Invalid signature for VirtualBox download

[chandra]

On a Kubuntu 10.04 Lucid Lynx system, I get this error:

W: GPG error: ​http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@…>

whenever I do an

sudo apt-get update && sudo apt-get dist-upgrade

It is a liveable warning message but annoying in its persistence.

Can someone fix this please?

Thanks.

P.S. I have followed the procedure outlined at:

​http://www.virtualbox.org/wiki/Linux_Downloads

wget -q ​http://download.virtualbox.org/virtualbox/debian/oracle_vbox.asc -O- | sudo apt-key add -

[Frank Mehnert]

Please can you try again? Perhaps you had some network problem. I just tried this and had no problem to install the VirtualBox 3.2 package for Lucid from the repository.

[chandra]

May I clarify.

I have no problem installing the VirtualBox 3.2 package successfully for Lucid.

I am only reporting the warning message arising from the bad GPG signature and wonder if it could be fixed so that the installation is silent.

[Frank Mehnert]

Hmm, but I cannot see such a warning.

[chandra]

I see it every time I do

sudo apt-get update

Moreover, I do not seem to have any expired Sun keys but only the new Oracle key.

sudo apt-key finger

gives me:

--- pub 1024D/98AB5139 2010-05-18

Key fingerprint = 7B0F AB3A 13B9 0743 5925 D9C9 5442 2A4B 98AB 5139

uid Oracle Corporation (VirtualBox archive signing key) <info@…> sub 2048g/281DDC4B 2010-05-18 ---

and the warning after

sudo apt-get update is (once more)

--- W: GPG error: ​http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key) <info@…> ---

FYI, I have this line in /etc/apt/sources.list

deb ​http://download.virtualbox.org/virtualbox/debian lucid non-free

All told, I would be happy if there were a way to exorcise this warning if it is spurious. If not, it will be good to have it fixed.

Thanks.

[Frank Mehnert]

Could you try the following as root?

cd /var/lib/apt/lists
rm *virtualbox*
cd partial
rm *
apt-get update

[chandra]

Thank you. That did it and the warning is now gone.

For what it is worth, here is what I found:

cd /var/lib/apt/lists
ls

gave

---

download.virtualbox.org_virtualbox_debian_dists_lucid_non-free_binary-amd64_Packages

download.virtualbox.org_virtualbox_debian_dists_lucid_Release

---

and I think the first line probably caused the warning to come up.

cd partial
ls

gave

---

download.virtualbox.org_virtualbox_debian_dists_lucid_Release download.virtualbox.org_virtualbox_debian_dists_lucid_Release.gpg

---

removing these files and got rid of the warning with

sudo apt-get update.

Thank you once again.

[Frank Mehnert]

Thanks for the feedback.