Solved (Re: BADSIG AED4B06F473041FA Debian Archive Automatic Signing Key (6.0/squeeze) )

March 22nd, 2012 - 03:50 pm ET by Robert King | Report spam

Solved.

It was something weird my university's authenticating proxy was doing. By
changing /etc/apt/apt.conf to proxy differently it worked. (would this be
an old version of a signature on the proxy not being replaced?).

Thanks Tom - I did have the key in my
apt-key list

...

pub 4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uid Debian Archive Automatic Signing Key (6.0/squeeze) <
ftpmaster@debian.org>

On 23 March 2012 00:41, Tom H <tomh0665@gmail.com> wrote:

lOn Wed, Mar 21, 2012 at 11:32 PM, Robert King
<robert.king@newcastle.edu.au> wrote:
>
> What am I doing wrong here? I am getting the above error on apt-get
update
>
> solzhenitsyn:~# apt-get update
> Get:1 http://security.debian.org squeeze/updates Release.gpg [836 B]
> Hit http://ftp.au.debian.org squeeze Release.gpg
> Ign http://security.debian.org/ squeeze/updates/contrib Translation-en
> Ign http://security.debian.org/ squeeze/updates/contrib
Translation-en_AU
> Ign http://security.debian.org/ squeeze/updates/main Translation-en
> Ign http://security.debian.org/ squeeze/updates/main Translation-en_AU
> Ign http://security.debian.org/ squeeze/updates/non-free Translation-en
> Ign http://security.debian.org/ squeeze/updates/non-free
Translation-en_AU
> Get:2 http://security.debian.org squeeze/updates Release [86.9 kB]
> Ign http://security.debian.org squeeze/updates Release
> Ign http://security.debian.org squeeze/updates/main amd64
Packages/DiffIndex
> Ign http://security.debian.org squeeze/updates/contrib amd64
> Packages/DiffIndex
> Ign http://security.debian.org squeeze/updates/non-free amd64
> Packages/DiffIndex
> Hit http://security.debian.org squeeze/updates/main amd64 Packages
> Hit http://security.debian.org squeeze/updates/contrib amd64 Packages
>
> Hit http://security.debian.org squeeze/updates/non-free amd64 Packages
>
> Ign http://ftp.au.debian.org/debian/ squeeze/contrib Translation-en
>
> Ign http://ftp.au.debian.org/debian/ squeeze/contrib Translation-en_AU
> Ign http://ftp.au.debian.org/debian/ squeeze/main Translation-en
> Ign http://ftp.au.debian.org/debian/ squeeze/main Translation-en_AU
> Ign http://ftp.au.debian.org/debian/ squeeze/non-free Translation-en
> Ign http://ftp.au.debian.org/debian/ squeeze/non-free Translation-en_AU
> Hit http://ftp.au.debian.org squeeze Release
> Hit http://ftp.au.debian.org squeeze/main amd64 Packages
> Hit http://ftp.au.debian.org squeeze/contrib amd64 Packages
> Hit http://ftp.au.debian.org squeeze/non-free amd64 Packages
> Fetched 837 B in 2s (336 B/s)
> Reading package lists... Done
> W: GPG error: http://security.debian.org squeeze/updates Release: The
> following signatures were invalid: BADSIG AED4B06F473041FA Debian Archive
> Automatic Signing Key (6.0/squeeze) <ftpmaster@debian.org>
>
> this is on the basis of the following
>
> solzhenitsyn:~# more /etc/apt/sources.list
> deb http://ftp.au.debian.org/debian/ squeeze main contrib non-free
> deb http://security.debian.org/ squeeze/updates main contrib non-free
>
> If I check my keyring, I think have the correct key:
>
> solzhenitsyn:~# gpg --list-keys
> /root/.gnupg/pubring.gpg
>
> pub 1024D/16BA136C 2005-08-21
> uid Backports.org Archive Key <ftp-master@backports.org
>
> sub 2048g/5B82CECE 2005-08-21
>
> pub 1024D/381BA480 2007-02-15
> uid Johannes Ranke (CRAN Debian archive)
> <jranke@uni-bremen.de>
>
> pub 2048R/E084DAB9 2010-10-19 [expires: 2015-10-18]
> uid Michael Rutter <marutter@gmail.com>
> sub 2048R/1CFF3E8F 2010-10-19 [expires: 2015-10-18]
>
> pub 4096R/473041FA 2010-08-27 [expires: 2018-03-05]
> uid Debian Archive Automatic Signing Key (6.0/squeeze)
> <ftpmaster@debian.org>
>
> searching on this error had suggestions to try:
> # apt-key adv --keyserver keyserver.debian.org --recv-keys
AED4B06F473041FA
> Executing: gpg --ignore-time-conflict --no-options --no-default-keyring
> gpg: requesting key 473041FA from hkp server keyserver.debian.org
> gpgkeys: HTTP fetch error 6: Couldn't resolve host 'keyserver.debian.org
'
> gpg: no valid OpenPGP data found.
> gpg: Total number processed: 0
>
> I do have debian-keyring installed.

What's does "apt-key list" give you. I get the following on a wheezy
box upgraded to sid.

# apt-key list
/etc/apt/trusted.gpg
pub 1024D/F42584E6 2008-04-06 [expires: 2012-05-15]
uid Lenny Stable Release Key <
debian-release@lists.debian.org>

pub 4096R/55BE302B 2009-01-27 [expires: 2012-12-31]
uid Debian Archive Automatic Signing Key (5.0/lenny)
<ftpmaster@debian.org>

pub 2048R/6D849617 2009-01-24 [expires: 2013-01-23]
uid Debian-Volatile Archive Automatic Signing Key
(5.0/lenny)

pub 4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
uid Squeeze Stable Release Key
<debian-release@lists.debian.org>

pub 4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uid Debian Archive Automatic Signing Key
(6.0/squeeze) <ftpmaster@debian.org>

To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact
listmaster@lists.debian.org
Archive:
http://lists.debian.org/CAOdoSyj737...W5HN-9ed-w@mail.gmail.com

<div>Solved.</div><div><br></div><div>It was something weird my university's authenticating proxy was doing. By changing /etc/apt/apt.conf to proxy differently it worked. (would this be an old version of a signature on the proxy not being replaced?).</div>
<div><br></div><div>Thanks Tom - I did have the key in my </div><div>apt-key list </div><div><br></div><div>...</div><div><br></div><div>pub 4096R/473041FA 2010-08-27 [expires: 2018-03-05]</div><div>uid Debian Archive Automatic Signing Key (6.0/squeeze) <<a href="mailto:ftpmaster@debian.org">ftpmaster@debian.org</a>></div>
<div><br></div><div><br></div><div class="gmail_quote">On 23 March 2012 00:41, Tom H <span dir="ltr"><<a href="mailto:tomh0665@gmail.com">tomh0665@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
lOn Wed, Mar 21, 2012 at 11:32 PM, Robert King<br>
<div><div class="h5"><<a href="mailto:robert.king@newcastle.edu.au">robert.king@newcastle.edu.au</a>> wrote:<br>
><br>
> What am I doing wrong here? I am getting the above error on apt-get update<br>
><br>
> solzhenitsyn:~# apt-get update<br>
> Get:1 <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates Release.gpg [836 B]<br>
> Hit <a href="http://ftp.au.debian.org" target="_blank">http://ftp.au.debian.org</a> squeeze Release.gpg<br>
> Ign <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates/contrib Translation-en<br>
> Ign <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates/contrib Translation-en_AU<br>
> Ign <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates/main Translation-en<br>
> Ign <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates/main Translation-en_AU<br>
> Ign <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates/non-free Translation-en<br>
> Ign <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates/non-free Translation-en_AU<br>
> Get:2 <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates Release [86.9 kB]<br>
> Ign <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates Release<br>
> Ign <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates/main amd64 Packages/DiffIndex<br>
> Ign <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates/contrib amd64<br>
> Packages/DiffIndex<br>
> Ign <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates/non-free amd64<br>
> Packages/DiffIndex<br>
> Hit <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates/main amd64 Packages<br>
> Hit <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates/contrib amd64 Packages<br>
><br>
> Hit <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates/non-free amd64 Packages<br>
><br>
> Ign <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze/contrib Translation-en<br>
><br>
> Ign <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze/contrib Translation-en_AU<br>
> Ign <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze/main Translation-en<br>
> Ign <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze/main Translation-en_AU<br>
> Ign <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze/non-free Translation-en<br>
> Ign <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze/non-free Translation-en_AU<br>
> Hit <a href="http://ftp.au.debian.org" target="_blank">http://ftp.au.debian.org</a> squeeze Release<br>
> Hit <a href="http://ftp.au.debian.org" target="_blank">http://ftp.au.debian.org</a> squeeze/main amd64 Packages<br>
> Hit <a href="http://ftp.au.debian.org" target="_blank">http://ftp.au.debian.org</a> squeeze/contrib amd64 Packages<br>
> Hit <a href="http://ftp.au.debian.org" target="_blank">http://ftp.au.debian.org</a> squeeze/non-free amd64 Packages<br>
> Fetched 837 B in 2s (336 B/s)<br>
> Reading package lists... Done<br>
> W: GPG error: <a href="http://security.debian.org" target="_blank">http://security.debian.org</a> squeeze/updates Release: The<br>
> following signatures were invalid: BADSIG AED4B06F473041FA Debian Archive<br>
> Automatic Signing Key (6.0/squeeze) <<a href="mailto:ftpmaster@debian.org">ftpmaster@debian.org</a>><br>
><br>
> this is on the basis of the following<br>
><br>
> solzhenitsyn:~# more /etc/apt/sources.list<br>
> deb <a href="http://ftp.au.debian.org/debian/" target="_blank">http://ftp.au.debian.org/debian/</a> squeeze main contrib non-free<br>
> deb <a href="http://security.debian.org/" target="_blank">http://security.debian.org/</a> squeeze/updates main contrib non-free<br>
><br>
> If I check my keyring, I think have the correct key:<br>
><br>
> solzhenitsyn:~# gpg --list-keys<br>
> /root/.gnupg/pubring.gpg<br>
> <br>
> pub 1024D/16BA136C 2005-08-21<br>
> uid Backports.org Archive Key <<a href="mailto:ftp-master@backports.org">ftp-master@backports.org</a>><br>
> sub 2048g/5B82CECE 2005-08-21<br>
><br>
> pub 1024D/381BA480 2007-02-15<br>
> uid Johannes Ranke (CRAN Debian archive)<br>
> <<a href="mailto:jranke@uni-bremen.de">jranke@uni-bremen.de</a>><br>
><br>
> pub 2048R/E084DAB9 2010-10-19 [expires: 2015-10-18]<br>
> uid Michael Rutter <<a href="mailto:marutter@gmail.com">marutter@gmail.com</a>><br>
> sub 2048R/1CFF3E8F 2010-10-19 [expires: 2015-10-18]<br>
><br>
> pub 4096R/473041FA 2010-08-27 [expires: 2018-03-05]<br>
> uid Debian Archive Automatic Signing Key (6.0/squeeze)<br>
> <<a href="mailto:ftpmaster@debian.org">ftpmaster@debian.org</a>><br>
><br>
> searching on this error had suggestions to try:<br>
> # apt-key adv --keyserver <a href="http://keyserver.debian.org" target="_blank">keyserver.debian.org</a> --recv-keys AED4B06F473041FA<br>
> Executing: gpg --ignore-time-conflict --no-options --no-default-keyring<br>
> --secret-keyring /etc/apt/secring.gpg --trustdb-name /etc/apt/trustdb.gpg<br>
> --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg<br>
> --keyserver <a href="http://keyserver.debian.org" target="_blank">keyserver.debian.org</a> --recv-keys AED4B06F473041FA<br>
> gpg: requesting key 473041FA from hkp server <a href="http://keyserver.debian.org" target="_blank">keyserver.debian.org</a><br>
> gpgkeys: HTTP fetch error 6: Couldn't resolve host '<a href="http://keyserver.debian.org" target="_blank">keyserver.debian.org</a>'<br>
> gpg: no valid OpenPGP data found.<br>
> gpg: Total number processed: 0<br>
><br>
> I do have debian-keyring installed.<br>
<br>
</div></div>What's does "apt-key list" give you. I get the following on a wheezy<br>
box upgraded to sid.<br>
<br>
# apt-key list<br>
/etc/apt/trusted.gpg<br>
pub 1024D/F42584E6 2008-04-06 [expires: 2012-05-15]<br>
uid Lenny Stable Release Key <<a href="mailto:debian-release@lists.debian.org">debian-release@lists.debian.org</a>><br>
<br>
pub 4096R/55BE302B 2009-01-27 [expires: 2012-12-31]<br>
uid Debian Archive Automatic Signing Key (5.0/lenny)<br>
<<a href="mailto:ftpmaster@debian.org">ftpmaster@debian.org</a>><br>
<br>
pub 2048R/6D849617 2009-01-24 [expires: 2013-01-23]<br>
uid Debian-Volatile Archive Automatic Signing Key (5.0/lenny)<br>
<br>
pub 4096R/B98321F9 2010-08-07 [expires: 2017-08-05]<br>
uid Squeeze Stable Release Key<br>
<<a href="mailto:debian-release@lists.debian.org">debian-release@lists.debian.org</a>><br>
<div class="HOEnZb"><div class="h5"><br>
pub 4096R/473041FA 2010-08-27 [expires: 2018-03-05]<br>
uid Debian Archive Automatic Signing Key<br>
(6.0/squeeze) <<a href="mailto:ftpmaster@debian.org">ftpmaster@debian.org</a>><br>
<br>
<br>
</div></div><span class="HOEnZb"><font color="#888888">--<br>
To UNSUBSCRIBE, email to <a href="mailto:debian-user-REQUEST@lists.debian.org">debian-user-REQUEST@lists.debian.org</a><br>
with a subject of "unsubscribe". Trouble? Contact <a href="mailto:listmaster@lists.debian.org">listmaster@lists.debian.org</a><br>
Archive: <a href="http://lists.debian.org/CAOdoSyj737...W5HN-9ed-w@mail.gmail.com" target="_blank">http://lists.debian.org/CAOdoSyj737...W5HN-9ed-w@mail.gmail.com</a><br>

<br>
</font></span></blockquote></div><br>

To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/CA+4yBLpxy_...sxN0+_4BUw@mail.gmail.com

Follow the discussion Replies

1 reply

Make a reply

Replies

#1 Tom H

March 22nd, 2012 - 04:40 pm ET | Report spam

On Thu, Mar 22, 2012 at 4:48 PM, Robert King
wrote:

Solved.

It was something weird my university's authenticating proxy was doing. By
changing /etc/apt/apt.conf to proxy differently it worked. (would this be
an old version of a signature on the proxy not being replaced?).

Thanks Tom - I did have the key in my
apt-key list

Then I wasn't of any help! But I'm glad that you fixed your problem...

To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact
Archive: http://lists.debian.org/CAOdo=SzbNt...45S2RV4Qc+

Read all the answers

Solved (Re: BADSIG AED4B06F473041FA Debian Archive Automatic Signing Key (6.0/squeeze) )

Replies

Similar topics