[tor-relays] EXPKEYSIG when running 'apt update'

[wurstsemmel at mailbox.org]

Hi,

same here on 2 VPS with Ubuntu 22.04 (jammy).

Err:5 https://deb.torproject.org/torproject.org jammy InRelease
  The following signatures were invalid: EXPKEYSIG 74A941BA219EC810
deb.torproject.org archive signing key

I followed [1] and executed the following command:

# wget -qO-
https://deb.torproject.org/torproject.org/A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89.asc
| gpg --dearmor | tee /usr/share/keyrings/tor-archive-keyring.gpg
>/dev/null

I thought that the package deb.torproject.org-keyring should keep the
signing key up-to-date, however the package was installed and is the
newest version (unattended-upgrades activated for TorProject
repository).

# apt install deb.torproject.org-keyring 
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
deb.torproject.org-keyring is already the newest version
(2022.04.27.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

[1] https://support.torproject.org/apt/tor-deb-repo/

Regards,

wurstsemmel


-------- Ursprüngliche Nachricht --------
Von: Imre Jonk <imre at imrejonk.nl>
Antwort an: tor-relays at lists.torproject.org
An: tor-relays at lists.torproject.org
Betreff: [tor-relays] EXPKEYSIG when running 'apt update'
Datum: Mon, 13 Jun 2022 19:11:32 +0200

Hi tor-relays,

I'm getting this error when running 'apt update':

Err:4 https://deb.torproject.org/torproject.org bullseye InRelease
  The following signatures were invalid: EXPKEYSIG 74A941BA219EC810
deb.torproject.org archive signing key

The signing key in
/etc/apt/trusted.gpg.d/deb.torproject.org-keyring.gpg does not appear
to be expired, so I guess some repository metadata signature has
expired. Does anyone else encounter this issue?

Thanks,

Imre
_______________________________________________
tor-relays mailing list
tor-relays at lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays