[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

[Colin Watson]

As far as I can see, the problem here is that apt is inappropriately
caching files that fail validation, rather than removing them and
allowing them to be fetched again.  Fixing that would probably be enough
to consign this bug to the dustbin of history, which I'm sure would be
welcomed by all concerned.

I put a bit of effort into coming up with a reliable reproduction case
for this bug.  I've attached a 'dummy-proxy' script, which is a trivial
Twisted server that can be used as an HTTP proxy; it listens on
localhost:8080 and returns some junk HTML in response to every request.
Run it in one terminal.  In another terminal, run:

  chdist create captive-portal
  echo 'deb http://archive.ubuntu.com/ubuntu lucid main' >~/.chdist/captive-portal/etc/apt/sources.list
  chdist apt-get captive-portal update
  # should complete successfully
  http_proxy=http://localhost:8080/ chdist apt-get captive-portal update
  # should fail
  chdist apt-get captive-portal update
  # now this fails with BADSIG

** Attachment added: "simple proxy to help reproduce this bug"
   https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+attachment/2629686/+files/dummy-proxy

** Changed in: apt (Ubuntu)
   Importance: Low => High

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

Status in “apt” package in Ubuntu:
  Triaged
Status in “update-manager” package in Ubuntu:
  Won't Fix

Bug description:
  I keep getting this when i launch the update manager.

  W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following
  signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
  Signing Key <ftpmaster at ubuntu.com>

  How can I fix it?

  ***********
  WORKAROUND:
  ----------
  Run the following commands(saves a backup of the old lists and creates a new lists folder) and the BADSIG error does not occur :

  $ cd /var/lib/apt
  $ sudo mv lists lists.old
  $ sudo mkdir -p lists/partial
  $ sudo apt-get update

  ***********

  comment from Rolf Leggewie: This is due to cache inconsistencies and
  thus is not necessarily a bug in Ubuntu at all.  But I hope the fine
  devs can find a way to better deal with broken proxies.  This is a
  very visible issue, a large number of internet connections are behind
  proxies and the users cannot do anything about it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions