1

Sometimes when you try to apt-get install a program, you get a warning message about how some packages couldn't be authenticated.

Doing an apt-get update will sometimes fix the problem, but sometimes it won't.

How does apt-get update fix this problem?

Does this type of authentication necessarily involve ssl?

Why does it sometimes not fix the problem?

  • 1
    Are you using Debian or some derived distro? What 3rd party repositories? What is the exact error message? Help us help you. – schaiba Jan 30 '13 at 7:41
2

Basically, each package is signed using GPG. Keys are provided through different Debian packages (look for *-keyring packages). You can see currently installed keys using apt-key.

Additional keys are used when you are using 3rd party repositories such as Ubuntu PPA or others (Google, Skype, Valve...).

Some 3rd party repositories may also contain not signed packages which lead into this apt warning. Be particularly careful when using these repositories as a malicious Debian package you install can definitively compromise your system.

See this page (apt-secure) for more information.

Regarding apt-get update effect on this, it retrieves from the server up-to-date information regarding packages which can fix previous errors such as unsigned packages, expired GPG key and other bugs that may break the authentification chain.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.