Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

An error occurred during the signature verification. #782

Open
modem7 opened this issue Mar 11, 2024 · 16 comments
Open

An error occurred during the signature verification. #782

modem7 opened this issue Mar 11, 2024 · 16 comments
Labels

Comments

@modem7
Copy link

modem7 commented Mar 11, 2024

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

Static hostname: Netboot
       Icon name: computer-container
         Chassis: container
      Machine ID: 7b708ae53aec432d9a1a11b27b7a7891
         Boot ID: 7b48c75bb0d24266bdc908133632662b
  Virtualization: lxc
Operating System: Ubuntu 22.04.4 LTS
          Kernel: Linux 6.5.13-1-pve
    Architecture: x86-64
@modem7 modem7 added the bug label Mar 11, 2024
@pdobrien3
Copy link

I am getting similar issues with a package install:

Err:4 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_11  InRelease
  The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
/etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg
---------------------------------------------------------------
pub   rsa2048 2017-08-05 [SC] [expired: 2024-03-08]
      4919 522E 6859 A907 47C6  D97A 767B 5F35 0F20 116F
uid           [ expired] shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

i tried deleting and re-adding the key but it still says expired

@Mohamed2Sherif
Copy link

there is a similar closed issue but with the 19.04 version the solution involved using the 20.04 Key instead of the 19.04 because it was expired, projecting the same solution here i think we should use the 23.04 with 22.04 repository
any opinions ?
here is the closed issue #478

@pdobrien3
Copy link

my only issue is I use it on several different platforms (ubuntu, debian and Raspberry OS). To my knowledge, this won't be an all inclusive solution. Why has the key expired?

@marcossilvestrini
Copy link

Similar here:W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 767B5F350F20116F
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.

@That1Panda
Copy link

Similar here:W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 767B5F350F20116F E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default.

just got the same error and cant find a way to fix it either

@ARehmanMahi
Copy link

ARehmanMahi commented Mar 24, 2024

Is the project dead or are the maintainers not interested in this issue?

The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project shells:zsh-users@build.opensuse.org

@itsagift
Copy link

Also having this issue.

@Spoilage3785
Copy link

Same issue:

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

@mhqmarques
Copy link

Same issue:
Err:4 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

@jmagar
Copy link

jmagar commented Apr 1, 2024

same:
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project shells:zsh-users:zsh-completions@build.opensuse.org
E: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/xUbuntu_22.04 InRelease is not (yet) available (The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project shells:zsh-users:zsh-completions@build.opensuse.org)

@MathoAvito
Copy link

same here...
W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

@bugraahmetcaglar
Copy link

Same here too:

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed.

@geekyHat
Copy link

geekyHat commented Apr 8, 2024

Same here

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_9.0  InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_9.0  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

@johncassil
Copy link

And not only for this project, but an array of zsh-users repos:
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project <shells:zsh-users:zsh-completions@build.opensuse.org>

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

@dragonfleas
Copy link

Looks like the project maintainer needs to run the refresh_key build script located at https://build.opensuse.org/project/show/shells:zsh-users:zsh-autosuggestions

Pretty simple fix from what it looks like. @nicoulaj can you run that for us?

@ahashim
Copy link

ahashim commented May 9, 2024

@nicoulaj any chance you can run the refresh_key script to fix this?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests