VirtualBox

Ticket #6908 (closed defect: worksforme)

Opened 4 years ago

Last modified 4 years ago

Invalid signature for VirtualBox download

Reported by: chandra Owned by:
Priority: minor Component: other
Version: VirtualBox 3.2.2 Keywords: bad GPG signature
Cc: Guest type: Windows
Host type: Linux

Description

On a Kubuntu 10.04 Lucid Lynx system, I get this error:

W: GPG error:  http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@…>

whenever I do an

sudo apt-get update && sudo apt-get dist-upgrade

It is a liveable warning message but annoying in its persistence.

Can someone fix this please?

Thanks.

P.S. I have followed the procedure outlined at:

 http://www.virtualbox.org/wiki/Linux_Downloads

wget -q  http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -

Change History

comment:1 Changed 4 years ago by frank

Please can you try again? Perhaps you had some network problem. I just tried this and had no problem to install the VirtualBox 3.2 package for Lucid from the repository.

comment:2 Changed 4 years ago by chandra

May I clarify.

I have no problem installing the VirtualBox 3.2 package successfully for Lucid.

I am only reporting the warning message arising from the bad GPG signature and wonder if it could be fixed so that the installation is silent.

comment:3 Changed 4 years ago by frank

Hmm, but I cannot see such a warning.

comment:4 Changed 4 years ago by chandra

I see it every time I do

sudo apt-get update

Moreover, I do not seem to have any expired Sun keys but only the new Oracle key.

sudo apt-key finger

gives me:

--- pub 1024D/98AB5139 2010-05-18

Key fingerprint = 7B0F AB3A 13B9 0743 5925 D9C9 5442 2A4B 98AB 5139

uid Oracle Corporation (VirtualBox archive signing key) <info@…> sub 2048g/281DDC4B 2010-05-18 ---

and the warning after

sudo apt-get update is (once more)

--- W: GPG error:  http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@…> ---

FYI, I have this line in /etc/apt/sources.list

deb  http://download.virtualbox.org/virtualbox/debian lucid non-free

All told, I would be happy if there were a way to exorcise this warning if it is spurious. If not, it will be good to have it fixed.

Thanks.

comment:5 Changed 4 years ago by frank

Could you try the following as root?

cd /var/lib/apt/lists
rm *virtualbox*
cd partial
rm *
apt-get update

comment:6 Changed 4 years ago by chandra

Thank you. That did it and the warning is now gone.

For what it is worth, here is what I found:

cd /var/lib/apt/lists
ls

gave

---

download.virtualbox.org_virtualbox_debian_dists_lucid_non-free_binary-amd64_Packages

download.virtualbox.org_virtualbox_debian_dists_lucid_Release

---

and I think the first line probably caused the warning to come up.

cd partial
ls

gave

---

download.virtualbox.org_virtualbox_debian_dists_lucid_Release download.virtualbox.org_virtualbox_debian_dists_lucid_Release.gpg

---

removing these files and got rid of the warning with

sudo apt-get update.

Thank you once again.

comment:7 Changed 4 years ago by frank

  • Status changed from new to closed
  • Resolution set to worksforme

Thanks for the feedback.

Note: See TracTickets for help on using tickets.

www.oracle.com
ContactPrivacy policyTerms of Use