Hi all,
I'm getting a signature verification error:
$ sudo apt-get update
Hit:1 http://mirrordirector.raspbian.org/raspbian stretch InRelease
Hit:2 http://archive.raspberrypi.org/debian jessie InRelease
Get:3 https://deb.torproject.org/torproject.org stretch InRelease [3528 B]
Err:3 https://deb.torproject.org/torproject.org stretch InRelease
The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key
Fetched 3528 B in 3s (998 B/s)
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://deb.torproject.org/torproject.org stretch InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key
W: Failed to fetch https://deb.torproject.org/torproject.org/dists/stretch/InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key
W: Some index files failed to download. They have been ignored, or old ones used instead.
Any thoughts would be appreciated.
thanks,
matt
Hi Matt.
This cmd could help, give it a try
sudo apt-key adv --recv-keys --keyserver keys.gnupg.net YOURMISSINGKEY
Best regards,
volker 😊
Von: tor-relays tor-relays-bounces@lists.torproject.org Im Auftrag von tor Gesendet: Mittwoch, 3. Februar 2021 18:17 An: tor-relays@lists.torproject.org Betreff: [tor-relays] Sig ver error
Hi all,
I'm getting a signature verification error:
$ sudo apt-get update
Hit:1 http://mirrordirector.raspbian.org/raspbian http://mirrordirector.raspbian.org/raspbian stretch InRelease
Hit:2 http://archive.raspberrypi.org/debian http://archive.raspberrypi.org/debian jessie InRelease
Get:3 https://deb.torproject.org/torproject.org https://deb.torproject.org/torproject.org stretch InRelease [3528 B]
Err:3 https://deb.torproject.org/torproject.org https://deb.torproject.org/torproject.org stretch InRelease
The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 http://deb.torproject.org/ deb.torproject.org archive signing key
Fetched 3528 B in 3s (998 B/s)
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://deb.torproject.org/torproject.org https://deb.torproject.org/torproject.org stretch InRelease: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 http://deb.torproject.org/ deb.torproject.org archive signing key
W: Failed to fetch https://deb.torproject.org/torproject.org/dists/stretch/InRelease https://deb.torproject.org/torproject.org/dists/stretch/InRelease The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 http://deb.torproject.org/ deb.torproject.org archive signing key
W: Some index files failed to download. They have been ignored, or old ones used instead.
Any thoughts would be appreciated.
thanks,
matt
On Wed, Feb 03, 2021 at 12:17:11PM -0500, tor wrote:
I'm getting a signature verification error:
$ sudo apt-get update
Hit:1 http://mirrordirector.raspbian.org/raspbian stretch InRelease
Hit:2 http://archive.raspberrypi.org/debian jessie InRelease
Get:3 https://deb.torproject.org/torproject.org stretch InRelease [3528 B]
Err:3 https://deb.torproject.org/torproject.org stretch InRelease
The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key
Hi Matt,
There are two problems here:
First is that you need to re-import the deb.torproject.org signing key, because you have an old version of the key which has an expiry date in the past. You can do that by following the instructions on https://support.torproject.org/apt/tor-deb-repo/
But second is that you have distro names like jessie and stretch in your apt sources lines. Those distros are super super old: https://www.debian.org/releases/jessie/ https://www.debian.org/releases/stretch/ So you should make some plans to move to a newer distro like buster.
Hope this helps, --Roger
tor-relays@lists.torproject.org