Bad signature with Debian 10

[Lewis_Resmond]

Hello,

I have a Debian 10 with installed owncloud 10.7 .
Since over a week I get an error in aptitude and can’t update to owncloud 10.8.
What can I do?

This is the error message:

Ign https://download.owncloud.org/download/repositories/stable/Debian_10  Release.gpg
W: GPG-Fehler: https://download.owncloud.org/download/repositories/stable/Debian_10  Release: Die folgenden Signaturen waren ungültig: DDA2C105C4B73A6649AD2BBD47AE7F72479BC94B
E: Das Depot »https://download.owncloud.org/download/repositories/stable/Debian_10  Release« ist nicht signiert.
E: Failed to download some files

Here is what I have done trying to fix the issue:

apt-key del "DDA2 C105 C4B7 3A66 49AD  2BBD 47AE 7F72 479B C94B"
curl -fsSL https://download.owncloud.org/download/repositories/production/Debian_10/Release.key | gpg --dearmor > /etc/apt/trusted.gpg.d/owncloud.gpg
echo "deb https://download.owncloud.org/download/repositories/stable/Debian_10/" / > "/etc/apt/sources.list.d/owncloud.list"

Here is the output of apt-key list:

/etc/apt/trusted.gpg.d/owncloud.gpg
-----------------------------------
pub   rsa2048 2013-08-26 [SC] [verfällt: 2023-08-23]
      DDA2 C105 C4B7 3A66 49AD  2BBD 47AE 7F72 479B C94B
uid        [ unbekannt ] ownCloud build service <obsrun@localhost>
sub   rsa2048 2013-08-26 [E] [verfällt: 2023-08-23]
sub   dsa2048 2013-08-26 [S] [verfällt: 2023-08-23]

The hints here Debian 10 BADSIG apt error - #2 by jnweiger did not help; I don’t understand what OBS is. I removed all *.list files and replaced them with the script above. I removed all owncloud signatures from gpg and imported them from scratch. But there is still the error.

Thank you for your help!

[LinkP]

OBS is the OpenSUSE Build Service. It automates package creation from source code.

You may want to revisit the article you linked to, because I just used it to fix the exact same situation you are reporting.

You also have a typo in your repo creation echo statement above. You have a space and a forward slash outside of the first set of double quotes that should be within them. That wouldn’t cause your error, though, so I encourage dumping your old repo and keyring files and using the method in the other article.

The gpg key fingerprint from the OBS repo will be 1B07204CD71B690D409F57D24ABE1AC7557BEFF9