Errors: No public key and Hash Sum mismatch!

Support
#1

Hello

I have a fresh and verifyed whonix 7 image (Downloaded on Dec.2013).
I never had problems with this image in the past, but now something looks wrong.

I know that the “404 not found” error is normal and so I dont worry, but I have two more errors and found nothing in the forum about that.

At first, I got the following error with “sudo apt-get update”:
W: There is no public key available for the following key IDs

Is this normal and ok? Or do I have to fix something?

Second, after the upgrade everything looks fine, but if I check one day later for updates I got following error:
W: Failed to fetch http://… Hash Sum mismatch

After a few days I have 4-5 update sources with this error.
Is this normal and ok? Or do I have to fix something?

I delete the VM and retried with the fresh Whonix-7 image for 3 times now, always the same problems.

Thanks a lot for any help

#2

I am not only answering for you, but generally, so please don’t wonder when I mention things you already know.

I know that the "404 not found" error is normal and so I dont worry, but I have two more errors and found nothing in the forum about that.
This is a known minor issue: https://www.whonix.org/wiki/Download#Whonix-Gateway:_Err:_http:.2F.2Fdeb.torproject.org_tor-0.2.4.x-jessie.2Fmain_i386_Packages_404_Not_Found
W: There is no public key available for the following key IDs
I just finished writing https://www.whonix.org/wiki/Download#There_is_no_public_key_available_for_the_following_key_IDs - please check if it answers your question.
Hash Sum mismatch
Please post the output of

followed by

here.

#3

Hi,
here you get an example, one day after upgrade.
The public key error is allways there, also in fresh image (verifyed before).
Directly after the upgrade I never see the Hash Sum error, but after a few hours I see the first, now after one day I see two and if I wait 1-2 days more I will get more Hash Sum errors.

user@host:~$ sudo apt-get update
[sudo] password for user:
Get:1 http://ftp.us.debian.org testing InRelease [153 kB]
Hit http://security.debian.org testing/updates InRelease
Hit http://security.debian.org testing/updates/main i386 Packages
Hit http://security.debian.org testing/updates/contrib i386 Packages
Hit http://deb.torproject.org testing InRelease
Hit http://security.debian.org testing/updates/non-free i386 Packages
Get:2 http://ftp.us.debian.org testing/main i386 Packages/DiffIndex [7876 B]
Ign http://deb.torproject.org tor-0.2.4.x-jessie InRelease
Hit http://security.debian.org testing/updates/contrib Translation-en
Hit http://security.debian.org testing/updates/main Translation-en
Hit http://deb.torproject.org testing/main i386 Packages
Hit http://security.debian.org testing/updates/non-free Translation-en
Hit http://ftp.us.debian.org testing/contrib i386 Packages/DiffIndex
Ign http://deb.torproject.org tor-0.2.4.x-jessie Release.gpg
Hit http://ftp.us.debian.org testing/non-free i386 Packages/DiffIndex
Hit http://ftp.us.debian.org testing/contrib Translation-en/DiffIndex
Ign http://deb.torproject.org tor-0.2.4.x-jessie Release
Get:3 http://ftp.us.debian.org testing/main Translation-en/DiffIndex [7876 B]
Ign http://deb.torproject.org tor-0.2.4.x-jessie/main i386 Packages/DiffIndex
Hit http://ftp.us.debian.org testing/non-free Translation-en/DiffIndex
Get:4 http://ftp.us.debian.org testing/main i386 2014-02-13-0247.37.pdiff [15.8 kB]
Ign http://deb.torproject.org testing/main Translation-en
Get:5 http://ftp.us.debian.org testing/main i386 2014-02-13-1447.12.pdiff [2577 B]
Get:6 http://ftp.us.debian.org testing/main i386 2014-02-13-1447.12.pdiff [2577 B]
Get:7 http://ftp.us.debian.org testing/main 2014-02-13-0247.37.pdiff [4061 B]
Hit http://sourceforge.net stable InRelease
Get:8 http://ftp.us.debian.org testing/main 2014-02-13-1447.12.pdiff [289 B]
Get:9 http://ftp.us.debian.org testing/main 2014-02-13-1447.12.pdiff [289 B]
Ign http://deb.torproject.org tor-0.2.4.x-jessie/main Translation-en
Err http://deb.torproject.org tor-0.2.4.x-jessie/main i386 Packages
404 Not Found
Hit http://sourceforge.net stable/main i386 Packages
Ign http://sourceforge.net stable/main Translation-en
Fetched 191 kB in 28s (6650 B/s)
W: There is no public key available for the following key IDs:
CB8D50BB77BB3C48
W: Failed to fetch http://ftp.us.debian.org/debian/dists/testing/main/binary-i386/PackagesIndex Hash Sum mismatch

W: Failed to fetch http://deb.torproject.org/torproject.org/dists/tor-0.2.4.x-jessie/main/binary-i386/Packages 404 Not Found

W: Failed to fetch http://ftp.us.debian.org/debian/dists/testing/main/i18n/Translation-enIndex Hash Sum mismatch

E: Some index files failed to download. They have been ignored, or old ones used instead.
user@host:~$ echo $?
100
user@host:~$

#4
Hash Sum error

I’ve read:

Please try:

sudo rm -fR /var/lib/apt/lists/*
sudo apt-get update
#5

Hi,
I did this and the hole lists are loaded fine with apt-get update, also no errors now.

But I am sure, that in one day the errors will be back.
Also the echo shows still the errorcode 100

After upgrade from a fresh image it is the same, no errors after upgrade, but one day later I have 2-4 Hash Sum mismatch.

user@host:~$ sudo rm -fR /var/lib/apt/lists/*
user@host:~$ sudo apt-get update
Get:1 http://security.debian.org testing/updates InRelease [73.5 kB]
Get:2 http://ftp.us.debian.org testing InRelease [153 kB]
Get:3 http://deb.torproject.org testing InRelease [4247 B]
Ign http://deb.torproject.org tor-0.2.4.x-jessie InRelease
Get:4 http://security.debian.org testing/updates/main i386 Packages [14 B]
Get:5 http://deb.torproject.org testing/main i386 Packages [2275 B]
Get:6 http://security.debian.org testing/updates/contrib i386 Packages [14 B]
Get:7 http://security.debian.org testing/updates/non-free i386 Packages [14 B]
Ign http://deb.torproject.org tor-0.2.4.x-jessie Release.gpg
Get:8 http://security.debian.org testing/updates/contrib Translation-en [14 B]
Ign http://deb.torproject.org tor-0.2.4.x-jessie Release
Get:9 http://security.debian.org testing/updates/main Translation-en [14 B]
Get:10 http://security.debian.org testing/updates/non-free Translation-en [14 B]
Get:11 http://sourceforge.net stable InRelease [4114 B]
Ign http://deb.torproject.org testing/main Translation-en
Get:12 http://ftp.us.debian.org testing/contrib Translation-en [39.2 kB]
Err http://deb.torproject.org tor-0.2.4.x-jessie/main i386 Packages
404 Not Found
Ign http://deb.torproject.org tor-0.2.4.x-jessie/main Translation-en
Get:13 http://ftp.us.debian.org testing/main Translation-en [4264 kB]
Get:14 http://sourceforge.net stable/main i386 Packages [20 B]
Ign http://sourceforge.net stable/main Translation-en
Get:15 http://ftp.us.debian.org testing/non-free Translation-en [71.4 kB]
Get:16 http://ftp.us.debian.org testing/main i386 Packages [6274 kB]
Get:17 http://ftp.us.debian.org testing/contrib i386 Packages [49.9 kB]
Get:18 http://ftp.us.debian.org testing/non-free i386 Packages [83.4 kB]
Fetched 11.0 MB in 7min 59s (23.0 kB/s)
W: There is no public key available for the following key IDs:
CB8D50BB77BB3C48
W: Failed to fetch http://deb.torproject.org/torproject.org/dists/tor-0.2.4.x-jessie/main/binary-i386/Packages 404 Not Found

E: Some index files failed to download. They have been ignored, or old ones used instead.
user@host:~$ echo $?
100

#6

This should be fixed when you apply the workaround listed here:

#7

Hi,

now the errors are back!

[quote=“adrelanos, post:6, topic:61”]This should be fixed when you apply the workaround listed here:

Thanks, I will try this and write in 1-2 days if it fix it.

#8

on the apt-get update / hash sum errors -
i have been able to fix them by getting rid of all the old package lists by
sudo mv /var/lib/apt/lists /some/temp/dir/

this will cause the next apt-get update to pull down completely fresh package lists from the repos which enabled me to install updates again.