Expired GPG Key errorFix – not working in sid

Forum Forums News Sid Upgraders Expired GPG Key errorFix – not working in sid

  • This topic has 12 replies, 3 voices, and was last updated May 3-7:24 pm by caprea.
Viewing 13 posts - 1 through 13 (of 13 total)
  • Author
    Posts
  • #141244
    Member
    Xaver

      In my antiX sid, which I have not updated for about 6 weeks, the errorfix does not work.
      In root terminal I get this respomnse

      # apt-get update --allow-insecure-repositories && apt-get install antix-archive-keyring --allow-unauthenticated
      Get:1 https://mxlinux.mirror.iphh.net/packages/antix/sid sid InRelease [27,4 kB]
      Hit:2 https://packages.siduction.org/extra unstable InRelease   
      [...]
      Get:18 https://mxlinux.mirror.iphh.net/packages/antix/sid sid/nosystemd amd64 Contents (deb) [334 kB]
      Get:19 https://mxlinux.mirror.iphh.net/packages/antix/sid sid/nosystemd i386 Contents (deb) [330 kB]
      Hit:8 https://mirror.cedia.org.ec/linux-libre/freesh freesh InRelease          
      Fetched 8.665 kB in 2s (4.045 kB/s)                   
      Reading package lists... Done
      W: GPG error: https://mxlinux.mirror.iphh.net/packages/antix/sid sid InRelease: The following signatures were invalid: EXPKEYSIG DB36CDF3452F0C20 antiX Linux repo <repo@antixlinux.com>
      W: The repository 'https://mxlinux.mirror.iphh.net/packages/antix/sid sid InRelease' is not signed.
      N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
      N: See apt-secure(8) manpage for repository creation and user configuration details.
      Reading package lists... Done
      Building dependency tree... Done
      Reading state information... Done
      antix-archive-keyring is already the newest version (20019.5.0).

      I have installed latest antix-archive-keyring manually, but that did not help.

      #141251
      Moderator
      caprea

        I have installed latest antix-archive-keyring manually, but that did not help.

        It’s weird, what does
        apt-cache policy antix-archive-keyring
        give ? Edit: I see there’s already the output its the latest version.

        In your etc/apt/sources.list.d/antix-list do you have the suffix
        deb [signed-by=/etc/apt/keyrings/antix-archive-keyring.gpg] https://…&#8230;..andsoon
        thats one thing I could think of, I don’t have sid installed in time.

        • This reply was modified 2 months, 1 week ago by caprea.
        #141256
        Member
        Xaver
          # apt-cache policy antix-archive-keyring
          antix-archive-keyring:
            Installed: 20019.5.0
            Candidate: 20019.5.0
            Version table:
           *** 20019.5.0 500
                  500 https://mxlinux.mirror.iphh.net/packages/antix/sid sid/main amd64 Packages
                  500 https://mxlinux.mirror.iphh.net/packages/antix/sid sid/main i386 Packages
                  100 /var/lib/dpkg/status
               20015.3.14 500
                  500 https://mxlinux.mirror.iphh.net/packages/antix/sid sid/nosystemd amd64 Packages
                  500 https://mxlinux.mirror.iphh.net/packages/antix/sid sid/nosystemd i386 Packages

          No, there is no suffix [signed-by= …]

          #141258
          Moderator
          caprea

            But is the gpg error still shown during the apt update ?(sorry if i ask like an incredulous fool)

            #141259
            Member
            Xaver

              Yes – that is the problem. Update + Upgrade not possible.

              #141261
              Moderator
              Brian Masinick

                “In my antiX sid, which I have not updated for about 6 weeks, the errorfix does not work.”

                I believe that @Dave commented on this; systems that have not been updated since before the early April timeframe will have difficulties;
                Please search and read the original discussions about the Expired GPG Key error fix. There are a few caveats and some other alternatives when a system has NOT been recently updated; I do not remember offhand, so please check previously written information for the accurate answer; it’s in the forum, just don’t recall the exact post.

                --
                Brian Masinick

                #141263
                Moderator
                caprea

                  So the right key is installed and the updates give still gpg error I would guess the antix-archive-keyring is in the wrong place.

                  I just tried and set my antix to sid with your mirror and there was no problem to update

                  Just some thoughts.

                  On my system the key is installed to
                  /etc/apt/keyrings/antix-archive-keyring.gpg
                  and
                  /etc/apt/trusted.gpg.d/antix-archive-keyring.gpg

                  #141265
                  Moderator
                  Brian Masinick

                    So the right key is installed and the updates give still gpg error I would guess the antix-archive-keyring is in the wrong place.

                    I just tried and set my antix to sid with your mirror and there was no problem to update

                    Just some thoughts.

                    On my system the key is installed to
                    /etc/apt/keyrings/antix-archive-keyring.gpg
                    and
                    /etc/apt/trusted.gpg.d/antix-archive-keyring.gpg

                    Mine is correct too, but I have updated my system many times since the beginning of April;
                    there may be additional changes required if the policy is correct, the archive
                    keys are in the two locations indicated and the problem persists.

                    Make absolutely certain that the key is accurately copied to BOTH locations.
                    If there is still an issue, check the original discussion for other ways
                    to build the key correctly.

                    --
                    Brian Masinick

                    #141266
                    Member
                    Xaver

                      The suggestions by Dave did not work so far.
                      https://www.antixforum.com/forums/topic/expired-gpg-key/page/5/#post-140927

                      I have checked both locations. It is strange.
                      In /etc/apt/keyrings antix-archive-keyring.gpg has the time stamp of today, but size is 0 B.
                      In /etc/apt/trusted.gpg.d the size is 3.4 K, but the time stamp is 2022-08-20 22:16:39.

                      So both keyrings seem to be wrong.

                      Therefore I have purged antix-archive-keyring and then
                      # dpkg -i /path-to/antix-archive-keyring_20019.5.0_all.deb

                      Now apt update works without errors.
                      Thank you for your help.

                      #141268
                      Moderator
                      Brian Masinick

                        The suggestions by Dave did not work so far.
                        https://www.antixforum.com/forums/topic/expired-gpg-key/page/5/#post-140927

                        I have checked both locations. It is strange.
                        In /etc/apt/keyrings antix-archive-keyring.gpg has the time stamp of today, but size is 0 B.
                        In /etc/apt/trusted.gpg.d the size is 3.4 K, but the time stamp is 2022-08-20 22:16:39.

                        So both keyrings seem to be wrong.

                        Therefore I have purged antix-archive-keyring and then
                        # dpkg -i /path-to/antix-archive-keyring_20019.5.0_all.deb

                        Now apt update works without errors.
                        Thank you for your help.

                        Excellent; I do believe that is one of the solutions.
                        The problem was that one of the two files was empty,
                        so something else did not work, but I am happy that
                        you pursued and solved using one of the other methods.

                        --
                        Brian Masinick

                        #141269
                        Moderator
                        Brian Masinick

                          @Dave said this too, so his suggestions do work:

                          Dave wrote:

                          The option of manually downloading the above mentioned version from the repository (bookwork for example: http://repo.antixlinux.com/bookworm/pool/main/a/antix-archive-keyring/antix-archive-keyring_20019.5.0_all.deb) and using dpkg -i as root to install the package manually can also be done. This is maybe a safer way than using the above mentioned method if you trust a web browser more than apt (or find it easier to inspect). The same version of the package can be found here: http://repo.antixlinux.com/antix-archive-keyring_20019.5.0_all.deb

                          --
                          Brian Masinick

                          #141275
                          Member
                          Xaver

                            I had tried before to reinstall antix-archive-keyring – with no success.

                            The purge made the difference, because that deleted all wrong configs.

                            #141276
                            Moderator
                            caprea

                              The question remains why the configuration or installation was unusable at the first attempt.Anyway great you found a working solution.

                            Viewing 13 posts - 1 through 13 (of 13 total)
                            • You must be logged in to reply to this topic.