The following signatures couldn't be verified

The last two days I've been getting the following breakage email from the daily updates script on one of my etch Xen domains:

/etc/cron.daily/local-apt: W: GPG error: http://admin.curacao.strugglers.net etch Release: \ The following signatures couldn't be verified because the \ public key is not available: NO_PUBKEY 010908312D230C5F W: You may want to run apt-get update to correct these problems

On further investigaton it seems to be because etch's APT is now checking signatures against a GPG key I do not have configured. Thanks to JackieBrown's post at DebCentral (and Google), a solution is found:

$ gpg --keyserver subkeys.pgp.net --recv-keys 2D230C5F gpg: requesting key 2D230C5F from hkp server subkeys.pgp.net gpg: /home/andy/.gnupg/trustdb.gpg: trustdb created gpg: key 2D230C5F: public key "Debian Archive Automatic Signing Key (2006) " imported gpg: no ultimately trusted keys found gpg: Total number processed: 1 gpg:              imported: 1 $ gpg --armor --export 2D230C5F | sudo apt-key add - gpg: no ultimately trusted keys found OK $ sudo apt-get update Get:1 http://admin.curacao.strugglers.net etch Release.gpg [378B] Get:2 http://admin.curacao.strugglers.net etch/updates Release.gpg [189B] Hit http://admin.curacao.strugglers.net etch Release Hit http://admin.curacao.strugglers.net etch/updates Release Hit http://admin.curacao.strugglers.net etch/main Packages Hit http://admin.curacao.strugglers.net etch/main Sources Ign http://admin.curacao.strugglers.net etch/updates/main Packages Hit http://admin.curacao.strugglers.net etch/updates/main Packages Fetched 567B in 9s (58B/s) Reading package lists... Done $ sudo apt-get upgrade Reading package lists... Done Building dependency tree... Done The following packages will be upgraded: libsensors3 libssl-dev libssl0.9.8 manpages manpages-dev openssl 6 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. Need to get 8068kB of archives. After unpacking 32.8kB of additional disk space will be used. Do you want to continue [Y/n]? Get:1 http://admin.curacao.strugglers.net etch/main libssl-dev 0.9.8a-5 [2837kB] Get:2 http://admin.curacao.strugglers.net etch/main openssl 0.9.8a-5 [977kB] Get:3 http://admin.curacao.strugglers.net etch/main libssl0.9.8 0.9.8a-5 [2645kB] Get:4 http://admin.curacao.strugglers.net etch/main manpages 2.17-1 [411kB] Get:5 http://admin.curacao.strugglers.net etch/main manpages-dev 2.17-1 [1118kB] Get:6 http://admin.curacao.strugglers.net etch/main libsensors3 1:2.9.2-7 [80.4kB] Fetched 8068kB in 6s (1165kB/s) Reading changelogs... Done Preconfiguring packages ... (Reading database ... 23620 files and directories currently installed.) Preparing to replace libssl-dev 0.9.8a-3 (using .../libssl-dev_0.9.8a-5_i386.deb) ... Unpacking replacement libssl-dev ... Preparing to replace openssl 0.9.8a-3 (using .../openssl_0.9.8a-5_i386.deb) ... Unpacking replacement openssl ... Preparing to replace libssl0.9.8 0.9.8a-3 (using .../libssl0.9.8_0.9.8a-5_i386.deb) ... Unpacking replacement libssl0.9.8 ... Preparing to replace manpages 2.10-1 (using .../manpages_2.17-1_all.deb) ... Unpacking replacement manpages ... Preparing to replace manpages-dev 2.10-1 (using .../manpages-dev_2.17-1_all.deb) ... Unpacking replacement manpages-dev ... Preparing to replace libsensors3 1:2.9.2-6 (using .../libsensors3_1%3a2.9.2-7_i386.deb) ... Unpacking replacement libsensors3 ... Setting up libssl0.9.8 (0.9.8a-5) ...

Setting up libssl-dev (0.9.8a-5) ...

Setting up openssl (0.9.8a-5) ...

Setting up manpages (2.17-1) ... Setting up manpages-dev (2.17-1) ... Setting up libsensors3 (2.9.2-7) ...

It all seems to be working again now!