Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

An error occurred during the signature verification. #782

Open
modem7 opened this issue Mar 11, 2024 · 25 comments
Open

An error occurred during the signature verification. #782

modem7 opened this issue Mar 11, 2024 · 25 comments
Labels

Comments

@modem7
Copy link

modem7 commented Mar 11, 2024

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>

Static hostname: Netboot
       Icon name: computer-container
         Chassis: container
      Machine ID: 7b708ae53aec432d9a1a11b27b7a7891
         Boot ID: 7b48c75bb0d24266bdc908133632662b
  Virtualization: lxc
Operating System: Ubuntu 22.04.4 LTS
          Kernel: Linux 6.5.13-1-pve
    Architecture: x86-64
@modem7 modem7 added the bug label Mar 11, 2024
@pdobrien3
Copy link

I am getting similar issues with a package install:

Err:4 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_11  InRelease
  The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>
/etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg
---------------------------------------------------------------
pub   rsa2048 2017-08-05 [SC] [expired: 2024-03-08]
      4919 522E 6859 A907 47C6  D97A 767B 5F35 0F20 116F
uid           [ expired] shells:zsh-users OBS Project <shells:[email protected]>

i tried deleting and re-adding the key but it still says expired

@Mohamed2Sherif
Copy link

there is a similar closed issue but with the 19.04 version the solution involved using the 20.04 Key instead of the 19.04 because it was expired, projecting the same solution here i think we should use the 23.04 with 22.04 repository
any opinions ?
here is the closed issue #478

@pdobrien3
Copy link

my only issue is I use it on several different platforms (ubuntu, debian and Raspberry OS). To my knowledge, this won't be an all inclusive solution. Why has the key expired?

@marcossilvestrini
Copy link

Similar here:W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 767B5F350F20116F
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.

@That1Panda
Copy link

Similar here:W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 767B5F350F20116F E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default.

just got the same error and cant find a way to fix it either

@ARehmanMahi
Copy link

ARehmanMahi commented Mar 24, 2024

Is the project dead or are the maintainers not interested in this issue?

The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project shells:[email protected]

@itsagift
Copy link

Also having this issue.

@Spoilage3785
Copy link

Same issue:

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

@mhqmarques
Copy link

Same issue:
Err:4 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>

@jmagar
Copy link

jmagar commented Apr 1, 2024

same:
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project shells:zsh-users:[email protected]
E: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/xUbuntu_22.04 InRelease is not (yet) available (The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project shells:zsh-users:[email protected])

@MathoAvito
Copy link

same here...
W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

@bugraahmetcaglar
Copy link

Same here too:

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed.

@geekyHat
Copy link

geekyHat commented Apr 8, 2024

Same here

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_9.0  InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_9.0  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

@johncassil
Copy link

And not only for this project, but an array of zsh-users repos:
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project <shells:zsh-users:[email protected]>

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>

@dragonfleas
Copy link

Looks like the project maintainer needs to run the refresh_key build script located at https://build.opensuse.org/project/show/shells:zsh-users:zsh-autosuggestions

Pretty simple fix from what it looks like. @nicoulaj can you run that for us?

@ahashim
Copy link

ahashim commented May 9, 2024

@nicoulaj any chance you can run the refresh_key script to fix this?

@AxoyTO
Copy link

AxoyTO commented Jun 2, 2024

Same issue ++

@Mohamed2Sherif
Copy link

I don't know if this work but did someone try to add the debian repository ?

@jmerritt
Copy link

chiming in also having this issue here.

@tempewda
Copy link

i encounter this error when trying sudo apt update in WSL 2

Hit:1 http://security.ubuntu.com/ubuntu jammy-security InRelease
Get:2 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease [1579 B]
Hit:3 http://archive.ubuntu.com/ubuntu jammy InRelease
Err:2 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease
  The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>
Hit:4 https://ppa.launchpadcontent.net/git-core/ppa/ubuntu jammy InRelease
Hit:5 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:6 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Get:7 https://repo.fig.io/apt stable InRelease [2438 B]
Reading package lists... Done
W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:[email protected]>
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

@nck974
Copy link

nck974 commented Jul 8, 2024

It is not a solution to the problem. But if you wanted to try it to see if you like it you can follow this:
https://gist.github.com/dogrocker/1efb8fd9427779c827058f873b94df95

@davidysoards
Copy link

same issue. can't update to ubuntu 24 because of it.

@mikocevar
Copy link

same issue. can't update to ubuntu 24 because of it.

Remove the repository.

@muddermanden
Copy link

muddermanden commented Aug 13, 2024

You can get the new signing key (expires 2026-05-04) from https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys
You can download the key from the page or simply run this command:
wget -qO- https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys/download\?kind\=gpg | sudo apt-key add -

Edit: and you probably have to delete the expired key first using sudo apt-key del 767B5F350F20116F

@ahashim
Copy link

ahashim commented Aug 13, 2024

You can get the new signing key (expires 2026-05-04) from https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys You can download the key from the page or simply run this command: wget -qO- https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys/download\?kind\=gpg | sudo apt-key add -

Edit: and you probably have to delete the expired key first using sudo apt-key del 767B5F350F20116F

If using gpg instead:

sudo rm /etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg # may be named differently depending on installation method
wget -qO- https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys/download\?kind\=gpg | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg
sudo apt update

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests