Went to do a test upgrade this morning and had apt reject the repositories.Checked the key : Just in case, searched the keyserver web interface for the most recent (only listed) matching key :
So unless I've made a massive blunder, the key expired yesterday.
Key originally installed from here : https://wiki.zimbra.com/wiki/Zimbra_Col ... repository
Code:
The following signatures were invalid: EXPKEYSIG 5234D2B73B6996C7 Zimbra Packaging Services <packaging-devel@zimbra.com>Code:
fred:~$ gpg --no-default-keyring --keyring /tmp/zimbra.gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 9BE6ED79gpg: key D5CEF8BF9BE6ED79: "Zimbra Packaging Services <packaging-devel@zimbra.com>" not changedgpg: Total number processed: 1gpg: unchanged: 1fred:~$ gpg --no-default-keyring --keyring /tmp/zimbra.gpg --export 9BE6ED79 > /tmp/zimbra.keyfred:~$ gpg --show-keys /tmp/zimbra.key pub rsa4096 2015-03-19 [SC] 254F9170B966D193D6BAD300D5CEF8BF9BE6ED79uid Zimbra Packaging Services <packaging-devel@zimbra.com>sub rsa4096 2015-03-19 [S] [expired: 2025-03-16]sub rsa4096 2015-03-19 [E]Code:
pub (4)rsa4096/254f9170b966d193d6bad300d5cef8bf9be6ed79 2015-03-19T19:30:54Zuid Zimbra Packaging Services <packaging-devel@zimbra.com>sig cert d5cef8bf9be6ed79 2015-03-19T19:30:54Z ____________________ ____________________ [selfsig]sub (4)rsa4096/e4702eebff806710eb4124825234d2b73b6996c7 2015-03-19T19:35:44Zsig sbind d5cef8bf9be6ed79 2015-03-19T19:35:44Z ____________________ 2025-03-16T19:35:44Z []sub (4)rsa4096/0ba4f945237e8051fd45b7c2a4f052c4a0612d01 2015-03-19T19:30:54Zsig sbind d5cef8bf9be6ed79 2015-03-19T19:30:54Z ____________________ ____________________ []Key originally installed from here : https://wiki.zimbra.com/wiki/Zimbra_Col ... repository
Code:
gpg --list-keys --keyring /etc/apt/trusted.gpg.d/zimbra.gpg 2>/dev/null | grep -w 254F9170B966D193D6BAD300D5CEF8BF9BE6ED79 >/dev/null if [ $? -ne 0 ]; then echo "Importing Zimbra GPG key" gpg --no-default-keyring --keyring /tmp/zimbra.gpg --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 9BE6ED79 >/dev/null if [ $? -ne 0 ]; then echo "ERROR: Unable to retrive Zimbra GPG key for package validation" exit 1 else gpg --no-default-keyring --keyring /tmp/zimbra.gpg --export > /etc/apt/trusted.gpg.d/zimbra.gpg if [ $? -ne 0 ]; then echo "ERROR: Unable to export Zimbra GPG key for package validation" exit 1 else rm -f /tmp/zimbra.gpg fi fi fiStatistics: Posted by BradC — Mon Mar 17, 2025 3:33 am