Signature Verification Failure

[TheRealEdwin]

I've searched and searched and my googlefu has failed me.

edwin@doomhammer:~$ sudo apt-get update
Ign cdrom://Ubuntu 10.04 LTS _Lucid Lynx_ - Release i386 (20100429)/ lucid/main Translation-en_US
Ign cdrom://Ubuntu 10.04 LTS _Lucid Lynx_ - Release i386 (20100429)/ lucid/restricted Translation-en_US                                                                                                
Hit http://download.virtualbox.org lucid Release.gpg                                                                                                                                                          
Get:1 http://security.ubuntu.com lucid-security Release.gpg [189B]                                                                                                                                            
Ign http://security.ubuntu.com/ubuntu/ lucid-security/main Translation-en_US                                                                                                                                 
Get:2 http://us.archive.ubuntu.com lucid Release.gpg [189B]                                                                                     
Ign http://us.archive.ubuntu.com/ubuntu/ lucid/main Translation-en_US                                                                           
Ign http://download.virtualbox.org/virtualbox/debian/ lucid/non-free Translation-en_US                                                          
Ign http://security.ubuntu.com/ubuntu/ lucid-security/restricted Translation-en_US                                                              
Ign http://security.ubuntu.com/ubuntu/ lucid-security/universe Translation-en_US                                                                
Ign http://security.ubuntu.com/ubuntu/ lucid-security/multiverse Translation-en_US                                                              
Get:3 http://security.ubuntu.com lucid-security Release [32.5kB]                                                                                
Err http://security.ubuntu.com lucid-security Release                                                                                                   
  
Hit http://download.virtualbox.org lucid Release                                                                                                  
Hit http://download.virtualbox.org lucid/non-free Packages                                                                
Ign http://us.archive.ubuntu.com/ubuntu/ lucid/restricted Translation-en_US                         
Ign http://us.archive.ubuntu.com/ubuntu/ lucid/universe Translation-en_US                           
Ign http://us.archive.ubuntu.com/ubuntu/ lucid/multiverse Translation-en_US                                                                                                                                   
Get:4 http://us.archive.ubuntu.com lucid-updates Release.gpg [189B]                                                                                                                                           
Ign http://us.archive.ubuntu.com/ubuntu/ lucid-updates/main Translation-en_US                                                                                                                                 
Ign http://us.archive.ubuntu.com/ubuntu/ lucid-updates/restricted Translation-en_US                                                                                                                           
Ign http://us.archive.ubuntu.com/ubuntu/ lucid-updates/universe Translation-en_US                                                                                                                             
Ign http://us.archive.ubuntu.com/ubuntu/ lucid-updates/multiverse Translation-en_US                                                                                                                           
Get:5 http://us.archive.ubuntu.com lucid Release [57.2kB]                                                                                                                                                     
Err http://us.archive.ubuntu.com lucid Release                                                                                                                                                                
  
Get:6 http://us.archive.ubuntu.com lucid-updates Release [38.5kB]                                                                                                                                             
Hit http://archive.canonical.com lucid Release.gpg                                                                                                                                                            
Ign http://archive.canonical.com/ubuntu/ lucid/partner Translation-en_US                                                                                                                                      
Err http://us.archive.ubuntu.com lucid-updates Release                                                                                                                                                        
  
Hit http://archive.canonical.com lucid Release                                                                                                                                                                
Hit http://archive.canonical.com lucid/partner Packages                                                                                                                                                       
Get:7 http://dl.google.com stable Release.gpg [189B]                                                                                                                                                          
Ign http://dl.google.com/linux/deb/ stable/main Translation-en_US                                                                                                                                             
Get:8 http://dl.google.com stable Release [2,540B]                                                                                                                                                            
Get:9 http://dl.google.com stable/main Packages [904B]                                                                                                                                                        
Fetched 4,203B in 13s (316B/s)                                                                                                                                                                                
Reading package lists... Done
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://security.ubuntu.com lucid-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://us.archive.ubuntu.com lucid Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://us.archive.ubuntu.com lucid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/lucid-security/Release  

W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/lucid/Release  

W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/lucid-updates/Release  

W: Some index files failed to download, they have been ignored, or old ones used instead.
edwin@doomhammer:~$ sudo apt-get update > error
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://us.archive.ubuntu.com lucid Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://us.archive.ubuntu.com lucid-updates Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://security.ubuntu.com lucid-security Release: The following signatures were invalid: BADSIG 40976EAF437D05B5 Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>

W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/lucid/Release  

W: Failed to fetch http://security.ubuntu.com/ubuntu/dists/lucid-security/Release  

W: Failed to fetch http://us.archive.ubuntu.com/ubuntu/dists/lucid-updates/Release  

W: Some index files failed to download, they have been ignored, or old ones used instead.

Does anyone have a solution on how to fix this? This is on a clean install of 10.04.

[dcstar]

I've searched and searched and my googlefu has failed me.
........
Does anyone have a solution on how to fix this? This is on a clean install of 10.04.

The "solution" is to use a different repository.

[marvinptm]

I had the same problam and found you need a new key for VB 3.2.

"Apparently VirtualBox 3.2 just got released, and it’s the first release under the Oracle name (since Oracle’s acquisition of Sun). As such, you need to get a new key:

wget -q http://download.virtualbox.org/virtu...racle_vbox.asc -O- | sudo apt-key add -

Problem solved. It then will let upgraded to 3.2…"

I found this info on xblurb from zeus77.

[mwildam]

wget -q http://download.virtualbox.org/virtu...racle_vbox.asc -O- | sudo apt-key add -

I can confirm that this solves the problem - I already had updated to 3.2 and experienced the problem afterwards, but however.

[earthbound01]

I entered "wget -q http://download.virtualbox.org/virtu...racle_vbox.asc -O- | sudo apt-key add -" into the terminal, and I got "gpg: no valid OpenPGP data found."

[jewels.]

I entered "wget -q http://download.virtualbox.org/virtu...racle_vbox.asc -O- | sudo apt-key add -" into the terminal, and I got "gpg: no valid OpenPGP data found."

Agreed. I am getting the same error. I've googled to no solution.

Here is my problem (just to verify that I'm having the same problem):

~$ sudo apt-get update
Get:1 http://download.virtualbox.org karmic Release.gpg [197B]
Get:2 http://dl.google.com stable Release.gpg [189B]                           
Ign http://dl.google.com stable/main Translation-en_US                         
Ign http://download.virtualbox.org karmic/non-free Translation-en_US           
Get:3 http://download.virtualbox.org karmic Release [3,446B]                   
Get:4 http://dl.google.com stable Release [2,544B]


........ (it continues on.....)


Fetched 3,982B in 5min 33s (12B/s)
Reading package lists... Done
W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://download.virtualbox.org karmic Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@virtualbox.org>

W: Failed to fetch http://download.virtualbox.org/virtualbox/debian/dists/karmic/Release  

W: Failed to fetch http://download.skype.com/linux/repos/debian/dists/stable/non-free/binary-amd64/Packages.gz  404  Not Found [IP: 204.9.165.83 80]

W: Some index files failed to download, they have been ignored, or old ones used instead.
~$ wget -q http://download.virtualbox.org/virtu...racle_vbox.asc -O- | sudo apt-key add -
gpg: no valid OpenPGP data found.
~$

Strangely enough, I'm running Karmic Ubuntu 64 bit (not Lucid).
Anyone have any suggestions?
Thanks!

[cesarse]

Change ellipsis for albox/debian/or. URLs are not properly displayed here.

By the way, the "invalid signature" issue remains unsolved. It's Oracle's fault, not ours.

[KayakJim]

Running Ubuntu 9.10 Karmic 32-bit Desktop and also getting:

W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used.GPG error: http://download.virtualbox.org karmic Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@virtualbox.org>

when attempting to update the repository list.

[jaygo]

Looks like this old fix still does the trick. You'll need to preface all of these with "sudo" or "sudo su" beforehand.

apt-get clean
cd /var/lib/apt
mv lists lists.old
mkdir -p lists/partial
apt-get clean
apt-get update

[mercibe]

Indeed, the old fix still does the trick... Thank you very much!