[Bug 24061] Re: GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG 40976EAF437D05B5)

[Colin Watson]

I suspect that the exact causes of this have shifted over time.  The two
relevant cases in precise (at least assuming that my test case is
sufficient) seem to be:

  InRelease renamed to Release despite signature failure
  IndexDiff files moved to /var/lib/apt/lists/ despite parse failure

The latter is easily fixed by reordering pkgAcqDiffIndex::Done, I guess,
but I'm puzzled by the former.  In pkgAcqMetaIndex::Failed it appears to
be deliberate:

   /* Always move the meta index, even if gpgv failed. This ensures
    * that PackageFile objects are correctly filled in */

So if an HTTP proxy returns some junk for anything you ask for,
including an InRelease file that wouldn't exist if we were actually
talking to the real archive, we'll save that as Release?  This seems
bizarre.  Can we deal with the problem alluded to in that comment some
other way?

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to update-manager in Ubuntu.
https://bugs.launchpad.net/bugs/24061

Title:
  GPG error with apt-get/aptitude/update-manager behind proxy (BADSIG
  40976EAF437D05B5)

Status in “apt” package in Ubuntu:
  Triaged
Status in “update-manager” package in Ubuntu:
  Won't Fix

Bug description:
  I keep getting this when i launch the update manager.

  W: GPG error: http://archive.ubuntu.com breezy-updates Release: The following
  signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic
  Signing Key <ftpmaster at ubuntu.com>

  How can I fix it?

  ***********
  WORKAROUND:
  ----------
  Run the following commands(saves a backup of the old lists and creates a new lists folder) and the BADSIG error does not occur :

  $ cd /var/lib/apt
  $ sudo mv lists lists.old
  $ sudo mkdir -p lists/partial
  $ sudo apt-get update

  ***********

  comment from Rolf Leggewie: This is due to cache inconsistencies and
  thus is not necessarily a bug in Ubuntu at all.  But I hope the fine
  devs can find a way to better deal with broken proxies.  This is a
  very visible issue, a large number of internet connections are behind
  proxies and the users cannot do anything about it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/24061/+subscriptions