New archive signing key for >= quantal

Dave Walker davewalker at ubuntu.com
Thu Sep 20 23:47:34 UTC 2012


On 20 September 2012 11:23, Colin Watson <cjwatson at ubuntu.com> wrote:
> Some time ago we generated a new signing key (4096R/C0B21F32) for the
> Ubuntu archive, since the previous one was generated in 2004 and was
> starting to look a bit elderly.  I added this to the ubuntu-keyring
> package some time ago, and have now arranged for quantal and newer
> releases to be signed using both the old and new keys.  After some
> transitional period we will switch to signing only with the new key.
>
> I hope very much that nobody will notice this change unless they go
> looking for it, because if they do then I've probably done it wrong. :-)
> I'll keep an eye on things today to make sure.
>
> --
> Colin Watson                                       [cjwatson at ubuntu.com]
>

Hi,

Naughtily upgrading via, sed -i 's/precise/quantal/g' /etc/apt/sources.list

apt-get update:
...
Hit http://archive.ubuntu.com quantal-updates/universe Translation-en
Reading package lists... Done
W: There is no public key available for the following key IDs:
3B4FE6ACC0B21F32

It did leave me scratching my head momentarily, until I remembered this thread.

I haven't checked, but presumably it is signed with both keys.. An apt
isn't content with knowing one of the signatures is valid.  Is the
key, (or if my suggestion is correct - a fix for apt) going to be
SRU'd?

Kind Regards,
Dave Walker



More information about the ubuntu-devel mailing list