Public keys expired for Ubuntu repositories

[qgib]

Author Name: Michael Corey (Michael Corey)
Original Redmine Issue: 8482
Affected QGIS version: master
Redmine category:build/install

---

The Ubuntu download directions (https://issues.qgis.org/projects/quantum-gis/wiki/Download) say to use the following repository keys:

gpg --keyserver keyserver.ubuntu.com --recv 997D3880
gpg --export --armor 997D3880 | sudo apt-key add -

However, I receive the following error when running apt-get update:

W: GPG error: http://qgis.org raring Release: The following signatures were invalid: KEYEXPIRED 1376750759 KEYEXPIRED 1376750759 KEYEXPIRED 1376750759

---

Related issue(s): #15535 (duplicates)
Redmine related issue(s): 6224

---

[qgib]

Author Name: Jürgen Fischer (@jef-n)

---

• status_id was changed from Open to Closed
• resolution was changed from to fixed

[qgib]

Author Name: Michael Corey (Michael Corey)

---

I'm not sure what was changed behind the scenes, but I'm still getting the same error when following the directions here:

https://issues.qgis.org/projects/quantum-gis/wiki/Download

W: GPG error: http://qgis.org raring Release: The following signatures were invalid: KEYEXPIRED 1376750759 KEYEXPIRED 1376750759 KEYEXPIRED 1376750759

So does something need to be updated on that site to reference the correct key?

My problems are with the raring package, if that helps.

---

• status_id was changed from Closed to Reopened

[qgib]

Author Name: Mathew Topper (Mathew Topper)

---

I have the same problem with the debian wheezy Release repository.

I've imported the new key, but for some reason the repository isn't looking for it.

#: gpg --list-key

/root/.gnupg/pubring.gpg

pub 1024R/47765B75 2013-08-18 [expires: 2014-08-18]
uid Quantum GIS Archive Automatic Signing Key (2013) qgis-developer@lists.osgeo.org
sub 1024R/9F75DFEC 2013-08-18 [expires: 2014-08-18]

pub 1024D/997D3880 2012-08-17 [expired: 2013-08-17]
uid Quantum GIS Archive Automatic Signing Key (2012) qgis-developer@lists.osgeo.org

#: apt-get update

...

Fetched 198 B in 4s (41 B/s)
Reading package lists... Done
W: GPG error: http://qgis.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1376750759 KEYEXPIRED 1376750759 KEYEXPIRED 1376750759

[qgib]

Author Name: Jürgen Fischer (@jef-n)

---

Mathew Topper wrote:

I have the same problem with the debian wheezy Release repository.

I've imported the new key, but for some reason the repository isn't looking for it.

The release packages weren't changed yet. The nightly builds use the new key.

[qgib]

Author Name: Jürgen Fischer (@jef-n)

---

• status_id was changed from Reopened to Closed

[qgib]

Author Name: Erik Timmers (Erik Timmers)

---

This issue has returned on Debian/Ubuntu.

http://qgis.org/en/site/forusers/alldownloads.html still mentions the expired 2013 key. The 2014 key is unknown to me.

-- Erik

Edit: looks like this is a duplicate of #15535.

---

• status_id was changed from Closed to Reopened

[qgib]

Author Name: Jürgen Fischer (@jef-n)

---

• status_id was changed from Reopened to Closed