[Bug 24234] Re: apt-get update failing with bad signature.

[Karthik Varma]

*** This bug is a duplicate of bug 24061 ***
    https://bugs.launchpad.net/bugs/24061

** Also affects: apt
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/24234

Title:
  apt-get update failing with bad signature.

Status in APT:
  New
Status in “apt” package in Ubuntu:
  Confirmed
Status in “aptitude” package in Ubuntu:
  Fix Released

Bug description:
  Any attempts to update from breezy-updates fails with a bad signature
  error.

  command run:  sudo apt-get update

  output:
  Get:1 http://security.ubuntu.com breezy-security Release.gpg [189B]
  Get:2 http://security.ubuntu.com breezy-security Release [19.6kB]
  Get:3 http://archive.ubuntu.com breezy-updates Release.gpg [189B]
  Hit http://security.ubuntu.com breezy-security/universe Packages
  Hit http://security.ubuntu.com breezy-security/main Packages
  Hit http://security.ubuntu.com breezy-security/restricted Packages
  Get:4 http://archive.ubuntu.com breezy Release.gpg [189B]
  Hit http://archive.ubuntu.com breezy-updates Release
  Ign http://archive.ubuntu.com breezy-updates Release
  Hit http://archive.ubuntu.com breezy Release
  Hit http://archive.ubuntu.com breezy-updates/main Packages
  Hit http://archive.ubuntu.com breezy-updates/restricted Packages
  Hit http://archive.ubuntu.com breezy/universe Packages
  Hit http://archive.ubuntu.com breezy/main Packages
  Hit http://archive.ubuntu.com breezy/restricted Packages
  Hit http://archive.ubuntu.com breezy/multiverse Packages
  Fetched 20.0kB in 4s (4087B/s)
  Reading package lists... Done
  W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following
  signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
  Signing Key <ftpmaster at ubuntu.com>
  W: You may want to run apt-get update to correct these problems

  apt-key list output:
  /etc/apt/trusted.gpg
  --------------------
  pub   1024D/437D05B5 2004-09-12
  uid                  Ubuntu Archive Automatic Signing Key
  <ftpmaster at ubuntu.com>sub   2048g/79164387 2004-09-12

  pub   1024D/FBB75451 2004-12-30
  uid                  Ubuntu CD Image Automatic Signing Key <cdimage at ubuntu.com>


  /etc/apt/sources.list contents:
  deb http://archive.ubuntu.com/ubuntu breezy-updates main restricted
  deb http://archive.ubuntu.com/ubuntu breezy universe main restricted multiverse
  deb http://security.ubuntu.com/ubuntu breezy-security universe main restricted

  The release file appears in /var/lib/apt/lists, and the gpg file appears in
  /var/lib/apt/lists/partial. 

  I am attaching both for review.

  I have limited knowledge using gpg, but from what i was able to glean it appears
  that the gpg file is signed correctly.  I am not sure what the root casue of the
  error is.  

  Of course, please post if you need any additional information.

To manage notifications about this bug go to:
https://bugs.launchpad.net/apt/+bug/24234/+subscriptions