Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated.

Doing an apt-get update will sometimes fix the problem, but sometimes it won't.

How does apt-get update fix this problem?

Does this type of authentication necessarily involve ssl?

Why does it sometimes not fix the problem?

share|improve this question
Are you using Debian or some derived distro? What 3rd party repositories? What is the exact error message? Help us help you. – schaiba Jan 30 '13 at 7:41

Basically, each package is signed using GPG. Keys are provided through different Debian packages (look for *-keyring packages). You can see currently installed keys using apt-key.

Additional keys are used when you are using 3rd party repositories such as Ubuntu PPA or others (Google, Skype, Valve...).

Some 3rd party repositories may also contain not signed packages which lead into this apt warning. Be particularly careful when using these repositories as a malicious Debian package you install can definitively compromise your system.

See this page (apt-secure) for more information.

Regarding apt-get update effect on this, it retrieves from the server up-to-date information regarding packages which can fix previous errors such as unsigned packages, expired GPG key and other bugs that may break the authentification chain.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.