
Hi all, I'm getting a signature verification error: $ sudo apt-get update Hit:1 http://mirrordirector.raspbian.org/raspbian stretch InRelease Hit:2 http://archive.raspberrypi.org/debian jessie InRelease Get:3 https://deb.torproject.org/torproject.org stretch InRelease [3528 B] Err:3 https://deb.torproject.org/torproject.org stretch InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key Fetched 3528 B in 3s (998 B/s) Reading package lists... Done W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://deb.torproject.org/torproject.org stretch InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key W: Failed to fetch https://deb.torproject.org/torproject.org/dists/stretch/InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key W: Some index files failed to download. They have been ignored, or old ones used instead. Any thoughts would be appreciated. thanks, matt

Hi Matt. This cmd could help, give it a try sudo apt-key adv --recv-keys --keyserver keys.gnupg.net YOURMISSINGKEY Best regards, volker 😊 Von: tor-relays <tor-relays-bounces@lists.torproject.org> Im Auftrag von tor Gesendet: Mittwoch, 3. Februar 2021 18:17 An: tor-relays@lists.torproject.org Betreff: [tor-relays] Sig ver error Hi all, I'm getting a signature verification error: $ sudo apt-get update Hit:1 <http://mirrordirector.raspbian.org/raspbian> http://mirrordirector.raspbian.org/raspbian stretch InRelease Hit:2 <http://archive.raspberrypi.org/debian> http://archive.raspberrypi.org/debian jessie InRelease Get:3 <https://deb.torproject.org/torproject.org> https://deb.torproject.org/torproject.org stretch InRelease [3528 B] Err:3 <https://deb.torproject.org/torproject.org> https://deb.torproject.org/torproject.org stretch InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 <http://deb.torproject.org/> deb.torproject.org archive signing key Fetched 3528 B in 3s (998 B/s) Reading package lists... Done W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: <https://deb.torproject.org/torproject.org> https://deb.torproject.org/torproject.org stretch InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 <http://deb.torproject.org/> deb.torproject.org archive signing key W: Failed to fetch <https://deb.torproject.org/torproject.org/dists/stretch/InRelease> https://deb.torproject.org/torproject.org/dists/stretch/InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 <http://deb.torproject.org/> deb.torproject.org archive signing key W: Some index files failed to download. They have been ignored, or old ones used instead. Any thoughts would be appreciated. thanks, matt

On Wed, Feb 03, 2021 at 12:17:11PM -0500, tor wrote:
I'm getting a signature verification error:
$ sudo apt-get update
Hit:1 http://mirrordirector.raspbian.org/raspbian stretch InRelease
Hit:2 http://archive.raspberrypi.org/debian jessie InRelease
Get:3 https://deb.torproject.org/torproject.org stretch InRelease [3528 B]
Err:3 https://deb.torproject.org/torproject.org stretch InRelease
The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key
Hi Matt, There are two problems here: First is that you need to re-import the deb.torproject.org signing key, because you have an old version of the key which has an expiry date in the past. You can do that by following the instructions on https://support.torproject.org/apt/tor-deb-repo/ But second is that you have distro names like jessie and stretch in your apt sources lines. Those distros are super super old: https://www.debian.org/releases/jessie/ https://www.debian.org/releases/stretch/ So you should make some plans to move to a newer distro like buster. Hope this helps, --Roger
participants (3)
-
Roger Dingledine
-
tor
-
volker.mink@gmx.de