[tor-talk] Expired key for deb.torproject.org?

Jonathan Marquardt mail at parckwart.de
Wed Nov 25 06:54:39 UTC 2020


I am using the Debian Tor repo on quite a few Debian machines and since a few 
days now, none of these machines are able to use the repo.

"apt update" gives me: 

Err:6 tor+http://sdscoq7snqtznauu.onion/torproject.org buster InRelease
  The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key

Why does it say that the key has expired?

$ gpg -k 74A941BA219EC810
pub   rsa2048/EE8CBC9E886DDD89 2009-09-04 [SC] [expires: 2022-08-05]
      A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89
uid                 [  full  ] deb.torproject.org archive signing key

The key is valid until 2022 and I already made sure that APT is using exactly 
that key by running "gpg --export 74A941BA219EC810 | sudo apt-key add -".

Can someone tell me what's going on?
-- 
OpenPGP Key: 47BC7DE83D462E8BED18AA861224DBD299A4F5F3
             https://www.parckwart.de/pgp_key
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20201125/cb4c41f0/attachment.sig>


More information about the tor-talk mailing list