I am using Debian wheezy and I would like to install the package apt-transport-https, which allows to access apt repositories through the https protocol.
What really puzzles me is that the apt-get gives me the following message:
$ sudo apt-get install apt-transport-https
...
The following NEW packages will be installed:
apt-transport-https
0 upgraded, 1 newly installed, 0 to remove and 14 not upgraded.
Need to get 109 kB of archives.
After this operation, 166 kB of additional disk space will be used.
WARNING: The following packages cannot be authenticated!
apt-transport-https
Install these packages without verification [y/N]?
I pressed N because I would like to clarify this before installing the package. Why is no authentication information for this package provided? I would expect this to be the default, especially for a package that provides a secure transfer protocol.
Best Answer
When running
apt-get updatefor ahttpsmirror without apt-transport-https installed, you probably invalidated your cached (sources) data, as a side effect invalidating the signatures - this should fix itself after running "apt-get update" again (you might have to revert to a non-https mirror temporarily).