[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Just for the record, I'd just encountered this problem on a Linux Mint box and the 'Workaround' of the 'Bug description' has solved it: $ uname -a Linux 3.2.0-58-generic #88-Ubuntu SMP Tue Dec 3 17:37:58 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux $ cat /etc/linuxmint/info RELEASE=13 CODENAME=maya EDITION=MATE 64-bit DESCRIPTION=Linux Mint 13 Maya DESKTOP=MATE TOOLKIT=GTK Thanks a lot! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
I have some problem with a local mirror (apt-mirror) Holen: 1 http://192.168.0.100 trusty InRelease [246 B] Holen: 2 http://192.168.0.100 trusty-updates InRelease [246 B] Holen: 3 http://192.168.0.100 trusty-backports InRelease [246 B] Holen: 4 http://192.168.0.100 trusty-security InRelease [246 B] Ign http://192.168.0.100 trusty InRelease Splitting up /var/lib/apt/lists/partial/192.168.0.100_ubuntu_dists_trusty_InRelease into data and signature failed E: GPG-Fehler: http://192.168.0.100 trusty InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?) in the directories like http://192.168.0.100/ubuntu/dists/trusty/ I have a InRelease file html head meta http-equiv=Content-Type content=text/html; charset=utf-8 / titlereplace/title body script language=JavaScript type=text/javascript var pageName = '/'; top.location.replace(pageName); /script /body /html if I am deleting it all works fine but after the next refresh of apt- mirror InRelease is back and it happens the same. I found a fix #!/bin/bash sudo cp -arf /var/lib/dpkg /var/lib/dpkg.backup sudo cp /var/lib/dpkg/status-old /var/lib/dpkg/status sudo cp /var/lib/dpkg/available-old /var/lib/dpkg/available sudo rm -rf /var/lib/dpkg/updates/* sudo rm -rf /var/lib/apt/lists sudo mkdir /var/lib/apt/lists sudo mkdir /var/lib/apt/lists/partial sudo apt-get clean sudo apt-get update sudo dpkg --clear-avail sudo dpkg --configure -a sudo apt-get install -f sudo apt-get update sudo apt-get dist-upgrade did not work! With the normal Repos everything is ok. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Please post your sources file On Thu, 19 Mar 2015 13:57 haiko2201 2201ha...@gmail.com wrote: I have some problem with a local mirror (apt-mirror) Holen: 1 http://192.168.0.100 trusty InRelease [246 B] Holen: 2 http://192.168.0.100 trusty-updates InRelease [246 B] Holen: 3 http://192.168.0.100 trusty-backports InRelease [246 B] Holen: 4 http://192.168.0.100 trusty-security InRelease [246 B] Ign http://192.168.0.100 trusty InRelease Splitting up /var/lib/apt/lists/partial/192.168.0.100_ubuntu_dists_trusty_InRelease into data and signature failed E: GPG-Fehler: http://192.168.0.100 trusty InRelease: Clearsigned file isn't valid, got 'NODATA' (does the network require authentication?) in the directories like http://192.168.0.100/ubuntu/dists/trusty/ I have a InRelease file html head meta http-equiv=Content-Type content=text/html; charset=utf-8 / titlereplace/title body script language=JavaScript type=text/javascript var pageName = '/'; top.location.replace(pageName); /script /body /html if I am deleting it all works fine but after the next refresh of apt- mirror InRelease is back and it happens the same. I found a fix #!/bin/bash sudo cp -arf /var/lib/dpkg /var/lib/dpkg.backup sudo cp /var/lib/dpkg/status-old /var/lib/dpkg/status sudo cp /var/lib/dpkg/available-old /var/lib/dpkg/available sudo rm -rf /var/lib/dpkg/updates/* sudo rm -rf /var/lib/apt/lists sudo mkdir /var/lib/apt/lists sudo mkdir /var/lib/apt/lists/partial sudo apt-get clean sudo apt-get update sudo dpkg --clear-avail sudo dpkg --configure -a sudo apt-get install -f sudo apt-get update sudo apt-get dist-upgrade did not work! With the normal Repos everything is ok. -- You received this bug notification because you are subscribed to a duplicate bug report (117010). https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
FWIW, I do see this occasionally, but I'm guessing my ISP is doing transparent proxy caching. However, sudo apt-get update -o Acquire::http::No-Cache=true Did fix it for me. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Just ran into this problem on 13.10. If a fix was released 12 months ago why is it still happening? My situation seems similar to all the rest, rather than a 404 my satellite ISP returns nonstandard error messages about link outage if it does not return results in time and apt-get got permanently screwed up from it. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Last week I try to update my kubuntu 12.04x64, but with mistakes, today I do: sudo rm -rf /var/lib/apt/lists/partial sudo mkdir -p /var/lib/apt/lists/partial sudo apt-get clean sudo apt-get update and then I see again and again: Не удалось загрузить (failing to load?) gpgv:/var/lib/apt/lists/partial/extras.ubuntu.com_ubuntu_dists_precise_Release.gpg -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
I'm running Quantal and on Wifi captive portals the issue still happens apt broken I know how to fix, but less tech savy users get lost... -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Regarding point #2 in comment #70: 2. Some people had bad files on the local box (through proxy or direct download) and for them the fix was sudo mv /var/lib/apt/lists /var/lib/apt/lists.old ; sudo mkdir -p /var/lib/apt/lists/partial The issue of apt creating bad files on disk in /var/lib/apt/lists/ has been fixed in the quantal release of Ubuntu which will become Ubuntu 12.10. Details regarding the fix appear in this changelog: apt (0.9.7.5ubuntu2) quantal; urgency=low Merged from lp:~donkult/apt/experimental: [ David Kalnischkies ] * apt-pkg/contrib/strutl.cc: - support \n and \r\n line endings in ReadMessages [ Michael Vogt ] * lp:~mvo/apt/webserver-simulate-broken-with-fix346386: - merge fix for LP: #346386 I've tested that version of apt with the dummy-proxy provided by Colin Watson and I received the following message in a terminal after running apt-get update: W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://archive.ubuntu.com precise Release: The following signatures were invalid: NODATA 1 NODATA 2 W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/precise/Release W: Some index files failed to download. They have been ignored, or old ones used instead. After this I was able to use apt-get update again without having to clear the files in /var/lib/apt/lists. You may find some further information about this bug in bug 346386. We are currently working on getting this fix into the -proposed repository for 12.04 and a comment will be added to bug 346386 indicating when it is available and how to test it. I'll do some further research into update-manager's behavior if there are bad files in /var/lib/apt/lists and open a new bug as needed. There are likely some user interface improvements that should be made if index files are corrupt or fail to download. ** Changed in: apt (Ubuntu Quantal) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Bug 997200 has some details about improvements that could be made to update-manager. The fix for apt is now available in precise-proposed and details regarding testing can be found in bug 346386. I'm going to set the Precise task to Fix Released rather than risk forgetting to close this bug when apt moves to precise-updates. ** Changed in: apt (Ubuntu Precise) Status: Triaged = Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: apt (Ubuntu) Assignee: (unassigned) = Brian Murray (brian-murray) ** Also affects: apt (Ubuntu Quantal) Importance: High Assignee: Brian Murray (brian-murray) Status: Triaged ** Also affects: update-manager (Ubuntu Quantal) Importance: Low Status: Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
The specific bug I am interested in is case 2 from comment 70: 2. Some people had bad files on the local box (through proxy or direct download) and for them the fix was sudo mv /var/lib/apt/lists /var/lib/apt/lists.old ; sudo mkdir -p /var/lib/apt/lists/partial. This can happen because of common, transient network errors and I'm sure the black hats have ways of inducing or simulating such errors as well. The bug is NOT that Ubuntu doesn't notice that the files are bad. The bug is that when it notices that the files are bad, it responds only by rather quietly suspending updates from the repositories corresponding to the bad files. The BAD SIG error message does not even go anywhere that the user is going to see until they start investigating and try running command line tools instead of the GUI stuff. To me the obvious first step in fixing this is for the update manager to automatically apply the manual fix of clobbering the bad files in /var/lib/apt/lists, and if that doesn't work, wave a red flag at the user. The security implication that I see is that this bug represents a way for bad guys to block security updates to selected machines, possibly forever. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Description changed: -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
WORKAROUND: -- Run the following commands(saves a backup of the old lists and creates a new lists folder) and the BADSIG error does not occur : $ cd /var/lib/apt $ sudo mv lists lists.old $ sudo mkdir -p lists/partial $ sudo apt-get update Worked just fine -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
The proposed workaround does not work if the connection is still being intercepted and returning invalid responses. It addresses point 2 of comment #70, but not the other four causes. I suggest that a challenge-response mechanism could help to detect intercepting proxies and provide better feedback to the user. Any feedback on the idea would be appreciated. When a BADSIG error occurs 1. Send a random string to a specific Ubuntu Web service. 2. Calculate a hash of the same string. 3. Compare the server response to the calculated hash. If a non-error response is received without the hash occuring anywhere in the response, the connection has been intercepted. 4. If it has been determined that the connection is being intercepted, the user can be alerted of the potential reason for the BADSIG error. If using a gui tool, the user can be guided to determine if the problem is an authentication issue (by opening a page in a browser) and given the opportunity to cancel the update or confirm the cause of the problem and retry. 5. If the same, or very similar response is received in future, we can discard the response and abort and optionally remind the user of the previous cause of the problem. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** This bug has been flagged as a security vulnerability -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
My DSL modem, when the network is down, responds to anything http with a page redirecting to an error page on the modem. I found some examples of this in some of the *Release files in my /var/lib/apt/lists. Hard to imagine why apt-get prefers a local copy that it has PROVED to be bogus over re-fetching the file from the server. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
I am on a university network that fake DNS responses to re-direct you to a login page before you are allowed to access the external network. This is a pretty common setup for wifi on e.g. airports, restaurants, hotels, etc. I hit this bug reliably if an apt-get update is run while I am connected to the network but not logged in. Presumably apt-get thinks it is fetching index files, but gets copies of the login page instead, which breaks the cache. It is possible that a lot of these bug reports are caused by Ubuntu's automatic update of the apt cache running while the user is on such a network. Apart from the annoyance, isn't this a security issue? Since Ubuntu default is to automatically update the package index without user request, one cannot be sure what kind of network the user is on when it happens. If it is an untrusted network there is obviously the risk of denial-of-service (breakage of the user's apt cache), if not worse (feed user fake data?). Isn't some kind of key-signature thing needed before any changes happens in the apt cache? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: apt (Ubuntu Precise) Status: Fix Committed = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: apt (Ubuntu Precise) Status: Triaged = Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
People who added to this bug report had a number of different issues. 1. Some people did not import the relevant keys. For them, something like sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys DB141E2302FDF932 solved their problem. 2. Some people had bad files on the local box (through proxy or direct download) and for them the fix was sudo mv /var/lib/apt/lists /var/lib/apt/lists.old ; sudo mkdir -p /var/lib/apt/lists/partial 3. Some had bad cached content on a normal, by-passable proxy. For them, the fix is sudo aptitude -o Acquire::http::No-Cache=True -o Acquire::BrokenProxy=true update 4. Some had transparent Proxy authentication problems, which cannot be fixed in ubuntu. (authenticating fixed it for the user) 5. Some had transparent proxy problems with bad cached content on the proxy, which can't be fixed in ubuntu. (changing the mirror, so that the url did not match what the proxy had cached, fixed this. It's a long bug report. I might have missed a different kind of problem or two, but for everyone the symptoms looked the same (that's how they got here). I don't see how this bug could possibly be fixed for all the different root causes listed here and if you close this bug, the information for some of these problems will essentially be lost. Is there a better place to document this and help people find their specific problem? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: apt (Ubuntu Precise) Status: In Progress = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
open your terminal and do this sudo rm -rf /var/lib/apt/lists/* sudo apt-get update -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Tags added: rls-mgr-p-tracking -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: apt (Ubuntu Precise) Status: Triaged = In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Also affects: apt (Ubuntu Precise) Importance: High Status: Triaged ** Also affects: update-manager (Ubuntu Precise) Importance: Low Status: Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
As far as I can see, the problem here is that apt is inappropriately caching files that fail validation, rather than removing them and allowing them to be fetched again. Fixing that would probably be enough to consign this bug to the dustbin of history, which I'm sure would be welcomed by all concerned. I put a bit of effort into coming up with a reliable reproduction case for this bug. I've attached a 'dummy-proxy' script, which is a trivial Twisted server that can be used as an HTTP proxy; it listens on localhost:8080 and returns some junk HTML in response to every request. Run it in one terminal. In another terminal, run: chdist create captive-portal echo 'deb http://archive.ubuntu.com/ubuntu lucid main' ~/.chdist/captive-portal/etc/apt/sources.list chdist apt-get captive-portal update # should complete successfully http_proxy=http://localhost:8080/ chdist apt-get captive-portal update # should fail chdist apt-get captive-portal update # now this fails with BADSIG ** Attachment added: simple proxy to help reproduce this bug https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+attachment/2629686/+files/dummy-proxy ** Changed in: apt (Ubuntu) Importance: Low = High -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
I suspect that the exact causes of this have shifted over time. The two relevant cases in precise (at least assuming that my test case is sufficient) seem to be: InRelease renamed to Release despite signature failure IndexDiff files moved to /var/lib/apt/lists/ despite parse failure The latter is easily fixed by reordering pkgAcqDiffIndex::Done, I guess, but I'm puzzled by the former. In pkgAcqMetaIndex::Failed it appears to be deliberate: /* Always move the meta index, even if gpgv failed. This ensures * that PackageFile objects are correctly filled in */ So if an HTTP proxy returns some junk for anything you ask for, including an InRelease file that wouldn't exist if we were actually talking to the real archive, we'll save that as Release? This seems bizarre. Can we deal with the problem alluded to in that comment some other way? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
The idea is that even if the signature can't be checked (= key is not in the keyring) that we still use the Release file to decide which files to download (e.g. pdiffs/translations available?) and use the Hashsums for checking. The later doesn't provide a good trust path, but playing man- in-the-middle is a bit harder this way and we can detect download failures. The commits adding this should have some more reasons for it included (i don't have the source handy currently for quoting) So what we should do is discard the (In)Release file in some cases (bad signature) and keep it in others (key not in keyring). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
This happens to me if update-mangager starts before I've had a change to type the proxy password (pretty much every day in the office) It would be nice if apt would wipe the BADSIGs on a restart, so that I can get a fresh list after typing the proxy password without manually removing files in /var/lib/apt/lists/. I'm going to have to cron it otherwise. Why does it not overwrite BADSIGs with new ones? Alternatively I'm going to have to get update-manager to wait a bit until 10 minutes after login to start downloading. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Robbie, why has this been triaged as Won't fix? this causes real problems for people trying to run Ubuntu on machines behind Squid proxies that they don't control (for example in a corporate or university environment). It seems to me that an appropriate fix would be for apt-get clean to actually remove the cached lists files, as well as the partial directory contents. At the moment, there's no apt-get command which properly cleans the downloaded files. As such, this is really a problem in Debian, not Ubuntu, and should be passed upstream. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: apt (Ubuntu) Status: Won't Fix = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Changed in: update-manager (Ubuntu) Assignee: Michael Vogt (mvo) = (unassigned) ** Changed in: apt (Ubuntu) Status: Confirmed = Won't Fix ** Changed in: update-manager (Ubuntu) Status: Confirmed = Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Looks like this is a quite a well-known issue in debian systems. - Virtual Box even mentions this workaround in their Linux downloads page: What to do when experiencing The following signatures were invalid: BADSIG ... when refreshing the packages from the repository? http://www.virtualbox.org/wiki/Linux_Downloads -- You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. https://bugs.launchpad.net/bugs/24061 Title: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
** Description changed: I keep getting this when i launch the update manager. W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key ftpmas...@ubuntu.com How can I fix it? + *** + WORKAROUND: + -- + Run the following commands and the BADSIG error does not occur : + + + $ cd /var/lib/apt + $ sudo mv lists lists.old + $ sudo mkdir -p lists/partial + $ sudo apt-get update + + *** + comment from Rolf Leggewie: This is due to cache inconsistencies and thus is not necessarily a bug in Ubuntu at all. But I hope the fine devs can find a way to better deal with broken proxies. This is a very visible issue, a large number of internet connections are behind proxies and the users cannot do anything about it. ** Description changed: I keep getting this when i launch the update manager. W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key ftpmas...@ubuntu.com How can I fix it? *** WORKAROUND: -- - Run the following commands and the BADSIG error does not occur : - + Run the following commands(saves a backup of the old lists and creates a new lists folder) and the BADSIG error does not occur : $ cd /var/lib/apt $ sudo mv lists lists.old $ sudo mkdir -p lists/partial $ sudo apt-get update *** comment from Rolf Leggewie: This is due to cache inconsistencies and thus is not necessarily a bug in Ubuntu at all. But I hope the fine devs can find a way to better deal with broken proxies. This is a very visible issue, a large number of internet connections are behind proxies and the users cannot do anything about it. ** Changed in: update-manager (Ubuntu) Importance: Medium = Low ** Changed in: apt (Ubuntu) Importance: Undecided = Low -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Like Pieter above I have recently received a BADSIG DB141E2302FDF932 error along with the original BADSIG 40976EAF437D05B5 on a different machine to my previous post. The procedure I used earlier in this thread worked to clear the BADSIG 40976EAF437D05B5 error but not the other one. from http://ubuntuforums.org/showthread.php?t=1632093 I got:- sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys DB141E2302FDF932 which worked for me but I am unsure if this is a safe fix. Please comment if you can confirm the correctness of the above. -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
No 100% sure if i have the same problem. $ sudo apt-get update ... Fetched 2,673B in 5s (446B/s) Reading package lists... Done W: GPG error: http://extras.ubuntu.com maverick Release: The following signatures were invalid: BADSIG DB141E2302FDF932 Launchpad Application Review Board PPA W: GPG error: http://archive.canonical.com lucid Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key ftpmas...@ubuntu.com $ I fixed it with info from here http://ohioloco.ubuntuforums.org/showthread.php?t=803585 sudo bash apt-get clean cd /var/lib/apt mv lists lists.old mkdir -p lists/partial apt-get clean apt-get update -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
I am using apt-cacher-ng on 10.04 and had this problem. Things were complicated by me having forgotten about a file:- cat /etc/apt/apt.conf.d/80aptcacherng Acquire::http { Proxy http://127.0.0.1:3142;; }; So I first removed this file such that I could have no apt-cacher-ng via command line and turn on via synaptic settings network after the following. I then did:- sudo rm -rf /var/cache/apt-cacher-ng/uburep/dists/* sudo /etc/init.d/apt-cacher-ng restart (thanks to Martin Forest above) sudo apt-get clean sudo mv /var/lib/apt/lists /var/lib/apt/lists.old sudo mkdir -p /var/lib/apt/lists/partial sudo apt-get clean sudo apt-get update (thanks to Oliver Stieber and others) I have put some clean's in there as well. I add this comment as having tried a variety of 'fixes' that didn't the above worked for me. Hope this helps someone. -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Ok, I had this [or at least something oh so similar]. first I tried the sudo aptitude -o Acquire::http::No-Cache=True -o Acquire::BrokenProxy=true update sudo apt-get update work around, with no success. then: cd /var/lib/apt sudo mv lists lists.old sudo mkdir -p lists/partial sudo apt-get update which worked. So then I thought, seeing as no-one seems to have a clue what's going on and the bug has been in apt-get or a dependency for a log time I'd spend a few minutes to find out what the problem really is. (one of the files that failed for me was a release repository file so it's static SFAIK) ls list 'file that failed' ls lists/partial 'file that failed' 'file that failed'.gpg delta lists/'file that failed' lists/partial/'file that failed' deta says. Bits before MD5Sum: in lists/partial file contain the HTML of my landing page. Bits before MD5Sum: in lists contain HTTP like header (line separated key colon space value pares) So this identifies a couple of potential problems on it's own, if not more. 1: even though the file fails the .gpg checksum or whatever it is test, no mention of any way to examine and then 'force' apt to fix the problem e.g. junk the file is apparently offered or given. 2: Two separate HTTP requests to two (or more) separate locations are made to build a composite file up, but validation is somewhat lacking (on either the date returned[thought that's what I think the .gpg is for?], or that the file serving up the files actually matches that which has been requested. file in partial and in lists had same date. So I assume the date of the landing page was compared against the date of the file in lists, but the date in one of the parts of the body or somewhere was used for the file date. so 1: dates of the multiple parts of the file should match, and this is not being tested for. 2: (should be fixed by the above/possibly) the date that used to check to see if an update is needed comes from a different request than the date of the actual file itself. it doesn't matter if the .gpg file is in partial or not, effect is still the same. touch -m on the file in partial, with a date before the file date, causes a new file to be fetched. So there seem to be quite a number of bugs in just the way this fault presented itself on my computer 'Ubuntu 10.04' url/ip address validation and that kind of thing should possibly be looked at, or at-least allow the user to lock them. I have no idea why the file is in multiple parts, that should have the same date and I imagine be on the exact same server, but not validation is performed to that regard. should files in partial be validated when update (or whatever) is called and the user asked if they want to junk old crappy ones before continuing? I think the error should really give a bit more info, other errors tell you what to do, or work around (sometimes they don't actually fix the issue, but it's a start!) anyhow, I'm going to pull some source down, and hope I don't have to shut my eye's too often whilst fixing this one.(soon hopefully) Ok, that all took me about 50mins to find out after having a poke around. I expect there are other bugs, so I'll do a good audit whilst I'm at this one. 5+ years is a long time with something like this still kicking around.in the package management system potentially blocking security updates and such (it did with me!) -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Ok, I had this [or at least something oh so similar]. BADSIG All I did was first I tried the sudo aptitude -o Acquire::http::No-Cache=True -o Acquire::BrokenProxy=true update sudo apt-get update work around, with no success. then: cd /var/lib/apt sudo mv lists lists.old sudo mkdir -p lists/partial sudo apt-get update which worked. then install kdiff3 delta the directories to see what was wrong. identify the differences between the good and the ugly (list.old) one error was against archive.canonical.com lucid Release I thought that would be a nice stable file to pick, seeing as fixes don't get put into the release repo. and in the delta 'archive.canonical.com_ubuntu_dists_lucid_Release' showed up with oddness. Here's a brief write up of what I identified and how. I'm also going to poke through the code from the BADSIG message and see if it's pretty damb easy to read the code and backtrace the problem. (or at-least release a version that actually collects the info that hasn't been for 5 years, in lieu of a 'proper' fix) then work out as follows: So then I thought, seeing as no-one seems to have a clue what's going on and the bug has been in apt-get or a dependency for a log time I'd spend a few minutes to find out what the problem really is. (one of the files that failed for me was a release repository file so it's static SFAIK) ls list 'file that failed' ls lists/partial 'file that failed' 'file that failed'.gpg delta lists/'file that failed' lists/partial/'file that failed' deta says. Bits before MD5Sum: in lists/partial file contain the HTML of my landing page. Bits before MD5Sum: in lists contain HTTP like header (line separated key colon space value pares) So this identifies a couple of potential problems on it's own, if not more. 1: even though the file fails the .gpg checksum or whatever it is test, no mention of any way to examine and then 'force' apt to fix the problem e.g. junk the file is apparently offered or given. 2: Two separate HTTP requests to two (or more) separate locations are made to build a composite file up, but validation is somewhat lacking (on either the date returned[thought that's what I think the .gpg is for?], or that the file serving up the files actually matches that which has been requested. file in partial and in lists had same date. So I assume the date of the landing page was compared against the date of the file in lists, but the date in one of the parts of the body or somewhere was used for the file date. so 1: dates of the multiple parts of the file should match, and this is not being tested for. 2: (should be fixed by the above/possibly) the date that used to check to see if an update is needed comes from a different request than the date of the actual file itself. it doesn't matter if the .gpg file is in partial or not, effect is still the same. touch -m on the file in partial, with a date before the file date, causes a new file to be fetched. So there seem to be quite a number of bugs in just the way this fault presented itself on my computer 'Ubuntu 10.04' url/ip address validation and that kind of thing should possibly be looked at, or at-least allow the user to lock them. I have no idea why the file is in multiple parts, that should have the same date and I imagine be on the exact same server, but not validation is performed to that regard. should files in partial be validated when update (or whatever) is called and the user asked if they want to junk old crappy ones before continuing? I think the error should really give a bit more info, other errors tell you what to do, or work around (sometimes they don't actually fix the issue, but it's a start!) anyhow, I'm going to pull some source down, and hope I don't have to shut my eye's too often whilst fixing this one.(soon hopefully) Ok, that all took me about 50mins to find out after having a poke around. I expect there are other bugs, so I'll do a good audit whilst I'm at this one. 5+ years is a long time with something like this still kicking around.in the package management system potentially blocking security updates and such (it did with me!) -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
the bad router was from the wgr family the physical ports stopped working after a firmware update -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Does this issue occur in Maverick? ** Changed in: update-manager (Ubuntu) Status: Confirmed = Incomplete ** Changed in: apt (Ubuntu) Status: Confirmed = Incomplete -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Already confirmed on Lucid with a previous comment. ** Changed in: apt (Ubuntu) Status: Incomplete = Confirmed ** Changed in: update-manager (Ubuntu) Status: Incomplete = Confirmed -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
On the apt-cache-ng server, I just removed all content in the directory /var/cache/apt-cacher-ng/uburep/dists and restarted apt-cache-ng. I no longer have the error. All cached files are in /var/cache/apt-cacher- ng/uburep/pool/ so removing the dists info, does not generate a lot of internet traffic... (I 've had this issue since 8.04. I'm now running 10.0.4 and ran in to the same issue... I wonder...) Finger crossed for the rest of you! /Martin -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
Ok. So I switched to using apt-cacher-ng for my caching and started to see this bug again. To fix this, just remove all the Sources, Packages and Translation files from /var/cache/apt-cacher-ng (apt-cacher has the same issues) directory. Example: DIR=/var/cache/apt-cacher-ng cd $DIR || exit 1 for file in Release Packages Sources Translation; do find . -type f -name *$file* -exec rm {} \; done After that I would be able to run apt-get update and everything would be fine. Perhaps this bug should include apt-cacher and apt-cacher-ng as they are both part of this problem and they need new logic to update those control files mentioned above. -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
This still exists. As mentioned in the duplicate https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24234 it's been an issue for 5 years. The fix that works for me is stated by Geoff in the other bug sudo apt-get update -o Acquire::http::No-Cache=true Whether this works in all cases or not, I don't know. However, from an advocacy standpoint, regardless of who or what is at fault, it's a bad thing, probably frightening to newcomers. Perhaps ensuring that a message along with it would solve the problem. As it is, it's cryptic, giving no indication that it's a minor issue that will probably disappear in an hour Something along the lines of, after the error message, please try running sudo apt-get update -o Acquire::http::No-Cache=true, then run apt-get update again would be an explanation that newcomers can understand, one that would probably fix the issue, which will probably continue, since it often just seems to be a minor glitch, and not scare people off. -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
RE: [Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)
turned out to be bad physical ports on a router i was useing. Date: Fri, 26 Mar 2010 14:42:37 + From: scottr...@gmail.com To: geomon...@hotmail.com Subject: [Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) This still exists. As mentioned in the duplicate https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24234 it's been an issue for 5 years. The fix that works for me is stated by Geoff in the other bug sudo apt-get update -o Acquire::http::No-Cache=true Whether this works in all cases or not, I don't know. However, from an advocacy standpoint, regardless of who or what is at fault, it's a bad thing, probably frightening to newcomers. Perhaps ensuring that a message along with it would solve the problem. As it is, it's cryptic, giving no indication that it's a minor issue that will probably disappear in an hour Something along the lines of, after the error message, please try running sudo apt-get update -o Acquire::http::No-Cache=true, then run apt-get update again would be an explanation that newcomers can understand, one that would probably fix the issue, which will probably continue, since it often just seems to be a minor glitch, and not scare people off. -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a direct subscriber of a duplicate bug. Status in “apt” package in Ubuntu: Confirmed Status in “update-manager” package in Ubuntu: Confirmed Bug description: I keep getting this when i launch the update manager. W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key ftpmas...@ubuntu.com How can I fix it? comment from Rolf Leggewie: This is due to cache inconsistencies and thus is not necessarily a bug in Ubuntu at all. But I hope the fine devs can find a way to better deal with broken proxies. This is a very visible issue, a large number of internet connections are behind proxies and the users cannot do anything about it. To unsubscribe from this bug, go to: https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscribe _ Hotmail is redefining busy with tools for the New Busy. Get more from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_2 -- GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5) https://bugs.launchpad.net/bugs/24061 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs