[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2015-06-05 Thread riveravaldez
Just for the record, I'd just encountered this problem on a Linux Mint
box and the 'Workaround' of the 'Bug description' has solved it:

$ uname -a
Linux 3.2.0-58-generic #88-Ubuntu SMP Tue Dec 3 17:37:58 UTC 2013 x86_64 x86_64 
x86_64 GNU/Linux

$ cat /etc/linuxmint/info
RELEASE=13
CODENAME=maya
EDITION=MATE 64-bit
DESCRIPTION=Linux Mint 13 Maya
DESKTOP=MATE
TOOLKIT=GTK

Thanks a lot!

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2015-03-19 Thread haiko2201
I have some problem with a local mirror (apt-mirror)

Holen: 1 http://192.168.0.100 trusty InRelease [246 B]   
Holen: 2 http://192.168.0.100 trusty-updates InRelease [246 B]   
Holen: 3 http://192.168.0.100 trusty-backports InRelease [246 B]
Holen: 4 http://192.168.0.100 trusty-security InRelease [246 B]
Ign http://192.168.0.100 trusty InRelease  Splitting up 
/var/lib/apt/lists/partial/192.168.0.100_ubuntu_dists_trusty_InRelease into 
data and signature failed
E: GPG-Fehler: http://192.168.0.100 trusty InRelease: Clearsigned file isn't 
valid, got 'NODATA' (does the network require authentication?)

in the directories like http://192.168.0.100/ubuntu/dists/trusty/ I have
a InRelease file

html
head
meta http-equiv=Content-Type content=text/html; charset=utf-8 /
titlereplace/title
body
script language=JavaScript type=text/javascript
var pageName = '/';
top.location.replace(pageName);
/script
/body
/html

if I am deleting it all works fine but after the next refresh of apt-
mirror InRelease is back and it happens the same.

I found a fix

#!/bin/bash
sudo cp -arf /var/lib/dpkg /var/lib/dpkg.backup
sudo cp /var/lib/dpkg/status-old /var/lib/dpkg/status
sudo cp /var/lib/dpkg/available-old /var/lib/dpkg/available
sudo rm -rf /var/lib/dpkg/updates/*
sudo rm -rf /var/lib/apt/lists
sudo mkdir /var/lib/apt/lists
sudo mkdir /var/lib/apt/lists/partial
sudo apt-get clean
sudo apt-get update
sudo dpkg --clear-avail
sudo dpkg --configure -a
sudo apt-get install -f
sudo apt-get update
sudo apt-get dist-upgrade


did not work!

With the normal Repos everything is ok.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


Re: [Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2015-03-19 Thread Tim Smith
Please post your sources file

On Thu, 19 Mar 2015 13:57 haiko2201 2201ha...@gmail.com wrote:

 I have some problem with a local mirror (apt-mirror)

 Holen: 1 http://192.168.0.100 trusty InRelease [246 B]
 Holen: 2 http://192.168.0.100 trusty-updates InRelease [246 B]
 Holen: 3 http://192.168.0.100 trusty-backports InRelease [246 B]
 Holen: 4 http://192.168.0.100 trusty-security InRelease [246 B]
 Ign http://192.168.0.100 trusty InRelease  Splitting
 up /var/lib/apt/lists/partial/192.168.0.100_ubuntu_dists_trusty_InRelease
 into data and signature failed
 E: GPG-Fehler: http://192.168.0.100 trusty InRelease: Clearsigned file
 isn't valid, got 'NODATA' (does the network require authentication?)

 in the directories like http://192.168.0.100/ubuntu/dists/trusty/ I have
 a InRelease file

 html
 head
 meta http-equiv=Content-Type content=text/html; charset=utf-8 /
 titlereplace/title
 body
 script language=JavaScript type=text/javascript
 var pageName = '/';
 top.location.replace(pageName);
 /script
 /body
 /html

 if I am deleting it all works fine but after the next refresh of apt-
 mirror InRelease is back and it happens the same.

 I found a fix

 #!/bin/bash
 sudo cp -arf /var/lib/dpkg /var/lib/dpkg.backup
 sudo cp /var/lib/dpkg/status-old /var/lib/dpkg/status
 sudo cp /var/lib/dpkg/available-old /var/lib/dpkg/available
 sudo rm -rf /var/lib/dpkg/updates/*
 sudo rm -rf /var/lib/apt/lists
 sudo mkdir /var/lib/apt/lists
 sudo mkdir /var/lib/apt/lists/partial
 sudo apt-get clean
 sudo apt-get update
 sudo dpkg --clear-avail
 sudo dpkg --configure -a
 sudo apt-get install -f
 sudo apt-get update
 sudo apt-get dist-upgrade


 did not work!

 With the normal Repos everything is ok.

 --
 You received this bug notification because you are subscribed to a
 duplicate bug report (117010).
 https://bugs.launchpad.net/bugs/24061

 Title:
   GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
   40976EAF437D05B5)

 To manage notifications about this bug go to:
 https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions


-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2014-03-18 Thread John A Meinel
FWIW, I do see this occasionally, but I'm guessing my ISP is doing transparent 
proxy caching. However,
 sudo apt-get update -o Acquire::http::No-Cache=true
Did fix it for me.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2013-10-26 Thread Tumblestump Fomplebottom
Just ran into this problem on 13.10. If a fix was released 12 months ago
why is it still happening?

My situation seems similar to all the rest, rather than a 404 my
satellite ISP returns nonstandard error messages about link outage if it
does not return results in time and apt-get got permanently screwed up
from it.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2013-03-26 Thread ValeryK
Last week I try to update my kubuntu 12.04x64, but with mistakes, today I do:
sudo rm -rf /var/lib/apt/lists/partial
sudo mkdir -p /var/lib/apt/lists/partial
sudo apt-get clean
sudo apt-get update
and then I see again and again:
Не удалось загрузить (failing to load?)  
gpgv:/var/lib/apt/lists/partial/extras.ubuntu.com_ubuntu_dists_precise_Release.gpg

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2013-03-05 Thread Tiago Neiva
I'm running Quantal and on Wifi captive portals the issue still happens
apt broken

I know how to fix, but less tech savy users get lost...

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-10-11 Thread Brian Murray
Regarding point #2 in comment #70:

2. Some people had bad files on the local box (through proxy or direct
download) and for them the fix was sudo mv /var/lib/apt/lists
/var/lib/apt/lists.old ; sudo mkdir -p /var/lib/apt/lists/partial

The issue of apt creating bad files on disk in /var/lib/apt/lists/ has
been fixed in the quantal release of Ubuntu which will become Ubuntu
12.10.  Details regarding the fix appear in this changelog:

apt (0.9.7.5ubuntu2) quantal; urgency=low

  Merged from lp:~donkult/apt/experimental:

  [ David Kalnischkies ]
  * apt-pkg/contrib/strutl.cc:
- support \n and \r\n line endings in ReadMessages

  [ Michael Vogt ]
  * lp:~mvo/apt/webserver-simulate-broken-with-fix346386:
- merge fix for LP: #346386

I've tested that version of apt with the dummy-proxy provided by Colin
Watson and I received the following message in a terminal after running
apt-get update:

W: A error occurred during the signature verification. The repository is not 
updated and the previous index files will be used. GPG error:
http://archive.ubuntu.com precise Release: The following signatures were 
invalid: NODATA 1 NODATA 2
W: Failed to fetch http://archive.ubuntu.com/ubuntu/dists/precise/Release
W: Some index files failed to download. They have been ignored, or old ones 
used instead.

After this I was able to use apt-get update again without having to
clear the files in /var/lib/apt/lists.  You may find some further
information about this bug in bug 346386.

We are currently working on getting this fix into the -proposed
repository for 12.04 and a comment will be added to bug 346386
indicating when it is available and how to test it.

I'll do some further research into update-manager's behavior if there
are bad files in /var/lib/apt/lists and open a new bug as needed.  There
are likely some user interface improvements that should be made if index
files are corrupt or fail to download.

** Changed in: apt (Ubuntu Quantal)
   Status: Triaged = Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-10-11 Thread Brian Murray
Bug 997200 has some details about improvements that could be made to
update-manager.

The fix for apt is now available in precise-proposed and details
regarding testing can be found in bug 346386.  I'm going to set the
Precise task to Fix Released rather than risk forgetting to close this
bug when apt moves to precise-updates.

** Changed in: apt (Ubuntu Precise)
   Status: Triaged = Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-10-10 Thread Steve Langasek
** Changed in: apt (Ubuntu)
 Assignee: (unassigned) = Brian Murray (brian-murray)

** Also affects: apt (Ubuntu Quantal)
   Importance: High
 Assignee: Brian Murray (brian-murray)
   Status: Triaged

** Also affects: update-manager (Ubuntu Quantal)
   Importance: Low
   Status: Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-08-29 Thread Paul Perkins
The specific bug I am interested in is case 2 from comment 70: 2. Some
people had bad files on the local box (through proxy or direct download)
and for them the fix was sudo mv /var/lib/apt/lists
/var/lib/apt/lists.old ; sudo mkdir -p /var/lib/apt/lists/partial.

This can happen because of common, transient network errors and I'm sure
the black hats have ways of inducing or simulating such errors as well.
The bug is NOT that Ubuntu doesn't notice that the files are bad. The
bug is that when it notices that the files are bad, it responds only by
rather quietly suspending updates from the repositories corresponding to
the bad files. The BAD SIG error message does not even go anywhere that
the user is going to see until they start investigating and try running
command line tools instead of the GUI stuff. To me the obvious first
step in fixing this is for the update manager to automatically apply the
manual fix of clobbering the bad files in /var/lib/apt/lists, and if
that doesn't work, wave a red flag at the user.

The security implication that I see is that this bug represents a way
for bad guys to block security updates to selected machines, possibly
forever.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-08-28 Thread René Lara
** Description changed:

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-08-28 Thread René Lara
WORKAROUND:
--
Run the following commands(saves a backup of the old lists and creates a new 
lists folder) and the BADSIG error does not occur :

$ cd /var/lib/apt
$ sudo mv lists lists.old
$ sudo mkdir -p lists/partial
$ sudo apt-get update


Worked just fine

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-08-28 Thread Andrew
The proposed workaround does not work if the connection is still being
intercepted and returning invalid responses. It addresses point 2 of
comment #70, but not the other four causes.

I suggest that a challenge-response mechanism could help to detect
intercepting proxies and provide better feedback to the user. Any
feedback on the idea would be appreciated.

When a BADSIG error occurs
1. Send a random string to a specific Ubuntu Web service.
2. Calculate a hash of the same string.
3. Compare the server response to the calculated hash. If a non-error response 
is received without the hash occuring anywhere in the response, the connection 
has been intercepted.
4. If it has been determined that the connection is being intercepted, the user 
can be alerted of the potential reason for the BADSIG error. If using a gui 
tool, the user can be guided to determine if the problem is an authentication 
issue (by opening a page in a browser) and given the opportunity to cancel the 
update or confirm the cause of the problem and retry.
5. If the same, or very similar response is received in future, we can discard 
the response and abort and optionally remind the user of the previous cause of 
the problem.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-07-26 Thread Jamie Strandboge
** This bug has been flagged as a security vulnerability

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-06-22 Thread Paul Perkins
My DSL modem, when the network is down, responds to anything http with a
page redirecting to an error page on the modem. I found some examples of
this in some of the *Release files in my /var/lib/apt/lists. Hard to
imagine why apt-get prefers a local copy that it has PROVED to be bogus
over re-fetching the file from the server.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-04-25 Thread Rickard Armiento
I am on a university network that fake DNS responses to re-direct you to
a login page before you are allowed to access the external network. This
is a pretty common setup for wifi on e.g. airports, restaurants, hotels,
etc.

I hit this bug reliably if an apt-get update is run while I am connected
to the network but not logged in. Presumably apt-get thinks it is
fetching index files, but gets copies of the login page instead, which
breaks the cache. It is possible that a lot of these bug reports are
caused by Ubuntu's automatic update of the apt cache running while the
user is on such a network.

Apart from the annoyance, isn't this a security issue? Since Ubuntu
default is to automatically update the package index without user
request, one cannot be sure what kind of network the user is on when it
happens. If it is an untrusted network there is obviously the risk of
denial-of-service (breakage of the user's apt cache), if not worse (feed
user fake data?). Isn't some kind of key-signature thing needed before
any changes happens in the apt cache?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-04-17 Thread Brian Murray
** Changed in: apt (Ubuntu Precise)
   Status: Fix Committed = Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-04-16 Thread Jhon Kleiton Natal Gonçalves
** Changed in: apt (Ubuntu Precise)
   Status: Triaged = Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-04-16 Thread Andrew
People who added to this bug report had a number of different issues.
1. Some people did not import the relevant keys. For them, something like sudo 
apt-key adv --keyserver keyserver.ubuntu.com --recv-keys DB141E2302FDF932 
solved their problem.
2. Some people had bad files on the local box (through proxy or direct 
download) and for them the fix was sudo mv /var/lib/apt/lists 
/var/lib/apt/lists.old ; sudo mkdir -p /var/lib/apt/lists/partial
3. Some had bad cached content on a normal, by-passable proxy. For them, the 
fix is sudo aptitude -o Acquire::http::No-Cache=True -o 
Acquire::BrokenProxy=true update
4. Some had transparent Proxy authentication problems, which cannot be fixed in 
ubuntu. (authenticating fixed it for the user)
5. Some had transparent proxy problems with bad cached content on the proxy, 
which can't be fixed in ubuntu. (changing the mirror, so that the url did not 
match what the proxy had cached, fixed this.

It's a long bug report. I might have missed a different kind of problem
or two, but for everyone the symptoms looked the same (that's how they
got here).

I don't see how this bug could possibly be fixed for all the different
root causes listed here and if you close this bug, the information for
some of these problems will essentially be lost.

Is there a better place to document this and help people find their
specific problem?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-04-13 Thread Barry Warsaw
** Changed in: apt (Ubuntu Precise)
   Status: In Progress = Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-04-12 Thread RajaSekharReddy Genupula
open your terminal and do this

sudo rm -rf /var/lib/apt/lists/*
sudo apt-get update

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-03-22 Thread Kate Stewart
** Tags added: rls-mgr-p-tracking

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2012-01-13 Thread Barry Warsaw
** Changed in: apt (Ubuntu Precise)
   Status: Triaged = In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-12-13 Thread Colin Watson
** Also affects: apt (Ubuntu Precise)
   Importance: High
   Status: Triaged

** Also affects: update-manager (Ubuntu Precise)
   Importance: Low
   Status: Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-12-12 Thread Colin Watson
As far as I can see, the problem here is that apt is inappropriately
caching files that fail validation, rather than removing them and
allowing them to be fetched again.  Fixing that would probably be enough
to consign this bug to the dustbin of history, which I'm sure would be
welcomed by all concerned.

I put a bit of effort into coming up with a reliable reproduction case
for this bug.  I've attached a 'dummy-proxy' script, which is a trivial
Twisted server that can be used as an HTTP proxy; it listens on
localhost:8080 and returns some junk HTML in response to every request.
Run it in one terminal.  In another terminal, run:

  chdist create captive-portal
  echo 'deb http://archive.ubuntu.com/ubuntu lucid main' 
~/.chdist/captive-portal/etc/apt/sources.list
  chdist apt-get captive-portal update
  # should complete successfully
  http_proxy=http://localhost:8080/ chdist apt-get captive-portal update
  # should fail
  chdist apt-get captive-portal update
  # now this fails with BADSIG

** Attachment added: simple proxy to help reproduce this bug
   
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+attachment/2629686/+files/dummy-proxy

** Changed in: apt (Ubuntu)
   Importance: Low = High

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-12-12 Thread Colin Watson
I suspect that the exact causes of this have shifted over time.  The two
relevant cases in precise (at least assuming that my test case is
sufficient) seem to be:

  InRelease renamed to Release despite signature failure
  IndexDiff files moved to /var/lib/apt/lists/ despite parse failure

The latter is easily fixed by reordering pkgAcqDiffIndex::Done, I guess,
but I'm puzzled by the former.  In pkgAcqMetaIndex::Failed it appears to
be deliberate:

   /* Always move the meta index, even if gpgv failed. This ensures
* that PackageFile objects are correctly filled in */

So if an HTTP proxy returns some junk for anything you ask for,
including an InRelease file that wouldn't exist if we were actually
talking to the real archive, we'll save that as Release?  This seems
bizarre.  Can we deal with the problem alluded to in that comment some
other way?

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-12-12 Thread David Kalnischkies
The idea is that even if the signature can't be checked (= key is not in
the keyring) that we still use the Release file to decide which files to
download (e.g. pdiffs/translations available?) and use the Hashsums for
checking. The later doesn't provide a good trust path, but playing man-
in-the-middle is a bit harder this way and we can detect download
failures. The commits adding this should have some more reasons for it
included (i don't have the source handy currently for quoting)

So what we should do is discard the (In)Release file in some cases (bad
signature) and keep it in others (key not in keyring).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-10-21 Thread Berend De Schouwer
This happens to me if update-mangager starts before I've had a change to
type the proxy password (pretty much every day in the office)

It would be nice if apt would wipe the BADSIGs on a restart, so that I
can get a fresh list after typing the proxy password without manually
removing files in /var/lib/apt/lists/.  I'm going to have to cron it
otherwise.  Why does it not overwrite BADSIGs with new ones?

Alternatively I'm going to have to get update-manager to wait a bit
until 10 minutes after login to start downloading.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-10-10 Thread Tim Cutts
Robbie, why has this been triaged as Won't fix? this causes real
problems for people trying to run Ubuntu on machines behind Squid
proxies that they don't control (for example in a corporate or
university environment).

It seems to me that an appropriate fix would be for apt-get clean to
actually remove the cached lists files, as well as the partial directory
contents.  At the moment, there's no apt-get command which properly
cleans the downloaded files.

As such, this is really a problem in Debian, not Ubuntu, and should be
passed upstream.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-01-15 Thread Robbie Williamson
** Changed in: apt (Ubuntu)
   Status: Won't Fix = Triaged

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2011-01-14 Thread Robbie Williamson
** Changed in: update-manager (Ubuntu)
 Assignee: Michael Vogt (mvo) = (unassigned)

** Changed in: apt (Ubuntu)
   Status: Confirmed = Won't Fix

** Changed in: update-manager (Ubuntu)
   Status: Confirmed = Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-12-24 Thread Vish
Looks like this is a quite a well-known issue in debian systems.
- Virtual Box even mentions this workaround in their Linux downloads page:
What to do when experiencing The following signatures were invalid: BADSIG ... 
when refreshing the packages from the repository?  
http://www.virtualbox.org/wiki/Linux_Downloads

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-11-30 Thread Vish
** Description changed:

  I keep getting this when i launch the update manager.
  
  W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following
  signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
  Signing Key ftpmas...@ubuntu.com
  
  How can I fix it?
  
+ ***
+ WORKAROUND:
+ --
+ Run the following commands and the BADSIG error does not occur :
+ 
+ 
+ $ cd /var/lib/apt
+ $ sudo mv lists lists.old
+ $ sudo mkdir -p lists/partial
+ $ sudo apt-get update
+ 
+ ***
+ 
  comment from Rolf Leggewie: This is due to cache inconsistencies and
  thus is not necessarily a bug in Ubuntu at all.  But I hope the fine
  devs can find a way to better deal with broken proxies.  This is a very
  visible issue, a large number of internet connections are behind proxies
  and the users cannot do anything about it.

** Description changed:

  I keep getting this when i launch the update manager.
  
  W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following
  signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
  Signing Key ftpmas...@ubuntu.com
  
  How can I fix it?
  
  ***
  WORKAROUND:
  --
- Run the following commands and the BADSIG error does not occur :
- 
+ Run the following commands(saves a backup of the old lists and creates a new 
lists folder) and the BADSIG error does not occur :
  
  $ cd /var/lib/apt
  $ sudo mv lists lists.old
  $ sudo mkdir -p lists/partial
  $ sudo apt-get update
  
  ***
  
  comment from Rolf Leggewie: This is due to cache inconsistencies and
  thus is not necessarily a bug in Ubuntu at all.  But I hope the fine
  devs can find a way to better deal with broken proxies.  This is a very
  visible issue, a large number of internet connections are behind proxies
  and the users cannot do anything about it.

** Changed in: update-manager (Ubuntu)
   Importance: Medium = Low

** Changed in: apt (Ubuntu)
   Importance: Undecided = Low

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-11-29 Thread Philip Guyton
Like Pieter above I have recently received a BADSIG DB141E2302FDF932
error along with the original BADSIG 40976EAF437D05B5 on a different
machine to my previous post.  The procedure I used earlier in this
thread worked to clear the  BADSIG 40976EAF437D05B5 error but not the
other one.

from
http://ubuntuforums.org/showthread.php?t=1632093

I got:-
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys DB141E2302FDF932

which worked for me but I am unsure if this is a safe fix. Please
comment if you can confirm the correctness of the above.

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-11-27 Thread Pieter
No 100% sure if i have the same problem.

$ sudo apt-get update
...
Fetched 2,673B in 5s (446B/s)
Reading package lists... Done
W: GPG error: http://extras.ubuntu.com maverick Release: The following 
signatures were invalid: BADSIG DB141E2302FDF932 Launchpad Application Review 
Board PPA
W: GPG error: http://archive.canonical.com lucid Release: The following 
signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic 
Signing Key ftpmas...@ubuntu.com
$

I fixed it with info from here
http://ohioloco.ubuntuforums.org/showthread.php?t=803585
sudo bash
apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-11-15 Thread Philip Guyton
I am using apt-cacher-ng on 10.04 and had this problem.
Things were complicated by me having forgotten about a file:-
cat /etc/apt/apt.conf.d/80aptcacherng
Acquire::http { Proxy http://127.0.0.1:3142;; };

So I first removed this file such that I could have no apt-cacher-ng via
command line and turn on via synaptic settings network after the
following.

I then did:-

sudo rm -rf /var/cache/apt-cacher-ng/uburep/dists/*
sudo /etc/init.d/apt-cacher-ng restart
(thanks to Martin Forest  above)

sudo apt-get clean
sudo mv /var/lib/apt/lists /var/lib/apt/lists.old
sudo mkdir -p /var/lib/apt/lists/partial
sudo apt-get clean
sudo apt-get update
(thanks to Oliver Stieber and others)
I have put some clean's in there as well.

I add this comment as having tried a variety of 'fixes' that didn't the above 
worked for me.
Hope this helps someone.

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-10-23 Thread Oliver Stieber
Ok, I had this [or at least something oh so similar].

first I tried the 
sudo aptitude -o Acquire::http::No-Cache=True -o Acquire::BrokenProxy=true 
update

sudo apt-get update

work around, with no success.
then:
cd /var/lib/apt
sudo  mv lists lists.old
sudo   mkdir -p lists/partial
sudo apt-get update

which worked.
So then I thought, seeing as no-one seems to have a clue what's going on and 
the bug has been in apt-get or a dependency for a log time I'd spend a few 
minutes to find out what the problem really is.
(one of the files that failed for me was a release repository file so it's 
static SFAIK)
ls list
'file that failed'
ls lists/partial
'file that failed'
'file that failed'.gpg
delta lists/'file that failed'  lists/partial/'file that failed'

deta says.
Bits before MD5Sum: in lists/partial file contain the HTML of my landing page.
Bits before MD5Sum: in lists contain HTTP like header (line separated key colon 
space value pares)

So this identifies a couple of potential problems on it's own, if not more.
1: even though the file fails the .gpg checksum or whatever it is test, no 
mention of any way to examine and then 'force' apt to fix the problem e.g. junk 
the file is apparently offered or given.
2: Two separate HTTP requests to two (or more) separate locations are made to 
build a composite file up, but validation is somewhat lacking (on either the 
date returned[thought that's what I think the .gpg is for?], or that the file 
serving up the files actually matches that which has been requested.


file in partial and in lists had same date.
So I assume the date of the landing page was compared against the date of the 
file in lists, but the date in one of the parts of the body or somewhere was 
used for the file date.
so
1: dates of the multiple parts of the file should match, and this is not being 
tested for.
2: (should be fixed by the above/possibly) the date that used to check to see 
if an update is needed comes from a different request than the date of the 
actual file itself.


it doesn't matter if the .gpg file is in partial or not, effect is still the 
same. 
touch -m on the file in partial, with a date before the file date, causes a new 
file to be fetched.

So there seem to be quite a number of bugs in just the way this fault
presented itself on my computer 'Ubuntu 10.04'

url/ip address validation and that kind of thing should possibly be
looked at, or at-least allow the user to lock them. I have no idea why
the file is in multiple parts, that should have the same date and I
imagine be on the exact same server, but not validation is performed to
that regard.

should files in partial be validated when update (or whatever) is called
and the user asked if they want to junk old crappy ones before
continuing?

I think the error should really give a bit more info, other errors tell
you what to do, or work around (sometimes they don't actually fix the
issue, but it's a start!)

anyhow, I'm going to pull some source down, and hope I don't have to
shut my eye's too often whilst fixing this one.(soon hopefully)


Ok, that all took me about 50mins to find out  after having a poke around.
I expect there are other bugs, so I'll do a good audit whilst I'm at this one.
5+ years is a long time with something like this still kicking around.in the 
package management system potentially blocking security updates and such (it 
did with me!)

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-10-23 Thread Oliver Stieber
Ok, I had this [or at least something oh so similar]. BADSIG

All I did was 
first I tried the
sudo aptitude -o Acquire::http::No-Cache=True -o Acquire::BrokenProxy=true 
update

sudo apt-get update

work around, with no success.
then:
cd /var/lib/apt
sudo mv lists lists.old
sudo mkdir -p lists/partial
sudo apt-get update

which worked.

then install kdiff3
delta the directories to see what was wrong.
identify the differences between the good and the ugly (list.old)

one error was against archive.canonical.com lucid Release
I thought that would be a nice stable file to pick, seeing as fixes don't get 
put into the release repo.

and in the delta  'archive.canonical.com_ubuntu_dists_lucid_Release'
showed up with oddness.

Here's a brief write up of what I identified and how. I'm also going to poke 
through the code from the BADSIG message and see if it's pretty damb easy to 
read the code and backtrace the problem. (or at-least release a version that 
actually collects the info that hasn't been for 5 years, in lieu of a 'proper' 
fix)
 
then work out as follows:


So then I thought, seeing as no-one seems to have a clue what's going on and 
the bug has been in apt-get or a dependency for a log time I'd spend a few 
minutes to find out what the problem really is.
(one of the files that failed for me was a release repository file so it's 
static SFAIK)
ls list
'file that failed'
ls lists/partial
'file that failed'
'file that failed'.gpg
delta lists/'file that failed' lists/partial/'file that failed'

deta says.
Bits before MD5Sum: in lists/partial file contain the HTML of my landing page.
Bits before MD5Sum: in lists contain HTTP like header (line separated key colon 
space value pares)

So this identifies a couple of potential problems on it's own, if not more.
1: even though the file fails the .gpg checksum or whatever it is test, no 
mention of any way to examine and then 'force' apt to fix the problem e.g. junk 
the file is apparently offered or given.
2: Two separate HTTP requests to two (or more) separate locations are made to 
build a composite file up, but validation is somewhat lacking (on either the 
date returned[thought that's what I think the .gpg is for?], or that the file 
serving up the files actually matches that which has been requested.

file in partial and in lists had same date.
So I assume the date of the landing page was compared against the date of the 
file in lists, but the date in one of the parts of the body or somewhere was 
used for the file date.
so
1: dates of the multiple parts of the file should match, and this is not being 
tested for.
2: (should be fixed by the above/possibly) the date that used to check to see 
if an update is needed comes from a different request than the date of the 
actual file itself.

it doesn't matter if the .gpg file is in partial or not, effect is still the 
same.
touch -m on the file in partial, with a date before the file date, causes a new 
file to be fetched.

So there seem to be quite a number of bugs in just the way this fault
presented itself on my computer 'Ubuntu 10.04'

url/ip address validation and that kind of thing should possibly be
looked at, or at-least allow the user to lock them. I have no idea why
the file is in multiple parts, that should have the same date and I
imagine be on the exact same server, but not validation is performed to
that regard.

should files in partial be validated when update (or whatever) is called
and the user asked if they want to junk old crappy ones before
continuing?

I think the error should really give a bit more info, other errors tell
you what to do, or work around (sometimes they don't actually fix the
issue, but it's a start!)

anyhow, I'm going to pull some source down, and hope I don't have to
shut my eye's too often whilst fixing this one.(soon hopefully)

Ok, that all took me about 50mins to find out after having a poke around.
I expect there are other bugs, so I'll do a good audit whilst I'm at this one.
5+ years is a long time with something like this still kicking around.in the 
package management system potentially blocking security updates and such (it 
did with me!)

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-09-15 Thread george7
the bad router was from the wgr family the physical ports stopped
working after a firmware update

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-09-14 Thread rusivi1
Does this issue occur in Maverick?

** Changed in: update-manager (Ubuntu)
   Status: Confirmed = Incomplete

** Changed in: apt (Ubuntu)
   Status: Confirmed = Incomplete

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-09-14 Thread Micah Gersten
Already confirmed on Lucid with a previous comment.

** Changed in: apt (Ubuntu)
   Status: Incomplete = Confirmed

** Changed in: update-manager (Ubuntu)
   Status: Incomplete = Confirmed

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-05-19 Thread Martin Forest
On the apt-cache-ng server, I just removed all content in the directory
/var/cache/apt-cacher-ng/uburep/dists and restarted apt-cache-ng. I no
longer have the error. All cached files are in /var/cache/apt-cacher-
ng/uburep/pool/ so removing the dists info, does not generate a lot of
internet traffic...

(I 've had this issue since 8.04. I'm now running 10.0.4 and ran in to
the same issue... I wonder...)

Finger crossed for the rest of you!
/Martin

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-05-07 Thread LuisMondesi
Ok. So I switched to using apt-cacher-ng for my caching and started to
see this bug again.

To fix this, just remove all the Sources, Packages and Translation files
from /var/cache/apt-cacher-ng (apt-cacher has the same issues)
directory. Example:

DIR=/var/cache/apt-cacher-ng
cd $DIR || exit 1
for file in Release Packages Sources Translation; do
find . -type f -name *$file* -exec rm {} \;
done

After that I would be able to run apt-get update and everything would be
fine.

Perhaps this bug should include apt-cacher and apt-cacher-ng as they are
both part of this problem and they need new logic to update those
control files mentioned above.

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-03-26 Thread Scott Robibns
This still exists.  As mentioned in the duplicate 
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24234
it's been an issue for 5 years. 

The fix that works for me is stated by Geoff in the other bug

sudo apt-get update -o Acquire::http::No-Cache=true

Whether this works in all cases or not, I don't know.  However, from an
advocacy standpoint, regardless of who or what is at fault, it's a bad
thing, probably frightening to newcomers.

Perhaps ensuring that a message along with it would solve the problem.
As it is, it's cryptic, giving no indication that it's a minor issue
that will probably disappear in an hour   Something along the lines of,
after the error message, please try running sudo apt-get update -o
Acquire::http::No-Cache=true, then run apt-get update again would be an
explanation that newcomers can understand, one that would probably fix
the issue, which will probably continue, since it often just seems to be
a minor glitch, and not scare people off.

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


RE: [Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

2010-03-26 Thread george7

turned out to be bad physical ports on a router i was useing.
 
 Date: Fri, 26 Mar 2010 14:42:37 +
 From: scottr...@gmail.com
 To: geomon...@hotmail.com
 Subject: [Bug 24061] Re: GPG error with apt-get/aptitude/update-manager 
 behind proxy (BADSIG 40976EAF437D05B5)
 
 This still exists. As mentioned in the duplicate 
 https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24234
 it's been an issue for 5 years. 
 
 The fix that works for me is stated by Geoff in the other bug
 
 sudo apt-get update -o Acquire::http::No-Cache=true
 
 Whether this works in all cases or not, I don't know. However, from an
 advocacy standpoint, regardless of who or what is at fault, it's a bad
 thing, probably frightening to newcomers.
 
 Perhaps ensuring that a message along with it would solve the problem.
 As it is, it's cryptic, giving no indication that it's a minor issue
 that will probably disappear in an hour Something along the lines of,
 after the error message, please try running sudo apt-get update -o
 Acquire::http::No-Cache=true, then run apt-get update again would be an
 explanation that newcomers can understand, one that would probably fix
 the issue, which will probably continue, since it often just seems to be
 a minor glitch, and not scare people off.
 
 -- 
 GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
 40976EAF437D05B5)
 https://bugs.launchpad.net/bugs/24061
 You received this bug notification because you are a direct subscriber
 of a duplicate bug.
 
 Status in “apt” package in Ubuntu: Confirmed
 Status in “update-manager” package in Ubuntu: Confirmed
 
 Bug description:
 I keep getting this when i launch the update manager.
 
 W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following
 signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
 Signing Key ftpmas...@ubuntu.com
 
 How can I fix it?
 
 comment from Rolf Leggewie: This is due to cache inconsistencies and thus is 
 not necessarily a bug in Ubuntu at all. But I hope the fine devs can find a 
 way to better deal with broken proxies. This is a very visible issue, a large 
 number of internet connections are behind proxies and the users cannot do 
 anything about it.
 
 
 
 To unsubscribe from this bug, go to:
 https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscribe
  
_
Hotmail is redefining busy with tools for the New Busy. Get more from your 
inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID27925::T:WLMTAGL:ON:WL:en-US:WM_HMP:032010_2

-- 
GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 
40976EAF437D05B5)
https://bugs.launchpad.net/bugs/24061
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs