Forum Home
Press F1
 
Thread ID: 115447 2011-01-18 23:35:00 Ubuntu update problems Agent_24 (57) Press F1
Post ID Timestamp Content User
1170850 2011-01-18 23:35:00 One of my Ubuntu installs seems to have broken with regard to the updater.

Its got a warning message that package information is 27 days out of date, but clicking update doesn't help.

If I do it through command-line I get this:


W: GPG error: http://nz.archive.ubuntu.com maverick Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
W: GPG error: http://www.scootersoftware.com stable Release: The following signatures were invalid: BADSIG 331D6DDE7F8840CE Scooter Software <support@scootersoftware.com>
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://extras.ubuntu.com maverick Release: The following signatures were invalid: BADSIG 16126D3A3E5C1192 Ubuntu Extras Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: GPG error: http://ppa.launchpad.net maverick Release: The following signatures were invalid: BADSIG 976B5901365C5CA1 Launchpad PPA for transmissionbt
W: GPG error: http://ppa.launchpad.net maverick Release: The following signatures were invalid: BADSIG 8AB767895ADC2037 Launchpad PPA for Clamav Update Team
W: Failed to fetch extras.ubuntu.com

W: Some index files failed to download, they have been ignored, or old ones used instead.

What's going on here?
Agent_24 (57)
1170851 2011-01-19 08:01:00 Not sure - does the same happen if you change the source of the download to a different server? johnd (85)
1170852 2011-01-19 08:06:00 i think it could be an issue with their servers, just tried updating my ubuntu through the update manager and got the following errors.

W: Failed to fetch nz.archive.ubuntu.com
Could not resolve 'nz.archive.ubuntu.com'


W: Failed to fetch nz.archive.ubuntu.com
Could not resolve 'nz.archive.ubuntu.com'


W: Failed to fetch nz.archive.ubuntu.com
Could not resolve 'nz.archive.ubuntu.com'
ronyville (10611)
1170853 2011-01-19 09:44:00 Just updated my Ubuntu 10.04 64 bit from the NZ server - all went fine. johnd (85)
1170854 2011-01-19 11:08:00 Agent_24: Your problem can be caused by missing / invalid GPG signatures on the repos in question. This usually means one of three things: The repository server in question has been compromised, and packages have been tampered with (this scenario is possible, but unlikely, and can sometimes occur accidentally when the server admins do something they shouldn't - i.e. they are the ones doing the tampering).
The signing key has been changed for some reason - possibly because the previously used private key was compromised in some way, or was disclosed to someone who shouldn't have it. Alternatively, the signing process on the server is faulty. Either way, the problem isn't on your end.
You never had the public key in the first place.For the first option, verify that the signature on the repository is the one you expect to see - if it is, and it's not one of the other options causing the problem, then all you can do is wait for the server end to be fixed.

The second option is more likely than the first - if so, the change should have been posted on the web somewhere, and it's simply a matter of importing the correct GPG key.

The third option is the same - just import the key, and you should be good to go.

If none of these apply, it's also possible that your local GPG config is borked for some reason - if that's the case, you may need to do a bit of fixing.

Ronyville: Your problem is nothing to do with the Ubuntu servers; it's a DNS error. Fix the DNS on your end and you should be good to go again, unless your ISP's DNS server is what's broken (unlikely, but possible).
Erayd (23)
1170855 2011-01-19 11:29:00 Thanks guys, searched around and found this:

bugs.launchpad.net

Running the commands in the workaround as presented there appears to have fixed the problem.


WORKAROUND:
----------
Run the following commands(saves a backup of the old lists and creates a new lists folder) and the BADSIG error does not occur :

$ cd /var/lib/apt
$ sudo mv lists lists.old
$ sudo mkdir -p lists/partial
$ sudo apt-get update
Agent_24 (57)
1170856 2011-01-19 12:50:00 Interesting - I didn't think of cache issues, but that certainly makes sense. From the perspective of your machine, it would look like the server has been compromised, even though that's not the case.

Thanks for posting your solution :thumbs:.
Erayd (23)
1