Bad signature with Debian 10


I have a Debian 10 with installed owncloud 10.7 .
Since over a week I get an error in aptitude and can’t update to owncloud 10.8.
What can I do?

This is the error message:

Ign  Release.gpg
W: GPG-Fehler:  Release: Die folgenden Signaturen waren ungültig: DDA2C105C4B73A6649AD2BBD47AE7F72479BC94B
E: Das Depot »  Release« ist nicht signiert.
E: Failed to download some files

Here is what I have done trying to fix the issue:

apt-key del "DDA2 C105 C4B7 3A66 49AD  2BBD 47AE 7F72 479B C94B"
curl -fsSL | gpg --dearmor > /etc/apt/trusted.gpg.d/owncloud.gpg
echo "deb" / > "/etc/apt/sources.list.d/owncloud.list"

Here is the output of apt-key list:

pub   rsa2048 2013-08-26 [SC] [verfällt: 2023-08-23]
      DDA2 C105 C4B7 3A66 49AD  2BBD 47AE 7F72 479B C94B
uid        [ unbekannt ] ownCloud build service <obsrun@localhost>
sub   rsa2048 2013-08-26 [E] [verfällt: 2023-08-23]
sub   dsa2048 2013-08-26 [S] [verfällt: 2023-08-23]

The hints here Debian 10 BADSIG apt error - #2 by jnweiger did not help; I don’t understand what OBS is. I removed all *.list files and replaced them with the script above. I removed all owncloud signatures from gpg and imported them from scratch. But there is still the error.

Thank you for your help!

OBS is the OpenSUSE Build Service. It automates package creation from source code.

You may want to revisit the article you linked to, because I just used it to fix the exact same situation you are reporting.

You also have a typo in your repo creation echo statement above. You have a space and a forward slash outside of the first set of double quotes that should be within them. That wouldn’t cause your error, though, so I encourage dumping your old repo and keyring files and using the method in the other article.

The gpg key fingerprint from the OBS repo will be 1B07204CD71B690D409F57D24ABE1AC7557BEFF9

1 Like

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.