Repository Keys expired today

joker · August 25, 2018, 3:42pm

Starting today, the Debian Repository Key of the Owncloud Repository expired. My setup is according to this manual: https://download.owncloud.org/download/repositories/stable/owncloud/index.html

To check the expiration date I used this command:

$ wget -q https://download.owncloud.org/download/repositories/production/Debian_9.0/Release.key -O - | gpg -
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
      DDA2C105C4B73A6649AD2BBD47AE7F72479BC94B
uid           ownCloud build service <obsrun@localhost>
sub   rsa2048 2013-08-26 [E] [expired: 2018-08-25]
sub   dsa2048 2013-08-26 [S] [expired: 2018-08-25]
sub   elg2048 2013-08-26 [E] [expired: 2018-08-25]

Please extend the key or provide a new one and notify us here in the thread, that we can fix this issue on our server.

Thank You!

mdweinberg · August 25, 2018, 4:38pm

Same is true with the Ubuntu repositories, it seems, since it is the same key.

joker · August 25, 2018, 5:37pm

Seems like this is the case for alle repos:

$ for distro in CentOS_7 Debian_8.0 Debian_9.0 Fedora_26 Fedora_27 Fedora_28 RHEL_7 SLE_12 SLE_12_SP1 SLE_12_SP2 SLE_15 Ubuntu_16.04 Ubuntu_17.10 Ubuntu_18.04 Univention_4.0 openSUSE_Leap_15.0 openSUSE_Leap_42.3 openSUSE_Tumbleweed owncloud xUbuntu_16.04 xUbuntu_17.10 xUbuntu_18.04; do echo $distro; wget -q https://download.owncloud.org/download/repositories/production/$distro/repodata/repomd.xml.key -O - | gpg - | grep "^pub" || wget -q https://download.owncloud.org/download/repositories/production/$distro/Release.key -O - | gpg - | grep "^pub"; done 2>/dev/null
CentOS_7
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Debian_8.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Debian_9.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Fedora_26
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Fedora_27
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Fedora_28
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
RHEL_7
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12_SP1
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12_SP2
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_15
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Ubuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Ubuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Ubuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
Univention_4.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Leap_15.0
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Leap_42.3
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Tumbleweed
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
owncloud
xUbuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
xUbuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
xUbuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]

anon21401411 · August 26, 2018, 9:04am

Hey,

seems some one has now reported this to the ownCloud team at:

rickglyn · August 26, 2018, 10:47am

Thanks for this useful way to check the keys and your request.

I’m on Debian 8.0 and I spent far too long troubleshooting apt-get update yesterday till I realised my system was not at fault and that there wasn’t an unexpired owncloud key available.

joker · August 27, 2018, 12:36pm

Seems to work again (thanks to this Github comment for mentioning).

$ for distro in CentOS_7 Debian_8.0 Debian_9.0 Fedora_26 Fedora_27 Fedora_28 RHEL_7 SLE_12 SLE_12_SP1 SLE_12_SP2 SLE_15 Ubuntu_16.04 Ubuntu_17.10 Ubuntu_18.04 Univention_4.0 openSUSE_Leap_15.0 openSUSE_Leap_42.3 openSUSE_Tumbleweed owncloud xUbuntu_16.04 xUbuntu_17.10 xUbuntu_18.04; do echo $distro; wget -q https://download.owncloud.org/download/repositories/production/$distro/repodata/repomd.xml.key -O - | gpg - | grep "^pub" || wget -q https://download.owncloud.org/download/repositories/production/$distro/Release.key -O - | gpg - | grep "^pub"; done 2>/dev/null
CentOS_7
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Debian_8.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Debian_9.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Fedora_26
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Fedora_27
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Fedora_28
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
RHEL_7
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
SLE_12
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
SLE_12_SP1
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_12_SP2
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
SLE_15
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Ubuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Ubuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Ubuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
Univention_4.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
openSUSE_Leap_15.0
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
openSUSE_Leap_42.3
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
openSUSE_Tumbleweed
pub   rsa2048 2013-08-26 [SC] [expired: 2018-08-25]
owncloud
xUbuntu_16.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
xUbuntu_17.10
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
xUbuntu_18.04
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]

markus1 · September 7, 2018, 8:16am

Hi, I try to upgrade owncloud 8.1 to 8.2 on Debian8.0 but it seems that the keys are expired too…

Using https://attic.owncloud.com/org/download/repositories/8.2/owncloud/ I get a key which expired on 2018-08-25

Can you fix this please?

anon21401411 · September 7, 2018, 9:56am

@markus1 Hey, i have found the following statement:

OBS master key expired a week ago…supported repositories were fixed accordingly… 9.x repositories are permanently frozen and locked…nothing there will be fixed, rebuilt or otherwise change… you have to use the workaround suggested as this won’t be fixed, you really have to upgrade to 10.x branch.
Cheers.

in:

github.com/owncloud/core

apt key expired for Debian 8

opened 02:39PM - 30 Aug 18 UTC

closed 01:14PM - 04 Sep 18 UTC

dcaillibaud

packaging

### Steps to reproduce with the repo (in /etc/apt/sources.list.d/owncloud.list)… ``` deb http://download.owncloud.org/download/repositories/9.1/Debian_8.0/ / ``` `apt-key list` show ``` pub 2048R/479BC94B 2013-08-26 [expired: 2018-08-25] uid ownCloud build service <obsrun@localhost> ``` then ``` apt-key del 479BC94B apt-get update ``` => ``` W: GPG error: http://download.owncloud.org Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 47AE7F72479BC94B ``` `apt-key adv --keyserver pgpkeys.mit.edu --recv 47AE7F72479BC94B` => ``` gpg: requesting key 479BC94B from hkp server pgpkeys.mit.edu gpg: key 479BC94B: public key "ownCloud build service <obsrun@localhost>" imported gpg: Total number processed: 1 gpg: imported: 1 (RSA: 1) ``` and `apt-get update` => ``` W: GPG error: http://download.owncloud.org Release: The following signatures were invalid: KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163644 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163442 KEYEXPIRED 1535163644 ``` ### Expected behaviour apt-get update should update ### Actual behaviour see above ### Server configuration **Operating system**: debian8 **ownCloud version:** (see ownCloud admin page) 9.1

raltodagne · September 20, 2018, 8:03am

Even in the ubunta my keys are showing expired too thou they are still valid, don’t really knows whats wrong.

With Regards,
Ralto

deftoner1 · October 17, 2018, 7:06pm

Today I have the same error in my 2 servers, different locations different isp, etc. There is any known solution for this? thanks

deftoner1 · October 17, 2018, 7:14pm

Sims to be related to a OS upgrade to 18.04. I followed the install guid to install the key again and the new repositories for ubuntu 18.

scottbomb · July 6, 2019, 6:01pm

Hello, this has happened again. Running apt update I get:

Failed to fetch http://download.owncloud.org/download/repositories/production/Ubuntu_18.04/Release.gpg The following signatures were invalid: …

I don’t see how this was fixed before. Is this something that gets fixed automatically at ownCloud?

Jarl_Balgruuf · July 7, 2019, 8:43pm

I had made a thread regarding not being able to update OwnCloud because of the repository not being trusted. I have a feeling this is what’s causing my issues as well.

eneubauer · July 8, 2019, 7:20am

Sorry, I’m not able to reproduce the error you’re getting.
If I take a fresh Ubuntu 18.04 installation, I have no error messages regarding the keys.

Are you able to run the command apt-key list and paste the output here?
This is what the output looks like on my machine:

root@2091f32a7c61:/# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2013-08-26 [SC] [expires: 2023-08-23]
      DDA2 C105 C4B7 3A66 49AD  2BBD 47AE 7F72 479B C94B
uid           [ unknown] ownCloud build service <obsrun@localhost>
sub   rsa2048 2013-08-26 [E] [expires: 2023-08-23]
sub   dsa2048 2013-08-26 [S] [expires: 2023-08-23]

Jarl_Balgruuf · July 8, 2019, 2:46pm

Thanks for the reply. Here is the output of the apt-key list command.

Capture

eneubauer · July 8, 2019, 3:01pm

Can you try to re run your key import command, it seems that one of the repositories wasn’t configured correctly but I hear this issue has been fixed.
Cheers,
Erik