Author Topic: Invalid signature (Read 4850 times)

jyp · « **on:** 2021/09/16, 20:46:47 »

Suddenly happened after du a few hours ago; first ever event of this kind from using siduction as long as it existed.

jyp# apt update
Hit:1 http://deb.debian.org/debian unstable InRelease
Hit:2 https://packages.siduction.org/fixes unstable InRelease
Err:2 https://packages.siduction.org/fixes unstable InRelease
  The following signatures were invalid: EXPKEYSIG 15CBD88045C45076 Siduction Repository (The Siduction Repository) <repository@siduction.org>
Hit:3 http://ftp.uni-stuttgart.de/siduction/extra unstable InRelease
Err:3 http://ftp.uni-stuttgart.de/siduction/extra unstable InRelease
  The following signatures were invalid: EXPKEYSIG 15CBD88045C45076 Siduction Repository (The Siduction Repository) <repository@siduction.org>
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
All packages are up to date.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://packages.siduction.org/fixes unstable InRelease: The following signatures were invalid: EXPKEYSIG 15CBD88045C45076 Siduction Repository (The Siduction Repository) <repository@siduction.org>
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.uni-stuttgart.de/siduction/extra unstable InRelease: The following signatures were invalid: EXPKEYSIG 15CBD88045C45076 Siduction Repository (The Siduction Repository) <repository@siduction.org>
W: Failed to fetch http://ftp.uni-stuttgart.de/siduction/extra/dists/unstable/InRelease  The following signatures were invalid: EXPKEYSIG 15CBD88045C45076 Siduction Repository (The Siduction Repository) <repository@siduction.org>
W: Failed to fetch https://packages.siduction.org/fixes/dists/unstable/InRelease  The following signatures were invalid: EXPKEYSIG 15CBD88045C45076 Siduction Repository (The Siduction Repository) <repository@siduction.org>
W: Some index files failed to download. They have been ignored, or old ones used instead.

I suppose that we have to wait a bit.
Thanks

Balou · « **Reply #1 on:** 2021/09/16, 20:58:33 »

Hi

I can confirm the error. Same Problem

Balou

der_bud · « **Reply #2 on:** 2021/09/16, 21:29:17 »

The GPG key of the repo expired today. It's being worked on. Patience

Balou · « **Reply #3 on:** 2021/09/16, 21:47:27 »

as always good work thank you very much

Balou

der_bud · « **Reply #4 on:** 2021/09/17, 08:43:46 »

After 10 years, the siduction repo GPG key suddenly expired yesterday. Most of us would need a workaround to get the updated siduction-archive-keyring. There seem two ways so far, either manually getting and installing the .deb or telling apt to trust the 'unsecure' repo once, both as root:

Nach 10 Jahren ist gestern plötzlich der GPG-Key vom Repo abgelaufen. Die meisten werden wohl eine der beiden folgenden Lösungen ausprobieren müssen, um das aktualisierte Paket siduction-archive-keyring zu erhalten, entweder .deb herunterladen und manuell installieren oder apt einmalig das 'unsichere' repo erlauben:

1) wget and install

Code: [Select]

wget https://packages.siduction.org/extra/pool/main/s/siduction-archive-keyring/siduction-archive-keyring_2021.09.16_all.deb && apt install ./siduction-archive-keyring_2021.09.16_all.deb

2) apt allow insecure

Code: [Select]

rm /var/lib/apt/lists/packages.siduction.org_* && apt -o Acquire::AllowInsecureRepositories=true update && apt install siduction-archive-keyring

(confirm with y)

Both are not well tested yet, VOLUNTEERS, PLEASE TEST THIS

and confirm here
Edit: ^^ 10 hours later both ways are reported to work ^^

Geier0815 · « **Reply #5 on:** 2021/09/17, 09:07:57 »

Code: [Select]

wget https://packages.siduction.org/extra/pool/main/s/siduction-archive-keyring/siduction-archive-keyring_2021.09.16_all.deb && apt install ./siduction-archive-keyring_2021.09.16_all.deb

works. apt update runs without error and a dist-upgrade brought me a new kernel. Thanks!

Code: [Select]

wget https://packages.siduction.org/extra/pool/main/s/siduction-archive-keyring/siduction-archive-keyring_2021.09.16_all.deb && apt install ./siduction-archive-keyring_2021.09.16_all.deb

funktioniert. apt update lief ohne Fehlermeldungen durch und ein dist-upgrade brachte mir einen neuen Kernel. Danke!

hendrikL · « **Reply #6 on:** 2021/09/17, 09:12:20 »

Quote

2) apt allow insecure

works too / funktioniert auch

unklarer · « **Reply #7 on:** 2021/09/17, 09:24:30 »

Quote from: der_bud

1) wget and install

done / ok auch hier

pjnsmb · « **Reply #8 on:** 2021/09/17, 09:38:12 »

all good with me too

thanks as always

Balou · « **Reply #9 on:** 2021/09/17, 09:41:52 »

1) wget and install

done, alles okay

danke

Balou

thebluesman · « **Reply #10 on:** 2021/09/17, 16:31:00 »

Quote

1) wget and install

funzt.

ajavibp · « **Reply #11 on:** 2021/09/17, 18:07:55 »

Working again. Thanks!

jyp · « **Reply #12 on:** 2021/09/17, 18:28:48 »

A few minutes ago, I got a serious warning after running <apt update>

Code: [Select]

jyp# apt update
Reading package lists... Done
E: Could not get lock /var/lib/apt/lists/lock. It is held by process 1325 (packagekitd)
N: Be aware that removing the lock file is not a solution and may break your system.
E: Unable to lock directory /var/lib/apt/lists/

But after applying the suggested cure (wget + install) everything ran smoothly.

Thanks a lot again for the outstanding work.
jyp

brutor · « **Reply #13 on:** 2021/09/17, 21:49:34 »

wget and install runs fine

GoinEasy9 · « **Reply #14 on:** 2021/09/19, 07:52:04 »

It seems the install iso's are failing due to the same problem. It's listing out errors trying to reach siduction repos. I tried to wget and then install, that didn't help. Any suggestions?