Hi, this morning i was unable to run apt-get update on any of my etch boxes.

I run 'apt-get update' and it throws an error:

W: GPG error: http://security.debian.org etch/updates Release: The following signatures were invalid: BADSIG A70DAF536070D3A1 Debian Archive AutomaticSigning Key (4.0/etch) <ftpmaster@debian.org>W: You may want to run apt-get update to correct these problems"

Full listing:

debian40server:~# apt-get updateGet:1 http://security.debian.org etch/updates Release.gpg [189B]Hit http://security.debian.org etch/updates ReleaseErrhttp://security.debian.org etch/updates Release
Get:2 http://security.debian.org etch/updates Release [37.6kB]Get:3 http://ftp.debian.org etch Release.gpg [378B]Hit http://ftp.debian.org etch ReleaseIgn http://security.debian.org etch/updates ReleaseIgn http://ftp.debian.org etch/main Packages/DiffIndexIgn http://security.debian.org etch/updates/main Packages/DiffIndexIgn http://ftp.debian.org etch/main Sources/DiffIndexIgn http://security.debian.org etch/updates/contrib Packages/DiffIndexHit http://ftp.debian.org etch/main PackagesIgn http://security.debian.org etch/updates/main Sources/DiffIndexIgn http://security.debian.org etch/updates/contrib Sources/DiffIndexHit http://security.debian.org etch/updates/main PackagesHit http://security.debian.org etch/updates/contrib PackagesHit http://ftp.debian.org etch/main SourcesHit http://security.debian.org etch/updates/main SourcesHit http://security.debian.org etch/updates/contrib SourcesFetched 37.8kB in 3s (9730B/s)Reading package lists... DoneW: GPG error: http://security.debian.org etch/updates Release: The following signatures were invalid: BADSIG A70DAF536070D3A1 Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>W: You may want to run apt-get update to correct these problems

My apt sources list is as follows:

debian40server:~# cat /etc/apt/sources.list## deb cdrom:[Debian GNU/Linux 4..0 r1 _Etch_ - Official i386 NETINST Binary-1 20070820-20:21]/ etch contribmain
#deb cdrom:[Debian GNU/Linux 4.0 r1 _Etch_ - Official i386 NETINST Binary-120070820-20:21]/ etch contrib main
deb http://ftp.debian.org/debian/ etch maindeb-src http://ftp.debian.org/debian/ etch main
deb http://security.debian.org/ etch/updates main contribdeb-src http://security.debian.org/ etch/updates main contrib

And apt-key list is as follows:

debian40server:~# apt-key list/etc/apt/trusted.gpg--------------------pub 1024D/2D230C5F 2006-01-03 [expired: 2007-02-07]uid DebianArchive Automatic Signing Key (2006) <ftpmaster@debian.org>
pub 1024D/6070D3A1 2006-11-20 [expires: 2009-07-01]uid Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>
pub 1024D/ADB11277 2006-09-17uid Etch Stable Release Key<debian-release@lists.debian.org>
pub 1024D/BBE55AB3 2007-03-31 [expires: 2010-03-30]uid Debian-Volatile Archive Automatic Signing Key (4.0/etch)sub 2048g/36CA98F32007-03-31 [expires: 2010-03-30]

I try re-running 'apt-get update' multiple times, i tried 'apt-key update', but still get the same error. Its been like this for the past 12 hoursnow, yesterday it was fine.

Would anyone be kind enough to give me some insight as to what's happened? Its not isolated, all my Debian boxes are affected. Is the security mirror synching or some other issue? Is this a temporal issue?

Many thanks in advance,

Chris
__________________________________________________ _______________
Invite your Facebook friends to chat on Messenger
http://clk.atdmt.com/UKM/go/101719649/direct/01/

On 07/09/2008 01:08 PM, Chris Morley wrote:
> Hi, this morning i was unable to run apt-get update on any of my etch boxes.
>
> I run 'apt-get update' and it throws an error:
>
> W: GPG error: http://security.debian.org etch/updates Release: The following signatures were invalid: BADSIG A70DAF536070D3A1 Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>W: You may want to run apt-get update to correct these problems"
> [...]

It works for me. Maybe it was a temporary network problem. Try again.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

> > I run 'apt-get update' and it throws an error:> > > > W: GPG error: http://security.debian.org etch/updates Release: The following signatures wereinvalid: BADSIG A70DAF536070D3A1 Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>W: You may want to run apt-get update to correct these problems"> > [...]> > It works for me. Maybe it was a temporary network problem. Try again.

Hmmm, this turned out to be my ever so crap ISP's transparent proxy... I checked with another debian box outside of their network and apt-get was fine.

Is this usual? Very frustrating and a lot of time wasted because of this annoying proxy.

Regards
__________________________________________________ _______________
The John Lewis Clearance - save up to 50% with FREE delivery
http://clk.atdmt.com/UKM/go/101719806/direct/01/

On Thu, Jul 10, 2008 at 06:00:35 +0000, Chris Morley (g18c@hotmail.com) wrote:

[ Please try to post using plain text only if possible - thanks ]

> > > I run 'apt-get update' and it throws an error:> > > > W: GPG error: http://security.debian.org etch/updates Release: The following signatures were invalid: BADSIG A70DAF536070D3A1 Debian Archive Automatic Signing Key (4.0/etch) <ftpmaster@debian.org>W: You may want to run apt-get update to correct these problems"> > [...]> > It works for me. Maybe it was a temporary network problem. Try again.
>
> Hmmm, this turned out to be my ever so crap ISP's transparent proxy... I checked with another debian box outside of their network and apt-get was fine.
>
> Is this usual? Very frustrating and a lot of time wasted because of this annoying proxy.

Is it usual to enforce a transparent proxy? As your ISP seems to be in
the UAE then I don't know, but in the UK it is less common that it used
to be (Telewest/Blueyonder cable were guilty at one time).

Presumably you need to somehow force a proxy refresh before getting the
update.

--
Bob Cox. Stoke Gifford, near Bristol, UK.
Registered user #445000 with the Linux Counter - http://counter.li.org/


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org