Upgrade Signing Key Is Invalid

[Sasquatch]

Well, there are more reports here than I've seen on the Ubuntu Forums (not that I visit it a lot, barely actually) about bad keys. Makes you wonder why. I do believe that this thread had a location where the keys are stored in cache when updating the repo headers. You can always try to remove it and wait for the next time.

[Matoridi]

There is a post or two about this on the ubuntu forum, but with no solutions...

Perhaps you see it more often here because the users (like me) feel it is more about VirtualBox than Ubuntu?

Anyway... I guess we should stick to installing with deb files, it never creates any problems.

[unreal]

Steps to solve this issue:

Code: Select all

cd /var/lib/apt/lists
rm *virtualbox*
cd partial
rm *

Seems like some transparent proxy messes apt up.

[Telengard]

I just ran into the problem described by the OP. Patrick's solution seems to have resolved it for now, although I don't know whether this is a permanent fix. I can't understand why this would even work.

Edit:

Forgot to include my host info

Code: Select all

$ uname -a
Linux Alia 2.6.24-26-generic #1 SMP Tue Dec 1 18:37:31 UTC 2009 i686 GNU/Linux
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 8.04.3 LTS
Release:        8.04
Codename:       hardy
$ kde-config -v
Qt: 3.3.8b
KDE: 3.5.10
kde-config: 1.0
$ grep -i 'virtualbox' /etc/apt/sources.list
deb http://download.virtualbox.org/virtualbox/debian hardy non-free
$ sudo apt-key list
/etc/apt/trusted.gpg
--------------------
pub   1024D/437D05B5 2004-09-12
uid                  Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>
sub   2048g/79164387 2004-09-12

pub   1024D/FBB75451 2004-12-30
uid                  Ubuntu CD Image Automatic Signing Key <cdimage@ubuntu.com>

pub   1024D/0C5A2783 2006-11-23
uid                  Medibuntu Packaging Team <admin@lists.medibuntu.org>
uid                  The Medibuntu Team <medibuntu@sos-sts.com>
sub   2048g/16C7105A 2006-11-23

pub   1024D/387EE263 2004-09-17
uid                  Scott Ritchie <scott@open-vote.org>
uid                  Scott Ritchie <saritchie@ucdavis.edu>
uid                  Scott Ritchie <scott@tuzakey.com>
sub   1024g/203C857C 2004-09-17

pub   1024D/6DFBCBAE 2008-07-14
uid                  Sun Microsystems, Inc. (xVM VirtualBox archive signing key) <info@virtualbox.org>
sub   2048g/78A86EAF 2008-07-14

I installed VirtualBox on Kubuntu by following exactly the instructions for Debian-based Linux distributions.

I commented out the following line in /etc/apt/sources.list.d/virtualbox.list :

Code: Select all

deb http://download.virtualbox.org/virtualbox/debian intrepid non-free

then done an apt-get update that went fine, then uncommented the deb line.
And now, apt-get updates are OK.

[mwildam]

I know, this is an old topic, but Google showed it #1 after experiencing the same issue lately.

Code: Select all

wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -

Solved the issue for me (on Ubuntu 9.10 Karmic Koala).

See also http://ubuntuforums.org/showthread.php?t=1480604

[wsc9tt]

Just a note that I had the same problem and found that apt-cacher-ng was causing the issue.
Disabling that caused the BADSIG problem to go away.

[waster]

delete /var/cache/apt-cacher-ng/download.virtualbox.org/