simple instructions to the expiredkey issue, pls.?

Hi, I know I should have sorted this some weeks ago but can anyone tell me a simple method of dealing with the: bullseye InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key issue, please? Thanks.

Hi Check out https://support.torproject.org/apt/tor-deb-repo/ , the path to gpg keys you have to put in /etc/apt/sources.list.d/tor.list has changed and is now /usr/share/keyrings/deb.torproject.org-keyring.gpg . regards, trinity-1686a On Tue, 3 Sept 2024 at 10:25, code9n via tor-relays <tor-relays@lists.torproject.org> wrote:
Hi,
I know I should have sorted this some weeks ago but can anyone tell me a simple method of dealing with the:
bullseye InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key
issue, please?
Thanks. _______________________________________________ tor-relays mailing list tor-relays@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

On Montag, 2. September 2024 19:01:16 CEST code9n via tor-relays wrote:
I know I should have sorted this some weeks ago but can anyone tell me a simple method of dealing with the:
As root, one line: wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
bullseye InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key issue, please?
Further information: https://lists.torproject.org/pipermail/tor-relays/2024-July/021739.html -- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!

Hi... Uhmmm shouldn't we exactly the opposite change your quote : wget -qO-https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --dearmor | tee /usr/share/keyrings/*tor*-archive-keyring.gpg >/dev/null to ************************************************************** echo 'deb [signed-by=/usr/share/keyrings/deb.tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main' >> /usr/share/keyrings/deb.torproject.org-keyring.gpg echo 'deb-src [signed-by=/usr/share/keyrings/deb.tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main' >> /usr/share/keyrings/deb.torproject.org-keyring.gpg wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --dearmor | tee /usr/share/keyrings/deb.torproject.org-keyring.gpg
/dev/null sudo apt-key adv --recv-keys --keyserver keys.gnupg.net 74A941BA219EC810
************************************************************* Carlos. On 9/3/24 2:32 PM, boldsuck via tor-relays wrote:
wget -qO-https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88... | gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg >/dev/null
-- PGP updated every second week : please actualize our communication every time.

On Freitag, 6. September 2024 08:47:14 CEST eff_03675549@posteo.se wrote: OK, looks like TorProject (Gus) renamed the key and resolved tor-archive-keyring.gpg vs. deb.torproject.org-keyring.gpg mismatch. https://gitlab.torproject.org/tpo/web/support/-/issues/368 Then I can update my sources list over the next 2 years and the deb.torproject.org-keyring package will update the key. My old expired key was called: tor-archive-keyring.gpg and I had to extend it.
Hi...
Uhmmm shouldn't we exactly the opposite change
your quote :
wget -qO-https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CB C9E886DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/*tor*-archive-keyring.gpg >/dev/null
to
**************************************************************
echo 'deb [signed-by=/usr/share/keyrings/deb.tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main' >> /usr/share/keyrings/deb.torproject.org-keyring.gpg echo 'deb-src [signed-by=/usr/share/keyrings/deb.tor-archive-keyring.gpg] https://deb.torproject.org/torproject.org bookworm main' >> /usr/share/keyrings/deb.torproject.org-keyring.gpg wget -qO- https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E88 6DDD89.asc | gpg --dearmor | tee /usr/share/keyrings/deb.torproject.org-keyring.gpg |
/dev/null
sudo apt-key adv --recv-keys --keyserver keys.gnupg.net 74A941BA219EC810 apt-key is deprecated since about 2 Debian generations! Since bookworm, even 'apt-key del' no longer exists.
-- ╰_╯ Ciao Marco! Debian GNU/Linux It's free software and it gives you freedom!
participants (4)
-
boldsuck
-
code9n@pm.me
-
eff_03675549@posteo.se
-
trinity pointard