Core: W: GPG error: https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Release: The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>

Created on 5 Aug 2020  路  22Comments  路  Source: owncloud/core

Steps to reproduce

  1. wget -nv https://download.owncloud.org/download/repositories/production/Ubuntu_18.04/Release.key -O Release.key
  2. apt-key add - < Release.key
  3. echo 'deb http://download.owncloud.org/download/repositories/production/Ubuntu_18.04/ /' > /etc/apt/sources.list.d/owncloud.list
  4. run apt-get update

Expected behaviour

Tell us what should happen
Should complete

Actual behaviour

Tell us what happens instead
Fails with error W: GPG error: https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Release: The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service

Server configuration

Operating system:
Ubuntu 18.04

Bug
Source
picture sjd4
👍9

Most helpful comment

Seems to be working for me on Ubuntu 18.04 now.

picture sjd4 on 12 Aug 2020
👍3

All 22 comments

I'm also experiencing the same behavior on our Ubuntu 19.10 system this morning (may have been happening before then, I've not patched the system for about a month).

I've removed and readded the trusted key as per https://download.owncloud.org/download/repositories/production/owncloud/
~~~
root@owncloud:~# apt-key list

/etc/apt/trusted.gpg

pub rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
DDA2 C105 C4B7 3A66 49AD 2BBD 47AE 7F72 479B C94B
uid [ unknown] ownCloud build service
sub rsa2048 2013-08-26 [E] [expires: 2023-08-23]
sub dsa2048 2013-08-26 [S] [expires: 2023-08-23]
...
...
~~~

sscotter picture sscotter on 6 Aug 2020

I just saw this on my Ubuntu 18.04 server.

The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>

Same apt-key list as sscotter above.

nblomquist picture nblomquist on 6 Aug 2020

I have the same problem. Removing and adding a key does nothing. Debian GNU/Linux 10

alexey601 picture alexey601 on 6 Aug 2020

The issue is already being worked on. https://twitter.com/ownCloud/status/1291367851840937984

gnuheidix picture gnuheidix on 6 Aug 2020

Any update?

flaviolenz picture flaviolenz on 7 Aug 2020

Confirmed as NOT working on Debian 10, official repo.

W: Failed to fetch http://download.owncloud.org/download/repositories/production/Debian_10/Release.gpg The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>

t0rzz picture t0rzz on 8 Aug 2020
👍1

Same problem here on an odroid with ubuntu 18.04

FabienLab picture FabienLab on 8 Aug 2020

Same problem on Debian 9.

Ign:1 http://cdn-fastly.deb.debian.org/debian stretch InRelease
Hit:3 http://cdn-fastly.deb.debian.org/debian stretch Release
Hit:4 https://packages.sury.org/php stretch InRelease
Ign:2 https://attic.owncloud.org/download/repositories/production/Debian_9.0  InRelease
Get:6 https://download.owncloud.org/download/repositories/production/Debian_9.0  Release [977 B]
Get:7 https://download.owncloud.org/download/repositories/production/Debian_9.0  Release.gpg [481 B]
Ign:7 https://download.owncloud.org/download/repositories/production/Debian_9.0  Release.gpg
Get:8 https://download.owncloud.org/download/repositories/production/Debian_9.0  Packages [740 B]
Err:8 https://download.owncloud.org/download/repositories/production/Debian_9.0  Packages
  Hash Sum mismatch
  Hashes of expected file:
   - Filesize:740 [weak]
   - SHA256:df738d714674184a7a669894d24470e3486fc8ffbb49a6f9280594ac3d42f54b
   - SHA1:ece10432d9c068bff915d3535230d197fb4ae142 [weak]
   - MD5Sum:29d83f6d4b9e353c881f19f606e01f18 [weak]
  Hashes of received file:
   - SHA256:229164d86faac30d657f4e5cdd6f81abde3bc3e03f077edfff1fd100881d19d8
   - SHA1:0eb2c4a75288879f02c7099a9194387eccfb904e [weak]
   - MD5Sum:cb5aa78e738975f1df6a3e93ba21119d [weak]
   - Filesize:740 [weak]
  Last modification reported: Fri, 24 Apr 2020 21:01:16 +0000
  Release file created at: Wed, 05 Aug 2020 03:29:47 +0000
Fetched 2198 B in 0s (3045 B/s)
Reading package lists... Done
W: GPG error: https://download.owncloud.org/download/repositories/production/Debian_9.0  Release: The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>
W: The repository 'http://download.owncloud.org/download/repositories/production/Debian_9.0  Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.
E: Failed to fetch https://download.owncloud.org/download/repositories/production/Debian_9.0/Packages.gz  Hash Sum mismatch
   Hashes of expected file:
    - Filesize:740 [weak]
    - SHA256:df738d714674184a7a669894d24470e3486fc8ffbb49a6f9280594ac3d42f54b
    - SHA1:ece10432d9c068bff915d3535230d197fb4ae142 [weak]
    - MD5Sum:29d83f6d4b9e353c881f19f606e01f18 [weak]
   Hashes of received file:
    - SHA256:229164d86faac30d657f4e5cdd6f81abde3bc3e03f077edfff1fd100881d19d8
    - SHA1:0eb2c4a75288879f02c7099a9194387eccfb904e [weak]
    - MD5Sum:cb5aa78e738975f1df6a3e93ba21119d [weak]
    - Filesize:740 [weak]
   Last modification reported: Fri, 24 Apr 2020 21:01:16 +0000
   Release file created at: Wed, 05 Aug 2020 03:29:47 +0000
E: Some index files failed to download. They have been ignored, or old ones used instead.
BlaiseThirard picture BlaiseThirard on 9 Aug 2020

Same problem here on Debian 10. 

root@server:~# aptitude update
Err https://download.owncloud.org/download/repositories/production/Debian_10  Release.gpg
  The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>
Get: 18 https://deb.liquidsoap.info/debian stable/main amd64 Packages [778 kB]
Fetched 1,482 kB in 3s (522 kB/s)
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://download.owncloud.org/download/repositories/production/Debian_10  Release: The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>
W: Failed to fetch http://download.owncloud.org/download/repositories/production/Debian_10/Release.gpg: The following signatures were invalid: BADSIG 47AE7F72479BC94B ownCloud build service <obsrun@localhost>
W: Some index files failed to download. They have been ignored, or old ones used instead.
ibcs01 picture ibcs01 on 11 Aug 2020

With the latest update of the signature file, it seems to be resolved for Debian 10 by the onwcloud team. Thanks a lot.

holgerfriedrich picture holgerfriedrich on 12 Aug 2020
👍1

With the latest update of the signature file, it seems to be resolved for Debian 10. Thanks a lot.

What steps did you take to fix it?

t0rzz picture t0rzz on 12 Aug 2020

With the latest update of the signature file, it seems to be resolved for Debian 10. Thanks a lot.

What steps did you take to fix it?

@t0rzz Sorry you got me wrong. Looking at the files in the repo, someone of the owncloud team seems to have updated the signature file. For me as a user, it now works fine to run apt update. Update to 10.5 worked as well.
Using following repo: http://download.owncloud.org/download/repositories/production/Debian_10/

holgerfriedrich picture holgerfriedrich on 12 Aug 2020

Still not working on Ubuntu 18.4

Get:8 https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Release [980 B]
Get:9 https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Release.gpg [481 B]
E: Repository 'https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Release' changed its 'Origin' value from 'obs://s2.owncloud.com/ce:10.4/Ubuntu_18.04' to 'obs://s2.owncloud.com/ce:10.5/Ubuntu_18.04'
E: Repository 'https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Release' changed its 'Label' value from 'ce:10.4' to 'ce:10.5'
N: This must be accepted explicitly before updates for this repository can be applied. See apt-secure(8) manpage for details.
Do you want to accept these changes and continue updating from this repository? [y/N] y
Get:10 https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Packages [745 B]
Err:10 https://download.owncloud.org/download/repositories/production/Ubuntu_18.04 Packages
File has unexpected size (741 != 745). Mirror sync in progress? [IP: 167.233.14.167 443]
Hashes of expected file:

PitWenkin picture PitWenkin on 12 Aug 2020

With the latest update of the signature file, it seems to be resolved for Debian 10. Thanks a lot.

What steps did you take to fix it?

@t0rzz Sorry you got me wrong. Looking at the files in the repo, someone of the owncloud team seems to have updated the signature file. For me as a user, it now works fine to run apt update. Update to 10.5 worked as well.

Nope, still not working. Signature key is still invalid, it's actually 4 months old and has not been updated on the official repo for "Debian stable". It has been anyway updated for the unstable repo, which works fine for the stable repo, so here's a quick fix:

wget -nv https://download.owncloud.org/download/repositories/production/Debian_Unstable/Release.key -O Release.key
apt-key add - < Release.key
apt-get update
apt-get upgrade

You'll still get the STABLE version.

t0rzz picture t0rzz on 12 Aug 2020

I confirm that it works again on Debian 9. I just upgraded to Owncloud 10.5.

BlaiseThirard picture BlaiseThirard on 12 Aug 2020

It looks like that at least one upstream server is serving the old signature file e.g. the content of yoshi differs from luigi.

gnuheidix picture gnuheidix on 12 Aug 2020

Seems to be working for me on Ubuntu 18.04 now.

sjd4 picture sjd4 on 12 Aug 2020
👍3

same here

funlovin picture funlovin on 12 Aug 2020

Debian 10 - Ok. Thanks!

alexey601 picture alexey601 on 12 Aug 2020

This is an issue for me (Ubuntu 19.04)

E: The repository 'http://download.owncloud.org/download/repositories/production/Ubuntu_19.04 Release' is not signed.

Is there a fix available?

cbehren picture cbehren on 14 Sep 2020

Is there something I can do to get it working on Ubuntu 16.04?

Kullid picture Kullid on 13 Oct 2020

@cbehren @Kullid Found https://download.owncloud.org/download/repositories/production/owncloud/ by https://owncloud.com/download-server/ only lists 20.04, 19.10, 18.04. Not thinking fixing others by ownCloud.

ho4ho picture ho4ho on 16 Oct 2020
Was this page helpful?
0 / 5 - 0 ratings

Related issues

jnweiger picture jnweiger  路  4Comments
HLeemans picture HLeemans  路  4Comments
rehoehle picture rehoehle  路  4Comments
michaelstingl picture michaelstingl  路  3Comments
fridaynext picture fridaynext  路  5Comments