invalid signatures 12.04 lts

Submitted by helpmin on Fri, 06/15/2012 - 13:50

I installed virtualmin with install.sh a while ago, but I have been getting the following errors. any idea what could be wrong?

W: GPG error: http://software.virtualmin.com virtualmin-precise Release: The following signatures were invalid: BADSIG E8DD3FA0A0BDBCF9 Virtualmin, Inc. <security@virtualmin.com>
W: GPG error: http://software.virtualmin.com virtualmin-universal Release: The following signatures were invalid: BADSIG E8DD3FA0A0BDBCF9 Virtualmin, Inc. <security@virtualmin.com>

I tried

wget --quiet http://software.virtualmin.com/lib/RPM-GPG-KEY-virtualmin -O - | apt-key add -
wget --quiet http://software.virtualmin.com/lib/RPM-GPG-KEY-webmin -O - | apt-key add -
sudo aptitude update && sudo aptitude full-upgrade

But it didn't help. Maybe something else going on?

Status: 
Active

Comments

Submitted by andreychek on Fri, 06/15/2012 - 19:49

Howdy -- I tried this on a few Ubuntu systems, but I'm not able to reproduce the issue that you're seeing.

We also hadn't heard any other reports of that.

When do you see that issue, when running "apt-get update"?

Submitted by helpmin on Fri, 06/15/2012 - 22:41

I see the errors after running the upate commands (as root) shown in my first post:

sudo aptitude update

or

sudo apt-get update

Don't worry about it. It is just a local test machine. If I am the only one, then probably I made mistake somewhere.

Submitted by helpmin on Fri, 06/15/2012 - 22:51

Running

root@:~# apt-key adv --check-sigs

shows the following output (looks ok, right?)

Executing: gpg --ignore-time-conflict --no-options --no-default-keyring --secret-keyring /tmp/tmp.u11Gc94R9a --trustdb-name /etc/apt/trustdb.gpg --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg --check-sigs
/etc/apt/trusted.gpg
--------------------
pub   1024D/A0BDBCF9 2005-07-11
uid                  Virtualmin, Inc. <security@virtualmin.com>
sig!3        A0BDBCF9 2005-07-11  Virtualmin, Inc. <security@virtualmin.com>
sub   2048g/CB9262B0 2005-07-11
sig!         A0BDBCF9 2005-07-11  Virtualmin, Inc. <security@virtualmin.com>

pub   1024D/11F63C51 2002-02-28
uid                  Jamie Cameron <jcameron@webmin.com>
sig!3        11F63C51 2002-02-28  Jamie Cameron <jcameron@webmin.com>
sub   1024g/1B24BE83 2002-02-28
sig!         11F63C51 2002-02-28  Jamie Cameron <jcameron@webmin.com>

Submitted by helpmin on Mon, 06/18/2012 - 07:17

Just for posterity, the following fixed the problem

sudo rm -rf /var/lib/apt/lists

No, idea what caused the problem (and only for virtualmin) in the first place.

Submitted by andreychek on Mon, 06/18/2012 - 08:18

Great, I'm glad you figured it out!

I've been doing some digging, and couldn't determine anything that might cause that.

Also, the signatures you pasted in here all looked good.

So I'm not quite sure what happened, but I'm glad it's working now!