VirtualBox

Opened 14 years ago

Closed 14 years ago

#6908 closed defect (worksforme)

Invalid signature for VirtualBox download

Reported by: chandra Owned by:
Component: other Version: VirtualBox 3.2.2
Keywords: bad GPG signature Cc:
Guest type: Windows Host type: Linux

Description

On a Kubuntu 10.04 Lucid Lynx system, I get this error:

W: GPG error: http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@…>

whenever I do an

sudo apt-get update && sudo apt-get dist-upgrade

It is a liveable warning message but annoying in its persistence.

Can someone fix this please?

Thanks.

P.S. I have followed the procedure outlined at:

http://www.virtualbox.org/wiki/Linux_Downloads

wget -q http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -

Change History (7)

comment:1 by Frank Mehnert, 14 years ago

Please can you try again? Perhaps you had some network problem. I just tried this and had no problem to install the VirtualBox 3.2 package for Lucid from the repository.

comment:2 by chandra, 14 years ago

May I clarify.

I have no problem installing the VirtualBox 3.2 package successfully for Lucid.

I am only reporting the warning message arising from the bad GPG signature and wonder if it could be fixed so that the installation is silent.

comment:3 by Frank Mehnert, 14 years ago

Hmm, but I cannot see such a warning.

comment:4 by chandra, 14 years ago

I see it every time I do

sudo apt-get update

Moreover, I do not seem to have any expired Sun keys but only the new Oracle key.

sudo apt-key finger

gives me:

--- pub 1024D/98AB5139 2010-05-18

Key fingerprint = 7B0F AB3A 13B9 0743 5925 D9C9 5442 2A4B 98AB 5139

uid Oracle Corporation (VirtualBox archive signing key) <info@…> sub 2048g/281DDC4B 2010-05-18 ---

and the warning after

sudo apt-get update is (once more)

--- W: GPG error: http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@…> ---

FYI, I have this line in /etc/apt/sources.list

deb http://download.virtualbox.org/virtualbox/debian lucid non-free

All told, I would be happy if there were a way to exorcise this warning if it is spurious. If not, it will be good to have it fixed.

Thanks.

comment:5 by Frank Mehnert, 14 years ago

Could you try the following as root?

cd /var/lib/apt/lists
rm *virtualbox*
cd partial
rm *
apt-get update

comment:6 by chandra, 14 years ago

Thank you. That did it and the warning is now gone.

For what it is worth, here is what I found:

cd /var/lib/apt/lists
ls

gave

---

download.virtualbox.org_virtualbox_debian_dists_lucid_non-free_binary-amd64_Packages

download.virtualbox.org_virtualbox_debian_dists_lucid_Release

---

and I think the first line probably caused the warning to come up.

cd partial
ls

gave

---

download.virtualbox.org_virtualbox_debian_dists_lucid_Release download.virtualbox.org_virtualbox_debian_dists_lucid_Release.gpg

---

removing these files and got rid of the warning with

sudo apt-get update.

Thank you once again.

comment:7 by Frank Mehnert, 14 years ago

Resolution: worksforme
Status: newclosed

Thanks for the feedback.

Note: See TracTickets for help on using tickets.

© 2023 Oracle
ContactPrivacy policyTerms of Use