View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001061 | Kali Linux | General Bug | public | 2014-02-26 12:04 | 2025-07-14 09:36 |
| Reporter | KALIMERO | Assigned To | muts | ||
| Priority | normal | Severity | major | Reproducibility | always |
| Status | closed | Resolution | no change required | ||
| Product Version | 1.0.6 | ||||
| Summary | 0001061: GPG BADSIG ED444FF07D8D0BF6 on apt-get update | ||||
| Description | on apt-get update I get a gpg BADSIG ED444FF07D8D0BF6 error: W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.kali.org kali/updates Release: The following signatures were invalid: BADSIG ED444FF07D8D0BF6 Kali Linux Repository [email protected] W: Failed to fetch http://security.kali.org/kali-security/dists/kali/updates/Release W: Some index files failed to download. They have been ignored, or old ones used instead. I did aptitude clean and reinstalled kali-archive-keyring, still same problem. Additionaly this raises two issues:
root@kali:~# wget -q -O - https://archive.kali.org/archive-key.asc | gpg --import
| ||||
| Steps To Reproduce | apt-get update | ||||
| Additional Information | From my understanding it is a loophole in the whole crypto packaging if the archive keyring is not available via a secured protocol like https. The key could easily be intercepted by a third party and therefor bad packages could be injected into kali install on network side. We do know nowadays, thanks to Mr. Snowden, that these techniques are not a theoretical issue. Also it would be a good idea to publish the kali archive keyring fingerprint on the kali website. | ||||
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2014-02-26 12:04 | KALIMERO | New Issue | |
| 2014-02-26 14:16 | muts | Note Added: 0001575 | |
| 2014-02-26 14:16 | muts | Status | new => closed |
| 2014-02-26 14:16 | muts | Assigned To | => muts |
| 2014-02-26 14:16 | muts | Resolution | open => no change required |
| 2025-07-14 09:36 | g0tmi1k | Priority | high => normal |