[Pdns-users] signatures were invalid: EXPKEYSIG 1B0C6205FD380FBB

[Curtis Maurand]

On 6/7/23 13:45, Djerk Geurts via Pdns-users wrote:
>
>> On 7 Jun 2023, at 17:46, Otto Moerbeek <otto at drijf.net> wrote:
>>
>> On Wed, Jun 07, 2023 at 06:03:29PM +0200, Otto Moerbeek via 
>> Pdns-users wrote:
>>
>>> On Wed, Jun 07, 2023 at 04:26:53PM +0100, Djerk Geurts via 
>>> Pdns-users wrote:
>>>
>>>> Hi all,
>>>>
>>>> Is there an issue with the Ubuntu repo? I changes a host from 
>>>> focal-auth-master to focal-auth-48 and encountering a GPG error, 
>>>> previously the GPG key had been updated but I see the normal key 
>>>> listed everywhere still.
>>>>
>>>> Err:1 http://repo.powerdns.com/ubuntu focal-auth-48 InRelease
>>>>  The following signatures were invalid: EXPKEYSIG 1B0C6205FD380FBB 
>>>> PowerDNS Release Signing Key <powerdns.support at powerdns.com>
>>>> Reading package lists... Done
>>>> W: GPG error: http://repo.powerdns.com/ubuntu focal-auth-48 
>>>> InRelease: The following signatures were invalid: EXPKEYSIG 
>>>> 1B0C6205FD380FBB PowerDNS Release Signing Key 
>>>> <powerdns.support at powerdns.com>
>>>> E: The repository 'http://repo.powerdns.com/ubuntu focal-auth-48 
>>>> InRelease' is not signed.
>>>> N: Updating from such a repository can't be done securely, and is 
>>>> therefore disabled by default.
>>>> N: See apt-secure(8) manpage for repository creation and user 
>>>> configuration details.
>>>
>>> Looks like the Release Signing Key expired.
>>
>> Confirmed. This means validation using the current key will fail,
>> although the files are still valid and not changed. We wil fix this as
>> soon as possible. It may take some time though, the right persons need
>> to be available.
>>
>> -Otto
>
> Thank you for confirming, I’ll have to delay building a couple of new 
> servers then :) Must have recently as only noticed the issue today 
> when updating a server and trying to do the same on the local 
> repository server to repoint master to 48.

It expired today.

pub   rsa4096 2015-06-09 [SC] [expired: 2023-06-07]
       9FAA A557 7E8F CF62 093D  036C 1B0C 6205 FD38 0FBB
uid           [ expired] PowerDNS Release Signing Key 
<powerdns.support at powerdns.com>


-- 
Curtis
https://curtis.maurand.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20230607/1895d53e/attachment-0001.htm>