hardy-security/Release.gpg is (mostly) empty

Bug #229627 reported by Alan Porter
4
Affects Status Importance Assigned to Milestone
apt (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Binary package hint: apt

I have been getting errors when doing 'apt-get update':

alan@chutney:~$ sudo apt-get update
Get:1 http://security.ubuntu.com hardy-security Release.gpg [191B]
Hit http://archive.canonical.com hardy Release.gpg
Hit http://archive.ubuntu.com hardy Release.gpg
Hit http://archive.ubuntu.com hardy-updates Release.gpg
Get:2 http://security.ubuntu.com hardy-security Release [37.0kB]
Hit http://archive.canonical.com hardy Release
Hit http://archive.ubuntu.com hardy-backports Release.gpg
Ign http://security.ubuntu.com hardy-security Release
Hit http://archive.ubuntu.com hardy Release
Hit http://security.ubuntu.com hardy-security/main Packages
Hit http://archive.ubuntu.com hardy-updates Release
Hit http://security.ubuntu.com hardy-security/restricted Packages
Hit http://archive.ubuntu.com hardy-backports Release
Hit http://security.ubuntu.com hardy-security/universe Packages
Hit http://archive.canonical.com hardy/partner Packages
Hit http://security.ubuntu.com hardy-security/multiverse Packages
Hit http://archive.ubuntu.com hardy/main Packages
Hit http://archive.ubuntu.com hardy/restricted Packages
Hit http://archive.ubuntu.com hardy/universe Packages
Hit http://archive.ubuntu.com hardy/multiverse Packages
Hit http://archive.ubuntu.com hardy-updates/main Packages
Hit http://archive.ubuntu.com hardy-updates/restricted Packages
Hit http://archive.ubuntu.com hardy-updates/universe Packages
Hit http://archive.ubuntu.com hardy-updates/multiverse Packages
Hit http://archive.ubuntu.com hardy-backports/main Packages
Hit http://archive.ubuntu.com hardy-backports/restricted Packages
Hit http://archive.ubuntu.com hardy-backports/universe Packages
Hit http://archive.ubuntu.com hardy-backports/multiverse Packages
Fetched 192B in 0s (990B/s)
Reading package lists... Done
W: GPG error: http://security.ubuntu.com hardy-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <email address hidden>
W: You may want to run apt-get update to correct these problems
alan@chutney:~$

So I tried to import the security key:

alan@chutney:~$ wget -q http://security.ubuntu.com/ubuntu/dists/hardy-security/Release.gpg -O- | sudo apt-key add - && sudo apt-get update
gpg: no valid OpenPGP data found.
alan@chutney:~$ wget -q http://security.ubuntu.com/ubuntu/dists/hardy-security/Release.gpg -O-
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQBIIMUiQJdur0N9BbURAvz3AKCZ5C9iMg253JgiRL5kitw5wNXZQACgh3Uk
YhwgYoTPIZc6tfAi1M6zSO0=
=GuzF
-----END PGP SIGNATURE-----
alan@chutney:~$

Here's what my sources.list looks like... pretty straightforward:

alan@chutney:~$ cat /etc/apt/sources.list

deb http://archive.ubuntu.com/ubuntu/ hardy main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ hardy-updates main restricted universe multiverse
deb http://archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse
deb http://security.ubuntu.com/ubuntu/ hardy-security main restricted universe multiverse
deb http://archive.canonical.com/ubuntu hardy partner

alan@chutney:~$

Revision history for this message
Alan Porter (alan.porter) wrote :

Some black magic that I do not understand, but that has worked in this past, seems to have gotten me past the GPG problem.

alan@chutney:~$ sudo apt-get update -o Acquire::http::No-Cache=True
Get:1 http://security.ubuntu.com hardy-security Release.gpg [191B]
Hit http://archive.canonical.com hardy Release.gpg
Hit http://archive.ubuntu.com hardy Release.gpg
Get:2 http://security.ubuntu.com hardy-security Release [37.0kB]
Hit http://archive.canonical.com hardy Release
Hit http://archive.ubuntu.com hardy-updates Release.gpg
Get:3 http://security.ubuntu.com hardy-security/main Packages [7755B]
Hit http://archive.canonical.com hardy/partner Packages
Hit http://archive.ubuntu.com hardy-backports Release.gpg
Hit http://archive.ubuntu.com hardy Release
Hit http://archive.ubuntu.com hardy-updates Release
Get:4 http://security.ubuntu.com hardy-security/restricted Packages [14B]
Hit http://archive.ubuntu.com hardy-backports Release
Hit http://security.ubuntu.com hardy-security/universe Packages
Hit http://archive.ubuntu.com hardy/main Packages
Get:5 http://security.ubuntu.com hardy-security/multiverse Packages [14B]
Hit http://archive.ubuntu.com hardy/restricted Packages
Hit http://archive.ubuntu.com hardy/universe Packages
Hit http://archive.ubuntu.com hardy/multiverse Packages
Hit http://archive.ubuntu.com hardy-updates/main Packages
Hit http://archive.ubuntu.com hardy-updates/restricted Packages
Hit http://archive.ubuntu.com hardy-updates/universe Packages
Get:6 http://archive.ubuntu.com hardy-updates/multiverse Packages [14B]
Hit http://archive.ubuntu.com hardy-backports/main Packages
Hit http://archive.ubuntu.com hardy-backports/restricted Packages
Hit http://archive.ubuntu.com hardy-backports/universe Packages
Hit http://archive.ubuntu.com hardy-backports/multiverse Packages
Fetched 7989B in 2s (3662B/s)
Reading package lists... Done
alan@chutney:~$

I wonder if this has anything to do with the fact that I am at work, and they most likely have some sort of HTTP proxy.

Alan

Revision history for this message
kiwiadam2 (kiwiadam2) wrote :

I have been getting the same errors and am not behind a proxy.

kiwiadam2 (kiwiadam2)
Changed in apt:
status: New → Confirmed
Revision history for this message
TomHogland (tom-hogland) wrote :

I have the same error as well, shows as last updated 10 days ago. The 'No-Cache=True' didn't work for me, and I have the exact same responses when trying to import the key manually.

I initially had the same error on hardy-updates and hardy-backports as well, but in Synaptic I removed all three, reloaded (without error), then added them back individually, reloading between each. The other two worked fine after that, but hardy-security still fails.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.