-
If-Range: Wed, 30 Mar 2005 16:04:30 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 206 Partial Content
Date: Wed, 30 Mar 2005 16:49:00 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:34:29 GMT
ETag: "2710078-
Accept-Ranges: bytes
Content-Type: text/plain
Content-Range: bytes 188-188/189
Content-Length: 2
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to /var/lib/
Queue is: http:archive.
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:04:28 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 206 Partial Content
Date: Wed, 30 Mar 2005 16:49:00 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:34:30 GMT
ETag: "29f4028-
Accept-Ranges: bytes
Content-Type: text/plain
Content-Range: bytes 188-188/189
Content-Length: 2
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:04:30 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 200 OK
Date: Wed, 30 Mar 2005 16:49:01 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:34:29 GMT
ETag: "2710077-
Accept-Ranges: bytes
Content-Length: 19876
Content-Type: text/plain
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Wed, 30 Mar 2005 16:49:01 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:34:30 GMT
ETag: "29f40...
Jery Wang (jery-wang2002) wrote : | #13 |
No error the second time:
debug6762.txt:
=======
Fetching http://
to /var/lib/
Queue is: http:archive.
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
User-Agent: Debian APT-HTTP/1.3
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 200 OK
Date: Wed, 30 Mar 2005 16:50:19 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:34:30 GMT
ETag: "29f4028-
Accept-Ranges: bytes
Content-Length: 189
Content-Type: text/plain
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to
/var/lib/
Queue is: http:security.
GET /ubuntu/
Host: security.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:34:30 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 200 OK
Date: Wed, 30 Mar 2005 16:50:19 GMT
Server: Apache/2.1.3 (Ubuntu)
Last-Modified: Wed, 30 Mar 2005 16:34:29 GMT
ETag: "2710078-
Accept-Ranges: bytes
Content-Length: 189
Content-Type: text/plain
Via: 1.1 Application and Content Networking System Software 5.1.13
Connection: Keep-Alive
Dequeuing
/var/lib/
Dequeuing
/var/lib/
Fetching http://
to /var/lib/
Queue is: http:archive.
GET /ubuntu/
Host: archive.ubuntu.com
Connection: keep-alive
If-Modified-Since: Wed, 30 Mar 2005 16:34:29 GMT
User-Agent: Debian APT-HTTP/1.3
HTTP/1.1 304 Not Modified
Connection: Keep-Alive
Date: Wed, 30 Mar 2005 16:50:20 GMT
Last-Modified: Wed, 30 Mar 2005 16:34:30 GMT
Etag: "29f4018-
Via: 1.1 Application and Content Networking System Software 5.1.13
Dequeuing
/var/lib/
Dequeuing
/var/lib/
HTTP/1.1 304 Not Modified
Connection: Keep-Alive
Date: Wed, 30 Mar 2005 16:50:20 GMT
Last-Modified: Wed, 30 Mar 2005 16:34:29 GMT
Etag: "2710077-
Via: 1.1 Application and Content Networking System Software 5.1.13
Fetching
gpgv:/var/
Michael Vogt (mvo) wrote : | #14 |
Thanks for this additional info. It looks like your cable company is using a
transparent proxy (Cisco Application and Content Networking System Software
5.1.13). It seems to not check if the data on the server is more current that
the data in it's cache and that's why you see the error. There is no real good
workaround for that beside turning off If-Modified-Since and Last-Modified in
the apt source code. This is a pretty drastic measure that will lead to a lot of
additonal traffic on the servers and mirrors. Another option is to add a apt
variable that can turn Last-Modified off for people behind bad proxies.
Michael Vogt (mvo) wrote : | #15 |
I put a modified version of apt online at:
http://
You can install it (after the download) with:
$ sudo dpkg -i apt_0.6.
Then you can run it with:
$ sudo apt-get -o Acquire:
This will force apt to always re-get the signature file. I would like to know if
that
fixes your problem or if you still see the signature errors then.
Thanks,
Michael
Jery Wang (jery-wang2002) wrote : | #16 |
(In reply to comment #15)
> I put a modified version of apt online at:
>
> http://
>
> You can install it (after the download) with:
> $ sudo dpkg -i apt_0.6.
>
> Then you can run it with:
> $ sudo apt-get -o Acquire:
>
> This will force apt to always re-get the signature file. I would like to know if
> that
> fixes your problem or if you still see the signature errors then.
>
> Thanks,
> Michael
Thanks.
My kernel uses i686, does that i386 matter? And how can I undo the installation
back to previous version if there is any problem?
Great Jobs.
Ubuntu team rocks.
The apt-get/synaptic is much faster and robust than synaptic in fedora which
left my system in a messy state when I try to upgrate from fc3 to fc4. I never
tried warty to hoary before, but I did countless times of updating with Ubuntu
synpatic/apt-get and never breaks.
Michael Vogt (mvo) wrote : | #17 |
(In reply to comment #16)
> (In reply to comment #15)
> > I put a modified version of apt online at:
> >
> > http://
> >
> > You can install it (after the download) with:
> > $ sudo dpkg -i apt_0.6.
> >
> > Then you can run it with:
> > $ sudo apt-get -o Acquire:
> >
> > This will force apt to always re-get the signature file. I would like to know if
> > that
> > fixes your problem or if you still see the signature errors then.
>
> My kernel uses i686, does that i386 matter? And how can I undo the installation
> back to previous version if there is any problem?
Having a i386 binary on a i686 system is no problem, i686 understand i386
perfectly well. You can go back to the old version with:
$ wget http://
(that the current version in hoary)
$ sudo dpkg -i apt_0.6.35_i386.deb
(install that version).
> The apt-get/synaptic is much faster and robust than synaptic in fedora which
> left my system in a messy state when I try to upgrate from fc3 to fc4. I never
> tried warty to hoary before, but I did countless times of updating with Ubuntu
> synpatic/apt-get and never breaks.
Thanks, good to hear :)
Cheers,
Michael
Jery Wang (jery-wang2002) wrote : | #18 |
(In reply to comment #17)
> (In reply to comment #16)
> > (In reply to comment #15)
> > > I put a modified version of apt online at:
> > >
> > > http://
> > >
> > > You can install it (after the download) with:
> > > $ sudo dpkg -i apt_0.6.
> > >
> > > Then you can run it with:
> > > $ sudo apt-get -o Acquire:
> > >
> > > This will force apt to always re-get the signature file. I would like to
know if
> > > that
> > > fixes your problem or if you still see the signature errors then.
> >
> > My kernel uses i686, does that i386 matter? And how can I undo the installation
> > back to previous version if there is any problem?
>
> Having a i386 binary on a i686 system is no problem, i686 understand i386
> perfectly well. You can go back to the old version with:
> $ wget http://
> (that the current version in hoary)
> $ sudo dpkg -i apt_0.6.35_i386.deb
> (install that version).
>
> > The apt-get/synaptic is much faster and robust than synaptic in fedora which
> > left my system in a messy state when I try to upgrate from fc3 to fc4. I never
> > tried warty to hoary before, but I did countless times of updating with Ubuntu
> > synpatic/apt-get and never breaks.
>
> Thanks, good to hear :)
>
> Cheers,
> Michael
>
Yes! Great job.
No more problem.
I'm satisfied with you guys. It's very rare to get treatment like this. Thanks
again.
Many paid products, when I have problem and report the problem, it lands on deaf
ear.
I am quite sure, Ubuntu will be no.1 distro. It is already this month in
distrowatch.com.
Martin Bergner (martin-bergner) wrote : | #19 |
apparently, this was fixed.
Changed in apt: | |
status: | Needs Info → Fix Released |
(In reply to comment #0) archive. ubuntu. com hoary Release: The following signatures security. ubuntu. com hoary-security Release: The following
> The error:
>
> W: GPG error: http://
> were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key
> <email address hidden>
> W: GPG error: http://
> signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
> Signing Key <email address hidden>
Pressing reload secong time is alright, i.e., the error did not appear