D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

[LUG] Expired apt-get keys

 
Hello Folks!

Yes - I am still alive! (have not posted here in yonks). I hope you are all well :-)

So, I have an old version of debian on a fairly modern laptop.

roly@Nemisis:~/fixingApt-Get$ cat /etc/debian_version
6.0.3

I was trying to install a package and got the following messages when I did apt-get update...


W: A error occurred during the signature verification. The repository
is not updated and the previous index files will be used. GPG error:
http://mozilla.debian.net squeeze-backports Release: The following
signatures were invalid: KEYEXPIRED 1321788755

W: A error occurred during the signature verification. The repository
is not updated and the previous index files will be used. GPG error:
http://backports.debian.org squeeze-backports Release: The following
signatures couldn't be verified because the public key is not
available: NO_PUBKEY 8B48AD6246925553

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/Release.gpg Could not
resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en_GB.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en_GB.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
http://mozilla.debian.net/dists/squeeze-backports/Release

W: Failed to fetch
http://backports.debian.org/debian-backports/dists/squeeze-backports/Release

W: Some index files failed to download, they have been ignored, or old
ones used instead.




After seeing these warning messages I attempted to carry on regardless and install the package I wanted. apt-get install failed with a bunch of other error messages (which I now cannot reproduce).

Did a bit of googling:-

http://lists.alioth.debian.org/pipermail/pkg-mozilla-maintainers/2011-November/011554.html

and tried to update the local keyring with a new key (nb. I dont fully understand what i'm writing here!)

root@Nemisis:/home/roly# apt-key list
/etc/apt/trusted.gpg
--------------------
pubÂÂ 1024D/F42584E6 2008-04-06 [expired: 2012-05-15]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Lenny Stable Release Key <debian-release@xxxxxxxxxxxxxxxx>

pubÂÂ 4096R/55BE302B 2009-01-27 [expired: 2012-12-31]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@xxxxxxxxxx>

pubÂÂ 2048R/6D849617 2009-01-24 [expired: 2013-01-23]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian-Volatile Archive Automatic Signing Key (5.0/lenny)

pubÂÂ 4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Squeeze Stable Release Key <debian-release@xxxxxxxxxxxxxxxx>

pubÂÂ 4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@xxxxxxxxxx>

pubÂÂ 1024D/1F41B907 1999-10-03
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Christian Marillat <marillat@xxxxxxxxxx>
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Christian Marillat <marillat@xxxxxxx>
subÂÂ 1536g/C28DCC42 1999-10-03
subÂÂ 1024D/5D3877A7 2002-08-26

pubÂÂ 4096R/06C4AE2A 2010-11-20 [expires: 2019-11-13]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian Mozilla team APT archive <pkg-mozilla-maintainers@xxxxxxxxxxxxxxxxxxxxxxx>


I then tried apt-key update. This made no difference. Identical warning messages and unable to install new packages.

I then used apt-key add to add the key found at mozilla.debian.net/archive.asc

I am now able to install packages and the software appears to work as anticipated. However, when performing an apt-get update I still get the following warning messages. It appears expired keys are no longer a problem...


W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://backports.debian.org squeeze-backports Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/Release.gpg Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en_GB.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en_GB.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch http://backports.debian.org/debian-backports/dists/squeeze-backports/ReleaseÂ

W: Failed to fetch http://mozilla.debian.net/dists/squeeze-backports/Release Unable to find expected entry iceweasel-release/binary-i386/Packages in Meta-index file (malformed Release file?)

W: Some index files failed to download, they have been ignored, or old ones used instead.


I was intending to use the dist-upgrade method to upgrade the entire system, which is why i figured it wise to sort these warnings before making such an attempt. Perhaps this is not the best way of upgrading however?

Thanks in advance for any help/adivce.
Best wishes
Roly :-)
-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq