Repository Keys expired today

Server
#1

Starting today, the Debian Repository Key of the Owncloud Repository expired. My setup is according to this manual: https://download.owncloud.org/download/repositories/stable/owncloud/index.html

To check the expiration date I used this command:

$ wget -q https://download.owncloud.org/download/repositories/production/Debian_9.0/Release.key -O - | gpg -
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
      DDA2C105C4B73A6649AD2BBD47AE7F72479BC94B
uid           ownCloud build service <obsrun@localhost>
sub   rsa2048 2013-08-26 [E] [expired: 2018-08-25]
sub   dsa2048 2013-08-26 [S] [expired: 2018-08-25]
sub   elg2048 2013-08-26 [E] [expired: 2018-08-25]

Please extend the key or provide a new one and notify us here in the thread, that we can fix this issue on our server.

Thank You!

The following signatures were invalid: KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163644 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPI RED 1535163644 KEYEXPIRED 1535163442
#2

Same is true with the Ubuntu repositories, it seems, since it is the same key.

#3

Seems like this is the case for alle repos:

$ for distro in CentOS_7 Debian_8.0 Debian_9.0 Fedora_26 Fedora_27 Fedora_28 RHEL_7 SLE_12 SLE_12_SP1 SLE_12_SP2 SLE_15 Ubuntu_16.04 Ubuntu_17.10 Ubuntu_18.04 Univention_4.0 openSUSE_Leap_15.0 openSUSE_Leap_42.3 openSUSE_Tumbleweed owncloud xUbuntu_16.04 xUbuntu_17.10 xUbuntu_18.04; do echo $distro; wget -q https://download.owncloud.org/download/repositories/production/$distro/repodata/repomd.xml.key -O - | gpg - | grep "^pub" || wget -q https://download.owncloud.org/download/repositories/production/$distro/Release.key -O - | gpg - | grep "^pub"; done 2>/dev/null
CentOS_7
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Debian_8.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Debian_9.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Fedora_26
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Fedora_27
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Fedora_28
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
RHEL_7
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12_SP1
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12_SP2
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_15
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Ubuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Ubuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Ubuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Univention_4.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Leap_15.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Leap_42.3
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Tumbleweed
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
owncloud
xUbuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
xUbuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
xUbuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
#4

Hey,

seems some one has now reported this to the ownCloud team at:

#5

Thanks for this useful way to check the keys and your request.

I’m on Debian 8.0 and I spent far too long troubleshooting apt-get update yesterday till I realised my system was not at fault and that there wasn’t an unexpired owncloud key available.

#6

Seems to work again (thanks to this Github comment for mentioning).

$ for distro in CentOS_7 Debian_8.0 Debian_9.0 Fedora_26 Fedora_27 Fedora_28 RHEL_7 SLE_12 SLE_12_SP1 SLE_12_SP2 SLE_15 Ubuntu_16.04 Ubuntu_17.10 Ubuntu_18.04 Univention_4.0 openSUSE_Leap_15.0 openSUSE_Leap_42.3 openSUSE_Tumbleweed owncloud xUbuntu_16.04 xUbuntu_17.10 xUbuntu_18.04; do echo $distro; wget -q https://download.owncloud.org/download/repositories/production/$distro/repodata/repomd.xml.key -O - | gpg - | grep "^pub" || wget -q https://download.owncloud.org/download/repositories/production/$distro/Release.key -O - | gpg - | grep "^pub"; done 2>/dev/null
CentOS_7
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Debian_8.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Debian_9.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Fedora_26
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Fedora_27
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Fedora_28
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
RHEL_7
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
SLE_12
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
SLE_12_SP1
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12_SP2
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_15
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Ubuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Ubuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Ubuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Univention_4.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
openSUSE_Leap_15.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
openSUSE_Leap_42.3
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Tumbleweed
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
owncloud
xUbuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
xUbuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
xUbuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
2 Likes
#7

Hi, I try to upgrade owncloud 8.1 to 8.2 on Debian8.0 but it seems that the keys are expired too…

Using https://attic.owncloud.com/org/download/repositories/8.2/owncloud/ I get a key which expired on 2018-08-25

Can you fix this please?

#8

@markus1 Hey, i have found the following statement:

OBS master key expired a week ago…supported repositories were fixed accordingly… 9.x repositories are permanently frozen and locked…nothing there will be fixed, rebuilt or otherwise change… you have to use the workaround suggested as this won’t be fixed, you really have to upgrade to 10.x branch.
Cheers.

in:

GPG apt key expired for 9.1 on Ubuntu 16.04
Signature verification failed error on openSUSE repository
#9

Even in the ubunta my keys are showing expired too thou they are still valid, don’t really knows whats wrong.

With Regards,
Ralto

#10

Today I have the same error in my 2 servers, different locations different isp, etc. There is any known solution for this? thanks

Need help upgrading from 9.1.6 to 10.0.x
#11

Sims to be related to a OS upgrade to 18.04. I followed the install guid to install the key again and the new repositories for ubuntu 18.

#12

Hello, this has happened again. Running apt update I get:

Failed to fetch http://download.owncloud.org/download/repositories/production/Ubuntu_18.04/Release.gpg The following signatures were invalid: …

I don’t see how this was fixed before. Is this something that gets fixed automatically at ownCloud?

#13

I had made a thread regarding not being able to update OwnCloud because of the repository not being trusted. I have a feeling this is what’s causing my issues as well.

#14

Sorry, I’m not able to reproduce the error you’re getting.
If I take a fresh Ubuntu 18.04 installation, I have no error messages regarding the keys.

Are you able to run the command apt-key list and paste the output here?
This is what the output looks like on my machine:

root@2091f32a7c61:/# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
      DDA2 C105 C4B7 3A66 49AD  2BBD 47AE 7F72 479B C94B
uid           [ unknown] ownCloud build service <obsrun@localhost>
sub   rsa2048 2013-08-26 [E] [expires: 2023-08-23]
sub   dsa2048 2013-08-26 [S] [expires: 2023-08-23]
#15

Thanks for the reply. Here is the output of the apt-key list command.

Capture

#16

Can you try to re run your key import command, it seems that one of the repositories wasn’t configured correctly but I hear this issue has been fixed.
Cheers,
Erik

1 Like