Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Signature expired - preventing access to repo #562

Open
coderbec opened this issue Jan 21, 2023 · 7 comments
Open

Signature expired - preventing access to repo #562

coderbec opened this issue Jan 21, 2023 · 7 comments

Comments

@coderbec
Copy link

Description
Trying to install on rpi and hitting a snag when trying to set up access to Mariner repo.

Firslty getting a warning on sudo apt-key add that apt-key is deprecated so I switched this this command:
curl -sL gpg.l9o.dev | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/mariner3d.gpg

However, the signature itself is I think expired:
GPG error: https://ppa.l9o.dev/raspbian ./ InRelease: The following signatures were invalid: EXPKEYSIG BF6F8043AC280E02 Luiz Ribeiro <luizribeiro@gmail.com>

Reproduction Steps
Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected Behavior
A clear and concise description of what you expected to happen.

Screenshots / Logs
If applicable, attach screenshots or logs to help explain your problem.
Reading package lists... Done Building dependency tree... Done Reading state information... Done E: Unable to locate package mariner3d

Details:

  • Mariner Version: [e.g. 0.2.0 - use apt show mariner3d to check]
  • Printer Model: [e.g. Elegoo Mars Pro]
  • Raspberry Pi Model: [e.g. RPi Zero W]

pi 3B - Raspbian GNU/Linux 11 (bullseye)

Additional context
Add any other context about the problem here.

@mdbijl
Copy link

mdbijl commented Jan 21, 2023

Yep same here. 🙏 Expired 2023-01-20

pi@elegoo:/etc/apt/sources.list.d $ sudo apt-key list

/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2012-04-01 [SC]
      A0DA 38D0 D76E 8B5D 6388  7281 9165 938D 90FD DD2E
uid           [ unknown] Mike Thompson (Raspberry Pi Debian armhf ARMv6+VFP) <mpthompson@gmail.com>
sub   rsa2048 2012-04-01 [E]

pub   rsa2048 2012-06-17 [SC]
      CF8A 1AF5 02A2 AA2D 763B  AE7E 82B1 2992 7FA3 303E
uid           [ unknown] Raspberry Pi Archive Signing Key
sub   rsa2048 2012-06-17 [E]

pub   rsa4096 2019-11-23 [C] [expired: 2023-01-20]
      97A0 AE5E 03F3 499B 7D7A  65C6 76A4 1432 37EF 5817
uid           [ expired] Luiz Ribeiro <luizribeiro@gmail.com>

@mdbijl
Copy link

mdbijl commented Jan 21, 2023

For people who want to continue anyway (highly discouraged, yadayadayada...):

edit /etc/apt/sources.list.d/l9o.list by adding [trusted=yes]

deb [trusted=yes] https://ppa.l9o.dev/raspbian ./

@felenna
Copy link

felenna commented Mar 30, 2023

any other way to get this working because stil expired

@MarkGyver-source
Copy link

You have to add the key:
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02

@freq-geek32
Copy link

freq-geek32 commented May 11, 2023

I have dug thru alot of the documentation, I found this thread, after adding the key, I still cant seem to get access to the repository either. Looks like the key has expired.

@MarkGyver-source
Copy link

MarkGyver-source commented May 11, 2023

I have dug thru alot of the documentation, I found this thread, after adding the key, I still cant seem to get access to the repository either. Looks like the key has expired.

For me it is working:

`pi@elegoo: $ curl -sL gpg.l9o.dev | sudo apt-key add -
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
gpg: no valid OpenPGP data found.
pi@elegoo: $ echo "deb https://ppa.l9o.dev/raspbian ./" | sudo tee /etc/apt/sources.list.d/l9o.list
deb https://ppa.l9o.dev/raspbian ./

pi@elegoo: $ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
Executing: /tmp/apt-key-gpghome.1bB3M5P8V0/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02
gpg: key 76A4143237EF5817: public key "Luiz Ribeiro luizribeiro@gmail.com" imported
gpg: Total number processed: 1
gpg: imported: 1

pi@elegoo: $ sudo apt update
Get:1 http://raspbian.raspberrypi.org/raspbian bullseye InRelease [15.0 kB]
Hit:2 http://archive.raspberrypi.org/debian bullseye InRelease
Get:3 https://ppa.l9o.dev/raspbian ./ InRelease [2,119 B]
Get:4 https://ppa.l9o.dev/raspbian ./ Packages [529 B]
Fetched 17.6 kB in 3s (6,079 B/s)
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
1 package can be upgraded. Run 'apt list --upgradable' to see it.`

@jbohanon
Copy link

jbohanon commented Nov 9, 2023

Looks like https://gpg.l9o.dev/ is no longer up. However, the key can still be added directly from the keyserver. I got @MarkGyver-source's process working and have copied it here for a bit better readability

echo "deb https://ppa.l9o.dev/raspbian ./" | sudo tee /etc/apt/sources.list.d/l9o.list
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02
sudo apt update && sudo apt install -y mariner3d

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

6 participants