repo.process-one.net gpg key expired 17/03/2024

[bronkoo]

Before creating a ticket, please consider if this should fit the discussion forum better.

Environment

• ejabberd version: 23.10
• Erlang version: erl +V
• OS: Linux (Ubuntu 22.04)
• Installed from: source official deb

Bug description

Trying to update from 23.10 to 24.02 and get these:

# apt update
.... W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://repo.process-one.net/deb stable InRelease: The following signatures were invalid: EXPKEYSIG 6F97DBF7353A8563 ejabberd <contact@process-one.net> W: Failed to fetch https://repo.process-one.net/deb/dists/stable/InRelease The following signatures were invalid: EXPKEYSIG 6F97DBF7353A8563 ejabberd <contact@process-one.net> W: Some index files failed to download. They have been ignored, or old ones used instead.

# apt-key list
/etc/apt/trusted.gpg.d/ejabberd.gpg
pub rsa3072 2022-03-18 [SC] [expired: 2024-03-17]
651C 08E9 330D D31D 8D7D F23A 6F97 DBF7 353A 8563
uid [ expired] ejabberd <contact@process-one.net>

Since two days expired, so we need a new one, same here:
https://repo.process-one.net/ejabberd.gpg

By the way, the upgrade tutorial https://docs.ejabberd.im/admin/upgrade/from_23.10_to_24.02/ is available but not linked here:

https://docs.ejabberd.im/admin/upgrade/#specific-version-upgrade-notes

[bestperson-free]

Not only when updating, but also when installing or updating the system. I wrote on the forum, there is also silence there
over the past few days, the key has become invalid, on different servers, when updating and installing, how can this be fixed

[ch0ccyra1n]

I suppose all that can be done for now is to hope the keyholder updates to a new key

[bronkoo]

I suppose all that can be done for now is to hope the keyholder updates to a new key

That's what the issue is for... ;-)

[mremond]

Thanks, we will have a look.

[Metalhearf]

Thank you for notifying us of this issue.

What happened

The GPG key associated with the official repository expired a few days ago.

What we did

To address this, I have deactivated the expiry on the key (see how).

Additionally, I have added a message about this expiration to the repo landing page for future reference, linking back to this issue.

How to fix

If you have already added the (now expired) key before, you should get back on tracks with:

curl -o /etc/apt/trusted.gpg.d/ejabberd.gpg https://repo.process-one.net/ejabberd.gpg
apt update
apt install ejabberd

If you encounter any other issues, feel free to notify us here.