Hi Martin,

I'm able to confirm this on the vagrant test image. We'll look into this, but 
in the mean time--for test purposes--you can use the --force-yes option with 
apt-get to install the openxpki packages.

Best regards,

Scott



> On 30. May 2018, at 17:25, Martin Krämer <[email protected]> wrote:
> 
> Hello Everyone,
> 
> I am absolutely new to openxpki and wanted to to my first install.
> Unfortunately it seems I am doing something absolutely wrong or there is 
> something broken with the repository keys :( 
> 
> I cannot run "apt-get update" without getting the following failure:
> W: GPG error: http://packages.openxpki.org jessie InRelease: The following 
> signatures were invalid: KEYEXPIRED 1527591418 KEYEXPIRED 1527591418 
> KEYEXPIRED 1527591418 KEYEXPIRED 1527591418
> 
> Based on "apt-key list" the key should be still valid until 2018-10-26 .. :/
> pub   4096R/ABBC910B 2015-10-27 [expires: 2018-10-26]
> uid                  OpenXPKI Foundation <[email protected]>
> 
> Here more detailed output of troubleshooting / analyses I have done:
> 
> root@c0e6458188af0:~# lsb_release -a
> No LSB modules are available.
> Distributor ID:       Debian
> Description:  Debian GNU/Linux 8.10 (jessie)
> Release:      8.10
> Codename:     jessie
> root@c0e6458188af0:~# apt-get update
> Ign http://cdn-fastly.deb.debian.org jessie InRelease
> Hit http://cdn-fastly.deb.debian.org jessie/updates InRelease
> Hit http://cdn-fastly.deb.debian.org jessie-updates InRelease
> Hit http://cdn-fastly.deb.debian.org jessie-proposed-updates InRelease
> Hit http://cdn-fastly.deb.debian.org jessie Release.gpg
> Hit http://cdn-fastly.deb.debian.org jessie/updates/main amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/contrib amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/non-free amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/contrib Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/updates/main Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/updates/non-free Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie Release 
> Get:1 http://cdn-fastly.deb.debian.org jessie-updates/main amd64 
> Packages/DiffIndex [11.8 kB]
> Hit http://cdn-fastly.deb.debian.org jessie-updates/contrib amd64 Packages
> Get:2 http://cdn-fastly.deb.debian.org jessie-updates/non-free amd64 
> Packages/DiffIndex [736 B]
> Hit http://cdn-fastly.deb.debian.org jessie-updates/contrib Translation-en
> Get:3 http://cdn-fastly.deb.debian.org jessie-updates/main 
> Translation-en/DiffIndex [3,688 B]
> Get:4 http://cdn-fastly.deb.debian.org jessie-updates/non-free 
> Translation-en/DiffIndex [736 B]
> Get:5 http://cdn-fastly.deb.debian.org jessie-proposed-updates/main amd64 
> Packages/DiffIndex [27.8 kB]
> Get:6 http://cdn-fastly.deb.debian.org jessie-proposed-updates/contrib amd64 
> Packages/DiffIndex [8,392 B]
> Get:7 http://cdn-fastly.deb.debian.org jessie-proposed-updates/non-free amd64 
> Packages/DiffIndex [15.6 kB]
> Get:8 http://cdn-fastly.deb.debian.org jessie-proposed-updates/contrib 
> Translation-en/DiffIndex [8,392 B]
> Get:9 http://cdn-fastly.deb.debian.org jessie-proposed-updates/main 
> Translation-en/DiffIndex [27.8 kB]
> Get:10 http://cdn-fastly.deb.debian.org jessie-proposed-updates/non-free 
> Translation-en/DiffIndex [15.6 kB]
> Hit http://cdn-fastly.deb.debian.org jessie/main amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/contrib amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/non-free amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/contrib Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/main Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/non-free Translation-en
> Fetched 120 kB in 2s (58.6 kB/s)             
> Reading package lists... Done
> root@c0e6458188af0:~# echo "deb http://packages.openxpki.org/v2/debian/ 
> jessie release" > /etc/apt/sources.list.d/openxpki.list
> root@c0e6458188af0:~# apt-get update
> Get:1 http://packages.openxpki.org jessie InRelease [1,519 B]
> Ign http://cdn-fastly.deb.debian.org jessie InRelease
> Hit http://cdn-fastly.deb.debian.org jessie/updates InRelease
> Hit http://cdn-fastly.deb.debian.org jessie-updates InRelease
> Ign http://packages.openxpki.org jessie InRelease    
> Hit http://cdn-fastly.deb.debian.org jessie-proposed-updates InRelease   
> Hit http://cdn-fastly.deb.debian.org jessie Release.gpg                  
> Hit http://cdn-fastly.deb.debian.org jessie/updates/main amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/contrib amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/non-free amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/contrib Translation-en    
>              
> Hit http://cdn-fastly.deb.debian.org jessie/updates/main Translation-en       
>              
> Hit http://cdn-fastly.deb.debian.org jessie/updates/non-free Translation-en
> Get:2 http://packages.openxpki.org jessie/release amd64 Packages [9,398 B]
> Hit http://cdn-fastly.deb.debian.org jessie Release        
> Get:3 http://cdn-fastly.deb.debian.org jessie-updates/main amd64 
> Packages/DiffIndex [11.8 kB]
> Hit http://cdn-fastly.deb.debian.org jessie-updates/contrib amd64 Packages
> Get:4 http://cdn-fastly.deb.debian.org jessie-updates/non-free amd64 
> Packages/DiffIndex [736 B]
> Ign http://packages.openxpki.org jessie/release Translation-en_US
> Hit http://cdn-fastly.deb.debian.org jessie-updates/contrib Translation-en
> Ign http://packages.openxpki.org jessie/release Translation-en
> Get:5 http://cdn-fastly.deb.debian.org jessie-updates/main 
> Translation-en/DiffIndex [3,688 B]
> Get:6 http://cdn-fastly.deb.debian.org jessie-updates/non-free 
> Translation-en/DiffIndex [736 B]
> Get:7 http://cdn-fastly.deb.debian.org jessie-proposed-updates/main amd64 
> Packages/DiffIndex [27.8 kB]
> Get:8 http://cdn-fastly.deb.debian.org jessie-proposed-updates/contrib amd64 
> Packages/DiffIndex [8,392 B]
> Get:9 http://cdn-fastly.deb.debian.org jessie-proposed-updates/non-free amd64 
> Packages/DiffIndex [15.6 kB]
> Get:10 http://cdn-fastly.deb.debian.org jessie-proposed-updates/contrib 
> Translation-en/DiffIndex [8,392 B]
> Get:11 http://cdn-fastly.deb.debian.org jessie-proposed-updates/main 
> Translation-en/DiffIndex [27.8 kB]
> Get:12 http://cdn-fastly.deb.debian.org jessie-proposed-updates/non-free 
> Translation-en/DiffIndex [15.6 kB]
> Hit http://cdn-fastly.deb.debian.org jessie/main amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/contrib amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/non-free amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/contrib Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/main Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/non-free Translation-en
> Fetched 131 kB in 2s (63.6 kB/s)
> Reading package lists... Done
> W: GPG error: http://packages.openxpki.org jessie InRelease: The following 
> signatures couldn't be verified because the public key is not available: 
> NO_PUBKEY F4275E606FCDC826
> root@c0e6458188af0:~# apt-key adv --keyserver pool.sks-keyservers.net 
> --recv-keys F4275E606FCDC826
> Executing: gpg --ignore-time-conflict --no-options --no-default-keyring 
> --homedir /tmp/tmp.WgWu0D4jnQ --no-auto-check-trustdb --trust-model always 
> --keyring /etc/apt/trusted.gpg --primary-keyring /etc/apt/trusted.gpg 
> --keyring /etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg 
> --keyring /etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg 
> --keyring /etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg --keyring 
> /etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg --keyring 
> /etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg 
> --keyring /etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg --keyring 
> /etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg --keyring 
> /etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg --keyserver 
> pool.sks-keyservers.net --recv-keys F4275E606FCDC826
> gpg: requesting key 6FCDC826 from hkp server pool.sks-keyservers.net
> gpg: key ABBC910B: public key "OpenXPKI Foundation <[email protected]>" 
> imported
> gpg: Total number processed: 1
> gpg:               imported: 1  (RSA: 1)
> root@c0e6458188af0:~# apt-get update
> Get:1 http://packages.openxpki.org jessie InRelease [1,519 B]
> Ign http://cdn-fastly.deb.debian.org jessie InRelease
> Hit http://cdn-fastly.deb.debian.org jessie/updates InRelease
> Hit http://cdn-fastly.deb.debian.org jessie-updates InRelease
> Ign http://packages.openxpki.org jessie InRelease    
> Hit http://cdn-fastly.deb.debian.org jessie-proposed-updates InRelease   
> Ign http://packages.openxpki.org jessie/release amd64 Packages/DiffIndex 
> Hit http://cdn-fastly.deb.debian.org jessie Release.gpg                  
> Hit http://cdn-fastly.deb.debian.org jessie Release                    
> Hit http://cdn-fastly.deb.debian.org jessie/updates/main amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/contrib amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/non-free amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/updates/contrib Translation-en    
>            
> Hit http://cdn-fastly.deb.debian.org jessie/updates/main Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/updates/non-free Translation-en
> Get:2 http://cdn-fastly.deb.debian.org jessie-updates/main amd64 
> Packages/DiffIndex [11.8 kB]
> Hit http://cdn-fastly.deb.debian.org jessie-updates/contrib amd64 Packages
> Hit http://packages.openxpki.org jessie/release amd64 Packages 
> Get:3 http://cdn-fastly.deb.debian.org jessie-updates/non-free amd64 
> Packages/DiffIndex [736 B]
> Ign http://packages.openxpki.org jessie/release Translation-en_US
> Ign http://packages.openxpki.org jessie/release Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie-updates/contrib Translation-en
> Get:4 http://cdn-fastly.deb.debian.org jessie-updates/main 
> Translation-en/DiffIndex [3,688 B]
> Get:5 http://cdn-fastly.deb.debian.org jessie-updates/non-free 
> Translation-en/DiffIndex [736 B]
> Get:6 http://cdn-fastly.deb.debian.org jessie-proposed-updates/main amd64 
> Packages/DiffIndex [27.8 kB]
> Get:7 http://cdn-fastly.deb.debian.org jessie-proposed-updates/contrib amd64 
> Packages/DiffIndex [8,392 B]
> Get:8 http://cdn-fastly.deb.debian.org jessie-proposed-updates/non-free amd64 
> Packages/DiffIndex [15.6 kB]
> Get:9 http://cdn-fastly.deb.debian.org jessie-proposed-updates/contrib 
> Translation-en/DiffIndex [8,392 B]
> Get:10 http://cdn-fastly.deb.debian.org jessie-proposed-updates/main 
> Translation-en/DiffIndex [27.8 kB]
> Get:11 http://cdn-fastly.deb.debian.org jessie-proposed-updates/non-free 
> Translation-en/DiffIndex [15.6 kB]
> Hit http://cdn-fastly.deb.debian.org jessie/main amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/contrib amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/non-free amd64 Packages
> Hit http://cdn-fastly.deb.debian.org jessie/contrib Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/main Translation-en
> Hit http://cdn-fastly.deb.debian.org jessie/non-free Translation-en
> Fetched 122 kB in 2s (60.6 kB/s)             
> Reading package lists... Done
> W: GPG error: http://packages.openxpki.org jessie InRelease: The following 
> signatures were invalid: KEYEXPIRED 1527591418 KEYEXPIRED 1527591418 
> KEYEXPIRED 1527591418 KEYEXPIRED 1527591418
> root@c0e6458188af0:~# apt-key list | grep -B2 -A1 "openxpki"
> 
> pub   4096R/ABBC910B 2015-10-27 [expires: 2018-10-26]
> uid                  OpenXPKI Foundation <[email protected]>
> 
> root@c0e6458188af0:~# diff <(apt-key export F4275E606FCDC826) <(wget -qO- 
> http://packages.openxpki.org/v2/debian/Release.key)
> root@c0e6458188af0:~# date
> Wed May 30 15:23:24 UTC 2018
> root@c0e6458188af0:~# 
> 
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! 
> http://sdm.link/slashdot_______________________________________________
> OpenXPKI-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/openxpki-users







------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to