topic title: GPG Error
Posts: 1,028
SamK
Joined: 21 Aug 2011
#1
antiX-16-Stable

inxi -r

Code: Select all

Repos:     Active apt sources in file: / etc/apt/sources.list.d/antix.list
           deb http://nl.mxrepo.com/antix/jessie jessie main nosystemd
           Active apt sources in file: / etc/apt/sources.list.d/debian.list
           deb http://ftp.uk.debian.org/debian/ jessie main contrib non-free
           deb http://security.debian.org/ jessie/updates main contrib non-free
apt-get update

Code: Select all

[...]
Fetched 12.4 MB in 13s (898 kB/s)
Reading package lists... Done
W: GPG error: http://nl.mxrepo.com jessie Release: The following signatures were invalid: BADSIG DB36CDF3452F0C20 antiX (antix repo) <antix@daveserver.info>
Posts: 2,238
dolphin_oracle
Joined: 16 Dec 2007
#2
I'm not getting these on the US servers. That nl server might be having issues.
Posts: 2,238
dolphin_oracle
Joined: 16 Dec 2007
#3
Tim at the mx forums takes care of the nl server. Looks like it ran out of disk space. Should be sorted soon.
Posts: 1,028
SamK
Joined: 21 Aug 2011
#4
dolphin_oracle wrote:Tim at the mx forums takes care of the nl server. Looks like it ran out of disk space. Should be sorted soon.
Tried again after waiting overnight, and obtained different results when comparing the original system to a reference point system.

Reference Point System
Live no persistence using the same repos as detailed above
apt-get update completes without errors

Original System
Conventionally installed to hard disk
apt-get update still fails with exactly the same error message as originally reported
Posts: 452
Jerry
Joined: 12 Sep 2007
#5
I just used MX Repo Manager to switch to the nl repo, and apt-get update proceeded without a hitch for MX sources.
Posts: 1,062
Dave
Joined: 20 Jan 2010
#6
Purge and reinstall antix-archive-keyring. Maybe somehow the signature file became corrupt during installation.
Posts: 452
Jerry
Joined: 12 Sep 2007
#7
There's a couple of posts on the MX Forum about these problems too.
Posts: 1,028
SamK
Joined: 21 Aug 2011
#8
Dave wrote:Purge and reinstall antix-archive-keyring. Maybe somehow the signature file became corrupt during installation.
Deleted as follows


Find the id of the antix-archive-keyring
apt-key list
[...]
/etc/apt/trusted.gpg.d/antix-archive-keyring.gpg
------------------------------------------------
pub 2048R/452F0C20 2013-03-13 [expires: 2017-03-12]
uid antiX (antix repo) <antix@daveserver.info>
sub 2048R/7145BB6B 2013-03-13 [expires: 2017-03-12]
[...]


Previouly posted apt-get update failure message
W: GPG error:
========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"http://nl.mxrepo.com"
linktext was:"http://nl.mxrepo.com"
====================================
jessie Release: The following signatures were invalid: BADSIG DB36CDF3452F0C20 antiX (antix repo) <antix@daveserver.info>


Key id to delete 452F0C20


Delete the antix-archive-keyring
sudo apt-key del 452F0C20


Verify key deleted
apt-key list
antix-archive-keyring not listed


What is the command required to re-install it?
Posts: 1,062
Dave
Joined: 20 Jan 2010
#9
Apt-get install antix-archive-keyring or download it from the repo directly through a browser in your case and dpkg -i
Posts: 1,028
SamK
Joined: 21 Aug 2011
#10
Dave wrote:Apt-get install antix-archive-keyring or download it from the repo directly through a browser in your case and dpkg -i
Uninstalled and installed again antix-archive-keyring as follows:

apt-get remove --purge antix-archive-keyring
apt-get install antix-archive-keyring

apt-get update
reports the same error originally posted.
Posts: 1,028
SamK
Joined: 21 Aug 2011
#11
The following fixes the BADSIG error in a three step process:
1. Remove the directory and subdir holding lists and partial lists that are incompatible with the true keys
2. Recreate the directory structure deleted in step 1
3. Repopulate the directory structure created in step 2 with correct versions of lists deleted in step 1

As root

Code: Select all

rm -r /var/lib/apt/lists
mkdir -p /var/lib/apt/lists/partial
apt-get update
It will probably benefit from others testing it and reporting the outcome.

Ref:

========= SCRAPER REMOVED AN EMBEDDED LINK HERE ===========
url was:"http://unix.stackexchange.com/questions/97493/invalid-signatures-when-running-apt-get-update"
linktext was:"http://unix.stackexchange.com/questions ... get-update"
====================================