Hi,
I also did a rebuild of the version 3.7.5-1 with the T. Woodall's patch
and still have a problem. The problem is with the InRelease file
signature. I don't understand where can be the cause of the problem.
I still suspect the problem is concurent downloads.

    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# ll
    total 76
    -rw-r--r-- 1 apt-cacher-ng apt-cacher-ng 55443 Feb  4 16:05 InRelease
    -rw-r--r-- 1 apt-cacher-ng apt-cacher-ng   170 Feb  4 21:59 InRelease.head
    drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng  4096 Jan 24 06:26 contrib
    drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng  4096 Jan 24 06:26 main
    drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng  4096 Jan 24 06:26 non-free
    drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng  4096 Jan 24 06:26 
non-free-firmware

    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# cat 
InRelease.head
    HTTP/1.1 200 OK
    Content-Length: 55443
    Last-Modified: Tue, 04 Feb 2025 14:32:02 GMT
    X-Original-Source: 
https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease


    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# curl --head 
https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease
    HTTP/1.1 200 OK
    Date: Tue, 04 Feb 2025 21:00:06 GMT
    Server: Apache/2.4.62 (Debian)
    Last-Modified: Tue, 04 Feb 2025 14:32:02 GMT
    ETag: "d893-62d51df5099d3"
    Accept-Ranges: bytes
    Content-Length: 55443


    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# wget -O 
/tmp/InRelease https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease
    --2025-02-04 22:01:21--  
https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease
    Resolving ftp.debian.cz (ftp.debian.cz)... 78.128.211.127, 
2001:718:1:1f:50:56ff:feee:127
    Connecting to ftp.debian.cz (ftp.debian.cz)|78.128.211.127|:443... 
connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 55443 (54K)
    Saving to: ‘/tmp/InRelease’
    
    /tmp/InRelease                          
100%[=============================================================================>]
  54.14K  --.-KB/s    in 0.005s  
    
    2025-02-04 22:01:21 (11.7 MB/s) - ‘/tmp/InRelease’ saved [55443/55443]


    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# md5sum 
InRelease /tmp/InRelease
    42a3992a340220eaedbe41f3ea03fb6b  InRelease
    1e1c8c8a3eb793e0994a5b30150cc02f  /tmp/InRelease

The content of both files /tmp/InRelease and InRelease from
apt-cacher-ng's cache is the same, except the signature at the end.

    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# gpg --verify 
--keyring /usr/share/keyrings/debian-archive-keyring.gpg /tmp/InRelease 
    gpg: Signature made Tue 04 Feb 2025 03:31:25 PM CET
    gpg:                using RSA key A7236886F3CCCAAD148A27F80E98404D386FA1D9
    gpg: Good signature from "Debian Archive Automatic Signing Key 
(11/bullseye) <ftpmas...@debian.org>" [unknown]
    gpg: WARNING: This key is not certified with a trusted signature!
    gpg:          There is no indication that the signature belongs to the 
owner.
    Primary key fingerprint: 1F89 983E 0081 FDE0 18F3  CC96 73A4 F27B 8DD4 7936
         Subkey fingerprint: A723 6886 F3CC CAAD 148A  27F8 0E98 404D 386F A1D9
    gpg: Signature made Tue 04 Feb 2025 03:31:57 PM CET
    gpg:                using RSA key 4CB50190207B4758A3F73A796ED0E7B82643E131
    gpg: Good signature from "Debian Archive Automatic Signing Key 
(12/bookworm) <ftpmas...@debian.org>" [unknown]
    gpg: WARNING: This key is not certified with a trusted signature!
    gpg:          There is no indication that the signature belongs to the 
owner.
    Primary key fingerprint: B8B8 0B5B 623E AB6A D877  5C45 B7C5 D7D6 3509 47F8
         Subkey fingerprint: 4CB5 0190 207B 4758 A3F7  3A79 6ED0 E7B8 2643 E131


    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# gpg --verify 
--keyring /usr/share/keyrings/debian-archive-keyring.gpg InRelease
    gpg: Signature made Tue 04 Feb 2025 09:19:26 AM CET
    gpg:                using RSA key A7236886F3CCCAAD148A27F80E98404D386FA1D9
    gpg: BAD signature from "Debian Archive Automatic Signing Key (11/bullseye) 
<ftpmas...@debian.org>" [unknown]
    gpg: Signature made Tue 04 Feb 2025 09:19:56 AM CET
    gpg:                using RSA key 4CB50190207B4758A3F73A796ED0E7B82643E131
    gpg: BAD signature from "Debian Archive Automatic Signing Key (12/bookworm) 
<ftpmas...@debian.org>" [unknown]


    ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# diff -u 
/tmp/InRelease InRelease 
    --- /tmp/InRelease      2025-02-04 15:32:02.000000000 +0100
    +++ InRelease   2025-02-04 16:05:01.597595082 +0100
    @@ -496,29 +496,29 @@
      bd8fb630f74032553aa5942fc3ca546102d4a1b86dae248e2b0931170bb6a3d7     1544 
non-free/source/Sources.xz
     -----BEGIN PGP SIGNATURE-----
     
    -iQIzBAEBCAAdFiEEpyNohvPMyq0Uiif4DphATThvodkFAmeiJL0ACgkQDphATThv
    -odli6Q/+PTI18TtKuTsvER3kTXgnrAoFE6RohHJQPxbN2fky51I19fTw1aipXaJ0
    -/R9INFF6KVYcO8VLmPqgbZItpt7EJEUve6eqLEsiVa0QzvRRIZfF8hYoGlPc9FLF
    -vy2YiPqbgNo/eYvjocfvw5wywm8HKEWmPH6AIn9PU9M69vaT1atZ0+8LXDWIdV2D
    -xcIL7H6CE6lceD96F3+9nrn6IZFkwQlr3oJtCgO9e5TU8a55x0J2UEkje4mm4kS0
    -FraRwnhRXRTrONkweQKpMQ7Dp+DUMeH7OtEfEPNo0UMbYPC+/XMJnm39vr26p5Ar
    -Bc4pgRgKsIeGltMetuTy4yupVifNNgYS+Tm0Vp5A8AmizKScnNhHCIfPFrDF+vzf
    -g6cC6Bdf1fgWBK5w7uiR4V7v8uukrORM9m2fBoNy4tY+8LRO01lyP9PdISEVSihd
    -fzZolCP+/13TsYzko9cFT6dRcabiQE+sa/ZuAkU6FYfMtbJ0YqpEDtiyFK+br7ad
    -4lPA78xaDrfOFZpqRvQr2zIT71qC+LTNEZj3WtwGhSt2YOjjEdwn7/f3ql4NBBO3
    -/H5xsEk0G8cFhyrUhIeXJ1jSHPygGjaj5EVA+wM1ECGZZxMv6I8BO5+9Ly++67qd
    -PyzepebNAtEPUzO2XcY93Aky1hMdY6kz/zLxqmRXbyA9dQaHLHqJAjMEAQEIAB0W
    -IQRMtQGQIHtHWKP3Onlu0Oe4JkPhMQUCZ6Ik3QAKCRBu0Oe4JkPhMVMcEADQKd9q
    -TtdMsMUhvjCmYc40AXBtEgUkOurd9+M58pLuAdqCa2ApJA0DXjQlAVFM0BV95b2O
    -yyoyc9AhGjTSdFB2tPlp6RzIBrrOh3V1mszt99oVkGKtBx3HBa967GmfgXRaXp0e
    -ZDEpzfWUlNN7MxY+vNXvIbWYxUBh0R/5xfITv6Cbb8bC0mcaoIso836wHiATBkqh
    -iwNCyNEaXoQv1hdpJg2k7AIi9dvIGMXubkq+QhPaSVvHzZXAH/UKODubBd5U+voQ
    -Q2+3/PpXCcnzYq/jbtr8Yhz8tUaBinCCnYhW0j/+pHZAQQEH6wErjKMfjJa5wE7I
    -MlxBddsP+NMQyI07UhXk0rTulMsbZMfkrOD6FYoWESAt8OkiMMoihwBYRK/h9Mcl
    -Xl9tfO+u99hg31bnClPV3zazMM0NoRaBLF9xq84EjJd8K7RhbAxdaTAkud8LV4lr
    -vgumCLvAARSDZU8qbhaeApE91V99GSiSNGMYHRRWNZnRciOBVv3sspqkCJ91WYin
    -ozYKI4LKPFkYqAWBs5KNR9Llrih3ZBcxB/fugeBraFmvPQC5k5za5ONonn+ST3k/
    -Rb7mjubThamBiov0IG76iGDTi18nhsdyIiZWDbOqXS+/6Vbqwsb4VgA8eiD52820
    -MlYTzAPp1G8D+qK+r/1ClvfRGZYLgscv+4nltg==
    -=8ep+
    +iQIzBAEBCAAdFiEEpyNohvPMyq0Uiif4DphATThvodkFAmehzY4ACgkQDphATThv
    +odlnRw//deKBlDUh+2yvG88wZ7qAVnZmvMZixtULJoQo/Wv4MQEHygsmeVyZhV9m
    +yKCdJIL9cpJHOwghwRtvF1n5wMFBiMMOlfnCAucrTyvMdIY+jf2VolsLmI6IfXl3
    +3SAdeK0NL7V8Ll4IqSpdD0kJ6aoyV3hfOD2FH8CCv605ayUxifXXWutK34bpsfNh
    +QWCqiJkxax/ZihD9Qt2rZNi8W4oOtvihYZILV5NSQCzZP33i4QXnAkMSje4XRue1
    +7RuBQXZA6myfdGzrdMBnc/is+81VkbgduZujfzUd94jB5/P8oI/OfcR8c9GnK9pY
    +0Sto6GcwP6wmvFJcYCPqZSRkFSxpqWswhMrg4web/YQV5DBU+1xIHVyoJ8TxL2nh
    +LwnHe8WHgsAJdCNdFWElLfXAPGGBuwOITP5lPiTgniHXl0mCO2e2Vhtxjhy/H7hI
    +oo7tvecT32CmvJYWFzndmWbl2ClYnmTxl9MAwKgW+sJJ6IJi2dpIzGtaNr7zMsPw
    +lW2bi+kaj/255HBsIIgkTx8xOSciDTDBldXOgyeZEurOu3cxDlLV06zPn3s6B98J
    +XUwWA2u7Cr2huwRJgC836krIIoNGGqt6qzHTcGpB1wpYZEQtephx89XWAEqZyD2y
    +POZBL3FdwuX7pS0RpSSjshl8w63lqnMdhMIsc4uyWin+goDIG+mJAjMEAQEIAB0W
    +IQRMtQGQIHtHWKP3Onlu0Oe4JkPhMQUCZ6HNrAAKCRBu0Oe4JkPhMQnqEADQQzCR
    +p1RngkK/1Ab1+c9nWqUvo+SZREeBHcSo1LgOUZY46hek5mCSlmdt5EUZ9CmW0I5X
    +y4yJn1c/8vnMYQOuBhTq0ue5j5sx7wuGTMnU4HbWM9rbLOwE35oJj7SZKc3AXVZC
    +4K0aczgowT0i05KP9k6YRP+OvpYptTOrmS1Oxl+ykA+MyFTrXAOedMj2L51Bwjpo
    +HUugPRIzY5/B+6CN9deVUp9ggdUdrmG70/vEEGyM5EmMjZBiR/Ul0aJ5NUDKzntz
    +bhAZ3wrdtEzqkliRTvZmfwSecUqMUbd9c1n7owA6LtOM24BaLdPOsO4fLCja8rLf
    +dnqKjRNq7RfnuGPTqR0kBHm3B2LQGLUS5pOvHr7kd/gQRWoafCcZrgCp/pKlqjQ4
    +alXPIL5QKHvFbvIq8nKFnxAivfwkuEs5yMmU5B/zXnNl0opu9CZGKWpmIa7eM378
    +pyyvD7Cde6BtRjeWndkzDoYf76gXMloKyvAhnf8OuWqWUirK8sFCvCwmJvX1Qakl
    +0/tKj0ShumVWuSeBwvnZa8Y4Ha11YBbiN7EZLLQf1yDifSZfBtW6v6bMqESbVMrp
    +WTkKRoRtHmVnb0d7X7jwfMbnzq7JbGO49IFxNFCUc8PQslmRcWaCsJwiB5oA7vP7
    +wyKI29gK78fI21qOAUSbXH6W26vveDsEWT3dig==
    +=gvGF
     -----END PGP SIGNATURE-----


I can delete InRelease file from cache and do an apt update from some
client and the problem is for a moment solved, but after some time it
is here again. :-/
I'm confused by this strange behavior.
-- 
Zito

Reply via email to