Home / ubuntu / Questions / 1877
Accepted
cmcginty
Asked: 2010-08-11 11:55:17 +0800 CST

What is the easiest way to resolve apt-get BADSIG GPG errors?

  • 772

I frequently cross this issue, and always have to google for an answer. Does anyone have a permanent fix for BADSIG errors from apt-get?

W: GPG error: http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key)

apt gnupg

6 Answers

  1. Best Answer

    Here's the (easiest) solution:

    Type the following commands in the Terminal:

    $ sudo -i
# apt-get clean
# cd /var/lib/apt
# mv lists lists.old
# mkdir -p lists/partial
# apt-get clean
# apt-get update

    Credits: ubuntugeek.com

    Edit:

    If the error occurs again (maybe after a few days/months), open Nautilus as root > navigate to var/lib/apt > delete the "lists.old" folder > then open the "lists" folder and delete the "partial" folder. Now, execute the aforementioned commands again.

    • 135

  2. The important part of your error message is the following in bold:

    W: GPG error: http://download.virtualbox.org lucid Release: The following signatures were invalid: BADSIG 54422A4B98AB5139 Oracle Corporation (VirtualBox archive signing key)

    Copy the stuff in bold and then open a terminal and type:

    sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 54422A4B98AB5139

    i.e. paste using SHIFT + INS the number you have copied - 54422A4B98AB5139

    You'll have to enter your password, the key will be downloaded and integrated.

    • 68

  3. Try deleting the key

    sudo apt-key del 16126D3A3E5C1192

    then updating the repository

    sudo apt-get update

    You should get a NO_PUBKEY error instead of a BADSIG error and

    sudo apt-key finger

    should not find the key (called "Ubuntu Extras Archive Automatic Signing Key")

    Now add the key

    sudo apt-key adv --recv-keys --keyserver keyserver.ubuntu.com 16126D3A3E5C1192

    The result of apt-key finger should have

    pub   1024D/3E5C1192 2010-09-20
      Key fingerprint = C474 15DF F48C 0964 5B78  6094 1612 6D3A 3E5C 1192
uid                  Ubuntu Extras Archive Automatic Signing Key <[email protected]>

    If that does not work, try

    apt-get clean            # Remove cached packages
cd /var/lib/apt
mv lists lists.old       # Backup mirror info
mkdir -p lists/partial   # Recreate directory structure
apt-get clean
apt-get update           # Fetch mirror info

    Source: this ubuntu forums thread

    • 31

  4. Another easier way to resolve BADSIG GPG errors is via a software called Y PPA manager

    sudo add-apt-repository ppa:webupd8team/y-ppa-manager
    sudo apt-get update
    sudo apt-get install y-ppa-manager

    Click on Advanced
    enter image description here

    And then select Fix all GPG Badsig errors
    enter image description here

    • 12

  5. If you still have this error after adding the key try:

    1. goto your apt-cacher-ng cache directory, and delete the virtualbox entry:

      cd /var/cache/apt-cacher-ng
sudo rm -rf download.virtualbox.org
    • 3

  6. Found another server that we could use:

    gpg --keyserver hkp://subkeys.pgp.net --recv-keys [YOURKEYINQUESTION]
gpg --armor --export [YOURKEYINQUESTION] | sudo apt-key add -
    • 2