Hi, I also did a rebuild of the version 3.7.5-1 with the T. Woodall's patch and still have a problem. The problem is with the InRelease file signature. I don't understand where can be the cause of the problem. I still suspect the problem is concurent downloads.
ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# ll total 76 -rw-r--r-- 1 apt-cacher-ng apt-cacher-ng 55443 Feb 4 16:05 InRelease -rw-r--r-- 1 apt-cacher-ng apt-cacher-ng 170 Feb 4 21:59 InRelease.head drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng 4096 Jan 24 06:26 contrib drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng 4096 Jan 24 06:26 main drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng 4096 Jan 24 06:26 non-free drwxr-xr-x 5 apt-cacher-ng apt-cacher-ng 4096 Jan 24 06:26 non-free-firmware ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# cat InRelease.head HTTP/1.1 200 OK Content-Length: 55443 Last-Modified: Tue, 04 Feb 2025 14:32:02 GMT X-Original-Source: https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# curl --head https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease HTTP/1.1 200 OK Date: Tue, 04 Feb 2025 21:00:06 GMT Server: Apache/2.4.62 (Debian) Last-Modified: Tue, 04 Feb 2025 14:32:02 GMT ETag: "d893-62d51df5099d3" Accept-Ranges: bytes Content-Length: 55443 ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# wget -O /tmp/InRelease https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease --2025-02-04 22:01:21-- https://ftp.debian.cz/debian/dists/bookworm-updates/InRelease Resolving ftp.debian.cz (ftp.debian.cz)... 78.128.211.127, 2001:718:1:1f:50:56ff:feee:127 Connecting to ftp.debian.cz (ftp.debian.cz)|78.128.211.127|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 55443 (54K) Saving to: ‘/tmp/InRelease’ /tmp/InRelease 100%[=============================================================================>] 54.14K --.-KB/s in 0.005s 2025-02-04 22:01:21 (11.7 MB/s) - ‘/tmp/InRelease’ saved [55443/55443] ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# md5sum InRelease /tmp/InRelease 42a3992a340220eaedbe41f3ea03fb6b InRelease 1e1c8c8a3eb793e0994a5b30150cc02f /tmp/InRelease The content of both files /tmp/InRelease and InRelease from apt-cacher-ng's cache is the same, except the signature at the end. ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# gpg --verify --keyring /usr/share/keyrings/debian-archive-keyring.gpg /tmp/InRelease gpg: Signature made Tue 04 Feb 2025 03:31:25 PM CET gpg: using RSA key A7236886F3CCCAAD148A27F80E98404D386FA1D9 gpg: Good signature from "Debian Archive Automatic Signing Key (11/bullseye) <ftpmas...@debian.org>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: 1F89 983E 0081 FDE0 18F3 CC96 73A4 F27B 8DD4 7936 Subkey fingerprint: A723 6886 F3CC CAAD 148A 27F8 0E98 404D 386F A1D9 gpg: Signature made Tue 04 Feb 2025 03:31:57 PM CET gpg: using RSA key 4CB50190207B4758A3F73A796ED0E7B82643E131 gpg: Good signature from "Debian Archive Automatic Signing Key (12/bookworm) <ftpmas...@debian.org>" [unknown] gpg: WARNING: This key is not certified with a trusted signature! gpg: There is no indication that the signature belongs to the owner. Primary key fingerprint: B8B8 0B5B 623E AB6A D877 5C45 B7C5 D7D6 3509 47F8 Subkey fingerprint: 4CB5 0190 207B 4758 A3F7 3A79 6ED0 E7B8 2643 E131 ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# gpg --verify --keyring /usr/share/keyrings/debian-archive-keyring.gpg InRelease gpg: Signature made Tue 04 Feb 2025 09:19:26 AM CET gpg: using RSA key A7236886F3CCCAAD148A27F80E98404D386FA1D9 gpg: BAD signature from "Debian Archive Automatic Signing Key (11/bullseye) <ftpmas...@debian.org>" [unknown] gpg: Signature made Tue 04 Feb 2025 09:19:56 AM CET gpg: using RSA key 4CB50190207B4758A3F73A796ED0E7B82643E131 gpg: BAD signature from "Debian Archive Automatic Signing Key (12/bookworm) <ftpmas...@debian.org>" [unknown] ns1:/srv/cache/apt-cacher-ng/debrep/dists/bookworm-updates# diff -u /tmp/InRelease InRelease --- /tmp/InRelease 2025-02-04 15:32:02.000000000 +0100 +++ InRelease 2025-02-04 16:05:01.597595082 +0100 @@ -496,29 +496,29 @@ bd8fb630f74032553aa5942fc3ca546102d4a1b86dae248e2b0931170bb6a3d7 1544 non-free/source/Sources.xz -----BEGIN PGP SIGNATURE----- -iQIzBAEBCAAdFiEEpyNohvPMyq0Uiif4DphATThvodkFAmeiJL0ACgkQDphATThv -odli6Q/+PTI18TtKuTsvER3kTXgnrAoFE6RohHJQPxbN2fky51I19fTw1aipXaJ0 -/R9INFF6KVYcO8VLmPqgbZItpt7EJEUve6eqLEsiVa0QzvRRIZfF8hYoGlPc9FLF -vy2YiPqbgNo/eYvjocfvw5wywm8HKEWmPH6AIn9PU9M69vaT1atZ0+8LXDWIdV2D -xcIL7H6CE6lceD96F3+9nrn6IZFkwQlr3oJtCgO9e5TU8a55x0J2UEkje4mm4kS0 -FraRwnhRXRTrONkweQKpMQ7Dp+DUMeH7OtEfEPNo0UMbYPC+/XMJnm39vr26p5Ar -Bc4pgRgKsIeGltMetuTy4yupVifNNgYS+Tm0Vp5A8AmizKScnNhHCIfPFrDF+vzf -g6cC6Bdf1fgWBK5w7uiR4V7v8uukrORM9m2fBoNy4tY+8LRO01lyP9PdISEVSihd -fzZolCP+/13TsYzko9cFT6dRcabiQE+sa/ZuAkU6FYfMtbJ0YqpEDtiyFK+br7ad -4lPA78xaDrfOFZpqRvQr2zIT71qC+LTNEZj3WtwGhSt2YOjjEdwn7/f3ql4NBBO3 -/H5xsEk0G8cFhyrUhIeXJ1jSHPygGjaj5EVA+wM1ECGZZxMv6I8BO5+9Ly++67qd -PyzepebNAtEPUzO2XcY93Aky1hMdY6kz/zLxqmRXbyA9dQaHLHqJAjMEAQEIAB0W -IQRMtQGQIHtHWKP3Onlu0Oe4JkPhMQUCZ6Ik3QAKCRBu0Oe4JkPhMVMcEADQKd9q -TtdMsMUhvjCmYc40AXBtEgUkOurd9+M58pLuAdqCa2ApJA0DXjQlAVFM0BV95b2O -yyoyc9AhGjTSdFB2tPlp6RzIBrrOh3V1mszt99oVkGKtBx3HBa967GmfgXRaXp0e -ZDEpzfWUlNN7MxY+vNXvIbWYxUBh0R/5xfITv6Cbb8bC0mcaoIso836wHiATBkqh -iwNCyNEaXoQv1hdpJg2k7AIi9dvIGMXubkq+QhPaSVvHzZXAH/UKODubBd5U+voQ -Q2+3/PpXCcnzYq/jbtr8Yhz8tUaBinCCnYhW0j/+pHZAQQEH6wErjKMfjJa5wE7I -MlxBddsP+NMQyI07UhXk0rTulMsbZMfkrOD6FYoWESAt8OkiMMoihwBYRK/h9Mcl -Xl9tfO+u99hg31bnClPV3zazMM0NoRaBLF9xq84EjJd8K7RhbAxdaTAkud8LV4lr -vgumCLvAARSDZU8qbhaeApE91V99GSiSNGMYHRRWNZnRciOBVv3sspqkCJ91WYin -ozYKI4LKPFkYqAWBs5KNR9Llrih3ZBcxB/fugeBraFmvPQC5k5za5ONonn+ST3k/ -Rb7mjubThamBiov0IG76iGDTi18nhsdyIiZWDbOqXS+/6Vbqwsb4VgA8eiD52820 -MlYTzAPp1G8D+qK+r/1ClvfRGZYLgscv+4nltg== -=8ep+ +iQIzBAEBCAAdFiEEpyNohvPMyq0Uiif4DphATThvodkFAmehzY4ACgkQDphATThv +odlnRw//deKBlDUh+2yvG88wZ7qAVnZmvMZixtULJoQo/Wv4MQEHygsmeVyZhV9m +yKCdJIL9cpJHOwghwRtvF1n5wMFBiMMOlfnCAucrTyvMdIY+jf2VolsLmI6IfXl3 +3SAdeK0NL7V8Ll4IqSpdD0kJ6aoyV3hfOD2FH8CCv605ayUxifXXWutK34bpsfNh +QWCqiJkxax/ZihD9Qt2rZNi8W4oOtvihYZILV5NSQCzZP33i4QXnAkMSje4XRue1 +7RuBQXZA6myfdGzrdMBnc/is+81VkbgduZujfzUd94jB5/P8oI/OfcR8c9GnK9pY +0Sto6GcwP6wmvFJcYCPqZSRkFSxpqWswhMrg4web/YQV5DBU+1xIHVyoJ8TxL2nh +LwnHe8WHgsAJdCNdFWElLfXAPGGBuwOITP5lPiTgniHXl0mCO2e2Vhtxjhy/H7hI +oo7tvecT32CmvJYWFzndmWbl2ClYnmTxl9MAwKgW+sJJ6IJi2dpIzGtaNr7zMsPw +lW2bi+kaj/255HBsIIgkTx8xOSciDTDBldXOgyeZEurOu3cxDlLV06zPn3s6B98J +XUwWA2u7Cr2huwRJgC836krIIoNGGqt6qzHTcGpB1wpYZEQtephx89XWAEqZyD2y +POZBL3FdwuX7pS0RpSSjshl8w63lqnMdhMIsc4uyWin+goDIG+mJAjMEAQEIAB0W +IQRMtQGQIHtHWKP3Onlu0Oe4JkPhMQUCZ6HNrAAKCRBu0Oe4JkPhMQnqEADQQzCR +p1RngkK/1Ab1+c9nWqUvo+SZREeBHcSo1LgOUZY46hek5mCSlmdt5EUZ9CmW0I5X +y4yJn1c/8vnMYQOuBhTq0ue5j5sx7wuGTMnU4HbWM9rbLOwE35oJj7SZKc3AXVZC +4K0aczgowT0i05KP9k6YRP+OvpYptTOrmS1Oxl+ykA+MyFTrXAOedMj2L51Bwjpo +HUugPRIzY5/B+6CN9deVUp9ggdUdrmG70/vEEGyM5EmMjZBiR/Ul0aJ5NUDKzntz +bhAZ3wrdtEzqkliRTvZmfwSecUqMUbd9c1n7owA6LtOM24BaLdPOsO4fLCja8rLf +dnqKjRNq7RfnuGPTqR0kBHm3B2LQGLUS5pOvHr7kd/gQRWoafCcZrgCp/pKlqjQ4 +alXPIL5QKHvFbvIq8nKFnxAivfwkuEs5yMmU5B/zXnNl0opu9CZGKWpmIa7eM378 +pyyvD7Cde6BtRjeWndkzDoYf76gXMloKyvAhnf8OuWqWUirK8sFCvCwmJvX1Qakl +0/tKj0ShumVWuSeBwvnZa8Y4Ha11YBbiN7EZLLQf1yDifSZfBtW6v6bMqESbVMrp +WTkKRoRtHmVnb0d7X7jwfMbnzq7JbGO49IFxNFCUc8PQslmRcWaCsJwiB5oA7vP7 +wyKI29gK78fI21qOAUSbXH6W26vveDsEWT3dig== +=gvGF -----END PGP SIGNATURE----- I can delete InRelease file from cache and do an apt update from some client and the problem is for a moment solved, but after some time it is here again. :-/ I'm confused by this strange behavior. -- Zito