Problem with apt-update

[Björn Krombholz]

On 5/9/05, clb137 <dlist at ubuntuforums.org> wrote:
> Open a terminal and put the following one line at a time
> 
> gpg --keyserver wwwkeys.eu.pgp.net --recv-keys 1F41B907
> 
> gpg --armor --export 1F41B907 | sudo apt-key add -
> 
> sudo apt-get update

This is wrong.
Actually it only adds the key of Christian Marillat's archive to apt's
key db. Adding a key is only needed if apt doesn't know about it. The
error message in such case would be something including `NO_PUBKEY'.

The problem of the original mail shows exactly what using gpg keys
with apt was invented for. At the moment the Release file at
`archive.ubuntu.com/ubuntu/dists/breezy/Release' is broken (therefore
`BADSIG'). If  you take a look at the file it seems to be incomplete.
The last 2 lines:
 a10c5f8c65eaf3913c659bdc72c80089             1994
restricted/binary-powerpc/Packages.bz2
 ea52fbe4a0d21f202

The good thing is, it seems to be more a technical than a security problem atm.

So this problem should be visible by everyone having a breezy line in
their `sources.list' (except those using mirrors that haven't synced
yet). The only thing you can do about it is to wait until this problem
is fixed. ;)


Björn