Signing Key Expired

Support
1

Problem:

The signing key for the apt package has expired:

W: GPG error: http://deb.theforeman.org focal InRelease: The following signatures were invalid: EXPKEYSIG 0BDDA991FD7AAC8A Foreman Automatic Signing Key (2021) <packages@theforeman.org>
E: The repository 'http://deb.theforeman.org focal InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: http://deb.theforeman.org plugins InRelease: The following signatures were invalid: EXPKEYSIG 0BDDA991FD7AAC8A Foreman Automatic Signing Key (2021) <packages@theforeman.org>
E: The repository 'http://deb.theforeman.org plugins InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

cat /etc/apt/trusted.gpg.d/foreman.asc | gpg --show-keys
pub   rsa4096 2021-07-23 [SCEA] [expired: 2023-07-23]
      5B7C3E5A735BCB4D615829DC0BDDA991FD7AAC8A
uid                      Foreman Automatic Signing Key (2021) <packages@theforeman.org>

Expected outcome:

The key should be updated

2 Likes
2

Confirmed, please update key!

root@puppet-172-10-30-11:/etc/apt# wget https://deb.theforeman.org/foreman.asc -O /etc/apt/trusted.gpg.d/foreman.asc
--2023-07-24 21:59:33--  https://deb.theforeman.org/foreman.asc
Resolving deb.theforeman.org (deb.theforeman.org)... 146.75.118.49, 2a04:4e42:8e::561
Connecting to deb.theforeman.org (deb.theforeman.org)|146.75.118.49|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2495 (2.4K) [text/plain]
Saving to: ‘/etc/apt/trusted.gpg.d/foreman.asc’

/etc/apt/trusted.gpg.d/foreman.asc 100%[=============================================================>]   2.44K  --.-KB/s    in 0s

2023-07-24 21:59:33 (40.5 MB/s) - ‘/etc/apt/trusted.gpg.d/foreman.asc’ saved [2495/2495]

root@puppet-172-10-30-11:/etc/apt# cat /etc/apt/trusted.gpg.d/foreman.asc | gpg --show-keys
gpg: directory '/root/.gnupg' created
gpg: keybox '/root/.gnupg/pubring.kbx' created
pub   rsa4096 2021-07-23 [SCEA] [expired: 2023-07-23]
      5B7C3E5A735BCB4D615829DC0BDDA991FD7AAC8A
uid                      Foreman Automatic Signing Key (2021) <packages@theforeman.org>
1 Like
3

This has been fixed since Jul 25, 12:08 PM

$ curl -s https://deb.theforeman.org/foreman.asc | gpg --show-keys
gpg: WARNING: unsafe ownership on homedir '/home/andpaul/.gnupg'
pub   rsa4096 2021-07-23 [SCEA] [expires: 2025-07-24]
      5B7C3E5A735BCB4D615829DC0BDDA991FD7AAC8A
uid                      Foreman Automatic Signing Key (2021) <packages@theforeman.org>