Subject: bug#705 closed by Mark Hindley <[email-masked]> (Re: bug#705: Update failed due to an invalide signature)

From: "Devuan bug Tracking System" <[email-masked]>
Date: Fri, 09 Sep 2022 17:16:03 +0000

This is an automatic notification regarding your bug report
which was filed against the amprolla package:

#705: Update failed due to an invalide signature

It has been closed by Mark Hindley <[email-masked]>.

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Mark Hindley <[email-masked]> by
replying to this email.

-- 
705: https://bugs.devuan.org/cgi/bugreport.cgi?bug=705
Devuan Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#705: Update failed due to an invalide signature
From: Mark Hindley <[email-masked]>
To: Klaus Ethgen <[email-masked]>, [email-masked]
Date: Fri, 9 Sep 2022 18:14:39 +0100

On Fri, Sep 09, 2022 at 06:05:38PM +0100, Mark Hindley wrote:
> Thanks. The key used by amprolla has now been changed and upgrades are working
> normally again.

Closing as resolved.

Thanks

Mark

Subject: Update failed due to an invalide signature
From: Klaus Ethgen <[email-masked]>
To: Devuan Bug Tracking System <[email-masked]>
Date: Mon, 5 Sep 2022 08:19:08 +0100

Package: devuan
Severity: critical

Today the update failed with the following error:
   Holen:13 http://deb.devuan.org/merged ceres InRelease [33,9 kB]
   Fehl:13 http://deb.devuan.org/merged ceres InRelease
     Die folgenden Signaturen waren ungültig: EXPKEYSIG BB23C00C61FC752C Devuan Repository (Amprolla3 on Nemesis) <[email-masked]>
   ...
   W: Während der Überprüfung der Signatur trat ein Fehler auf. Das Depot wurde nicht aktualisiert und die vorherigen Indexdateien werden verwendet. GPG-Fehler: http://deb.devuan.org/merged ceres InRelease: Die folgenden Signaturen waren ungültig: EXPKEYSIG BB23C00C61FC752C Devuan Repository (Amprolla3 on Nemesis) <[email-masked]>
   W: Fehlschlag beim Holen von http://deb.devuan.org/merged/dists/ceres/InRelease Die folgenden Signaturen waren ungültig: EXPKEYSIG BB23C00C61FC752C Devuan Repository (Amprolla3 on Nemesis) <[email-masked]>

So, the whole update is broken!

-- System Information:
Distributor ID:	Devuan
Description:	Devuan GNU/Linux 5 (daedalus/ceres)
Release:	5
Codename:	daedalus ceres
Architecture: x86_64

Kernel: Linux 5.16.17 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Gruß
   Klaus
-- 
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <[email-masked]>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C