View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0002359Kali LinuxKali Package Bugpublic2015-06-25 16:012025-07-14 09:37
Reportertodb Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionno change required 
Product Version1.1.0 
Summary0002359: BADSIG and Hash Sum Mismatch, usual fixes no bueno
Description

When attempting to apt-get update && apt-get upgrade, errors about a bad signature and bad hash block upgrading.

Steps To Reproduce

apt-get update && apt-get upgrade -y

I expect this is due to a live mirror update, but filing here just in case you weren't aware of downstream breakage.

Additional Information

The usual advice for apt-clean, resetting etc/apt/sources/list, reinstalling the key package, and manually installing the keys with apt-key, does not seem to apply.

Specifically, this remedy doesn't work:

rm -rf /var/lib/apt/lists* && apt-get update && apt-get install kali-archive-keyring && apt-get upgrade

This is seen on two Kali VMs (on the same network). My /etc/apt/sources for each are:

Kali 1.1.0c, fresh out of the box:

cat /etc/apt/sources.list | grep -v "#" | sort

deb http://http.kali.org/kali kali main non-free contrib
deb http://security.kali.org/ kali/updates main contrib non-free
deb-src http://http.kali.org/kali kali main non-free contrib
deb-src http://security.kali.org/ kali/updates main contrib non-free

Kali 1.1.0a, been using for a while:

cat /etc/apt/sources.list | sort

deb http://http.kali.org/kali kali main non-free contrib
deb http://security.kali.org/kali-security kali/updates main contrib non-free
deb-src http://http.kali.org/kali kali main non-free contrib

The errors are slightly different when hitting different mirrors, so here are some samples.

W: Failed to fetch http://security.kali.org/dists/kali/updates/main/source/Sources Hash Sum mismatch

W: Failed to fetch http://security.kali.org/dists/kali/updates/main/binary-amd64/Packages Hash Sum mismatch

W: Failed to fetch http://http.kali.org/kali/dists/kali/main/binary-amd64/Packages Hash Sum mismatch

W: GPG error: http://http.kali.org kali Release: The following signatures were invalid: BADSIG ED444FF07D8D0BF6 Kali Linux Repository [email protected]

Activities

todb

todb

2015-06-25 16:02

reporter   ~0003437

It's entirely possible someone is screwing with my network connection, but unlikely.
muts

muts

2015-06-25 16:52

reporter   ~0003438

You could also be using a mirror which is mid-sync. Please try again in 30 mins and report back if this issue persists.
muts

muts

2015-06-25 17:10

reporter   ~0003439

Last edited: 2015-06-25 17:26

Also, please note that the remedy you mention is not a "usual" one. It was a walk-around for a one time occurrence when our GPG key expired in 2014 and was replaced with a new one.
todb

todb

2015-06-25 17:37

reporter   ~0003440

Ah thanks muts for the clarification on that. Given the error I thought maybe the key went bad again.

Talked with g0tmi1k on IRC, and he confirmed there's currently an issue with archive-3 and archive-4. So, I switched my /etc/apt/sources.list to

deb http://mirror.gawsolutions.us/kali kali main non-free contrib
deb http://mirror.gawsolutions.us/kali-security kali/updates main contrib non-free
deb-src http://mirror.gawsolutions.us/kali-security kali/updates main contrib non-free
deb-src http://mirror.gawsolutions.us/kali kali main non-free contrib

and it seems to be chugging along now.
muts

muts

2015-06-25 17:45

reporter   ~0003441

Last edited: 2015-06-25 17:48

I'm not seeing any issues with archive-{3,4} at the moment, it could have been a momentary repo sync. You shouldn't hardcode repositories in your sources.list as they may go offline from time to time. You're better off using the http.kali.org redirector.
g0tmi1k

g0tmi1k

2015-06-25 17:48

administrator   ~0003442

Can confirm it's now working for me:

root@kali ~$ apt-get update
Get:1 http://archive-3.kali.org kali Release.gpg [819 B]
Hit http://archive-3.kali.org kali/updates Release.gpg
Get:2 http://archive-3.kali.org kali Release [21.1 kB]
Hit http://archive-3.kali.org kali/updates Release
Get:3 http://archive-3.kali.org kali/main amd64 Packages [8,475 kB]
Get:4 http://archive-3.kali.org kali/non-free amd64 Packages [138 kB]
Get:5 http://archive-3.kali.org kali/contrib amd64 Packages [57.7 kB]
Get:6 http://archive-3.kali.org kali/main i386 Packages [8,501 kB]
Get:7 http://archive-3.kali.org kali/non-free i386 Packages [135 kB]
Get:8 http://archive-3.kali.org kali/contrib i386 Packages [58.4 kB]
Hit http://archive-3.kali.org kali/updates/main amd64 Packages
Hit http://archive-3.kali.org kali/updates/contrib amd64 Packages
Hit http://archive-3.kali.org kali/updates/non-free amd64 Packages
Hit http://archive-3.kali.org kali/updates/main i386 Packages
Hit http://archive-3.kali.org kali/updates/contrib i386 Packages
Hit http://archive-3.kali.org kali/updates/non-free i386 Packages
Ign http://archive-3.kali.org kali/contrib Translation-en_GB
Ign http://archive-3.kali.org kali/contrib Translation-en
Ign http://archive-3.kali.org kali/main Translation-en_GB
Ign http://archive-3.kali.org kali/main Translation-en
Ign http://archive-3.kali.org kali/non-free Translation-en_GB
Ign http://archive-3.kali.org kali/non-free Translation-en
Ign http://archive-3.kali.org kali/updates/contrib Translation-en_GB
Ign http://archive-3.kali.org kali/updates/contrib Translation-en
Ign http://archive-3.kali.org kali/updates/main Translation-en_GB
Ign http://archive-3.kali.org kali/updates/main Translation-en
Ign http://archive-3.kali.org kali/updates/non-free Translation-en_GB
Ign http://archive-3.kali.org kali/updates/non-free Translation-en
Fetched 17.4 MB in 25s (686 kB/s)
Reading package lists... Done
root@kali ~$ vim /etc/apt/sources.list
root@kali ~$ apt-get update
Get:1 http://archive-4.kali.org kali Release.gpg [819 B]
Get:2 http://archive-4.kali.org kali/updates Release.gpg [819 B]
Get:3 http://archive-4.kali.org kali Release [21.1 kB]
Get:4 http://archive-4.kali.org kali/updates Release [11.0 kB]
Get:5 http://archive-4.kali.org kali/main amd64 Packages [8,481 kB]
Get:6 http://archive-4.kali.org kali/non-free amd64 Packages [139 kB]
Get:7 http://archive-4.kali.org kali/contrib amd64 Packages [57.7 kB]
Get:8 http://archive-4.kali.org kali/main i386 Packages [8,507 kB]
Get:9 http://archive-4.kali.org kali/non-free i386 Packages [135 kB]
Get:10 http://archive-4.kali.org kali/contrib i386 Packages [58.4 kB]
Get:11 http://archive-4.kali.org kali/updates/main amd64 Packages [398 kB]
Get:12 http://archive-4.kali.org kali/updates/contrib amd64 Packages [20 B]
Get:13 http://archive-4.kali.org kali/updates/non-free amd64 Packages [20 B]
Get:14 http://archive-4.kali.org kali/updates/main i386 Packages [400 kB]
Get:15 http://archive-4.kali.org kali/updates/contrib i386 Packages [20 B]
Get:16 http://archive-4.kali.org kali/updates/non-free i386 Packages [20 B]
Ign http://archive-4.kali.org kali/contrib Translation-en_GB
Ign http://archive-4.kali.org kali/contrib Translation-en
Ign http://archive-4.kali.org kali/main Translation-en_GB
Ign http://archive-4.kali.org kali/main Translation-en
Ign http://archive-4.kali.org kali/non-free Translation-en_GB
Ign http://archive-4.kali.org kali/non-free Translation-en
Ign http://archive-4.kali.org kali/updates/contrib Translation-en_GB
Ign http://archive-4.kali.org kali/updates/contrib Translation-en
Ign http://archive-4.kali.org kali/updates/main Translation-en_GB
Ign http://archive-4.kali.org kali/updates/main Translation-en
Ign http://archive-4.kali.org kali/updates/non-free Translation-en_GB
Ign http://archive-4.kali.org kali/updates/non-free Translation-en
Fetched 18.2 MB in 23s (785 kB/s)
Reading package lists... Done
root@kali ~$
muts

muts

2015-06-25 17:51

reporter   ~0003443

Todb - if it's not resolved for you yet, feel free to ping us on IRC or re-open the ticket!

Issue History

Date Modified Username Field Change
2015-06-25 16:01 todb New Issue
2015-06-25 16:02 todb Note Added: 0003437
2015-06-25 16:52 muts Note Added: 0003438
2015-06-25 17:10 muts Note Added: 0003439
2015-06-25 17:26 muts Note Edited: 0003439
2015-06-25 17:37 todb Note Added: 0003440
2015-06-25 17:45 muts Note Added: 0003441
2015-06-25 17:48 muts Note Edited: 0003441
2015-06-25 17:48 g0tmi1k Note Added: 0003442
2015-06-25 17:49 muts Status new => closed
2015-06-25 17:49 muts Resolution open => no change required
2015-06-25 17:49 muts Additional Information Updated
2015-06-25 17:51 muts Note Added: 0003443
2025-07-14 09:36 g0tmi1k Priority high => normal
2025-07-14 09:37 g0tmi1k Severity block => minor