Devuan bug report logs - #705
Update failed due to an invalide signature

Package: amprolla; Maintainer for amprolla is Devuan Developers <devuan-dev@lists.dyne.org>;

Reported by: Klaus Ethgen <Klaus@ethgen.de>

Date: Mon, 5 Sep 2022 07:20:01 UTC

Severity: critical

Merged with 704

Done: Mark Hindley <mark@hindley.org.uk>

Full log


Message #10 received at 705@bugs.devuan.org (full text, mbox, reply):

Received: (at 705) by bugs.devuan.org; 5 Sep 2022 07:54:17 +0000
Return-Path: <Klaus@ethgen.de>
Delivered-To: devuanbugs@dyne.org
Received: from mail.dyne.org [141.95.83.167]
	by doc.devuan.org with IMAP (fetchmail-6.4.16)
	for <debbugs@localhost> (single-drop); Mon, 05 Sep 2022 07:54:17 +0000 (UTC)
Received: from tschil.ethgen.ch (tschil.ethgen.ch [5.9.7.51])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.dyne.org (Postfix) with ESMTPS id 8DA5266189F
	for <705@bugs.devuan.org>; Mon,  5 Sep 2022 09:53:38 +0200 (CEST)
Authentication-Results: mail.dyne.org;
	dkim=pass (4096-bit key; unprotected) header.d=ethgen.de header.i=@ethgen.de header.b="C8V+L8Yl";
	dkim-atps=neutral
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ethgen.de;
	 s=mail; h=In-Reply-To:Content-Type:MIME-Version:References:Message-ID:
	Subject:To:From:Date:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
	List-Post:List-Owner:List-Archive;
	bh=j7MA/SV7RiMEj9vxe4ayiSMiOjeZh07tIwe3DjGa3gk=; b=C8V+L8YlAeJ5vNuLMW/Hhz8Cz8
	FsysSGuLB7EcGNepXOkYllkW+VuP/88a4vDdedVcjCckbMRfDfAhTelEPLqU40c3/9oZ0jXocgpww
	iKI0DVG2DnfArpuz60q5vZX/z7K0Kw1TRKUOADXW3ovqJ3028sLa8/etXSeG4bGuhgQi6y7BVk8xy
	NBqBSxMN5fAsT9FIAUgAzTOWZ+r4JUppVXLvFtBhzlhIdCb6n7iRCvZmXeJXwO0j4uT39koWTrKFr
	+73i8yTIKjrKWdmcWDEw0pF+4h4PQQqFWbDKelXOg7nP1c/hDSY6fCjQxDNbLpvxgpTA9Uw/UiYUR
	LHQHNqrm+mvoppGKG16oDqxnFNLotPeIdhImNKqIt8lw03AwbXHg4sCNy9XprmoiEU8mUcBAYlWSM
	kHVkajYe8ZglF5uXg0H5g8VRnrBQ6dQzNDaOgga85XAtz+eDjAk8nMGuqhfVChLSk6jnkeKiAGLoU
	tc2b4ml2Ibi59LXUJU1BGVqHDGm7KIOwqYQTK8mDCaqrC+8+xrWiKNdZXtuVgWEVZufxaE4uNHCMM
	klgAez/gcYy/Uqc2W0ZUS3589jqRJvdoAl9MLDxKhHFl2M9MLmBDYog9hMquWd9Wfuut9SvYitJ0k
	nf4nM9DIu9UMnKteDEJX74KJvjOWDFv3swvNSdaBs=;
Received: from [192.168.17.4] (helo=ikki.ket)
	by tschil.ethgen.ch with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <Klaus@ethgen.de>)
	id 1oV6vJ-0006Vj-Nk
	for 705@bugs.devuan.org; Mon, 05 Sep 2022 07:53:37 +0000
Received: from klaus by ikki.ket with local (Exim 4.96)
	(envelope-from <Klaus@ethgen.de>)
	id 1oV6vJ-000394-1m
	for 705@bugs.devuan.org;
	Mon, 05 Sep 2022 09:53:37 +0200
Date: Mon, 5 Sep 2022 08:53:37 +0100
From: Klaus Ethgen <Klaus@ethgen.de>
To: 705@bugs.devuan.org
Subject: Re: bug#705: Acknowledgement (Update failed due to an invalide
 signature)
Message-ID: <YxWrAZF+oHdmvQHa@ikki.ethgen.ch>
References: <YxWi7GN6UjFhvWaG@ikki.ethgen.ch>
 <handler.705.B.166236237917527.ack@bugs.devuan.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="AmbheHW7gqPkZBkd"
Content-Disposition: inline
In-Reply-To: <handler.705.B.166236237917527.ack@bugs.devuan.org>
OpenPGP: id=79D0B06F4E20AF1C;
 url=http://www.ethgen.ch/~klaus/79D0B06F4E20AF1C.txt; preference=signencrypt
X-Spam-Status: No, score=-2.5 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
	DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_MED,SPF_PASS,URIBL_BLOCKED
	autolearn=disabled version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on mail.dyne.org
[Message part 1 (text/plain, inline)]
Hi,

The reason seems to be that the key is expired.

The mitigation might be difficult. But you might have the way to do so.
Just sign the repository with the key
72E3CB773315DFA2E464743D94532124541922FB instead of
E032601B7CA10BC3EA53FA81BB23C00C61FC752C.

72E3CB773315DFA2E464743D94532124541922FB is in
/etc/apt/trusted.gpg.d/devuan-keyring-2016-archive.gpg and never expire.

After some months, just create a new key which never expire or expire
far in the future and use that for the repository.

Regards
   Klaus
-- 
Klaus Ethgen                                       http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16            Klaus Ethgen <Klaus@Ethgen.ch>
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


Devuan BTS -- Powered by Debian bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.

Devuan Bugs Owner <owner@bugs.devuan.org>.
Last modified: Mon Apr 29 00:55:44 2024;