apt-get update error: NO_PUBKEY

If it doesn't relate to Debian, but you still want to share it, please do it here

apt-get update error: NO_PUBKEY

Postby csavorgn » 2017-08-23 07:39

Hi,
I'm trying to update my system but I keep getting errors. When I run "apt-get update" I get the following errors:
Code: Select all
Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease                                                                                                                                                     
Get:2 http://ftp.it.debian.org/debian buster InRelease [124 kB]                                                                                                                                                   
Get:4 https://repo.skype.com/deb stable InRelease [4,487 B]                                                                                                                                             
Get:5 http://dl.google.com/linux/chrome/deb stable Release [1,189 B]                                                                                                                                             
Get:6 http://dl.google.com/linux/chrome/deb stable Release.gpg [819 B]                                                                                                                                       
Get:3 http://security.debian.org/debian-security buster/updates InRelease [25.5 kB]                                                         
Get:7 https://www.deb-multimedia.org buster InRelease [19.9 kB]                                                                 
Err:4 https://repo.skype.com/deb stable InRelease                                                                                       
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1F3045A5DF7587C3
Err:2 http://ftp.it.debian.org/debian buster InRelease                                                                                   
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Ign:6 http://dl.google.com/linux/chrome/deb stable Release.gpg           
Err:3 http://security.debian.org/debian-security buster/updates InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
Err:7 https://www.deb-multimedia.org buster InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 5C808C2B65558117
Get:8 https://cdn-aws.deb.debian.org/debian buster InRelease [124 kB]
Err:8 https://cdn-aws.deb.debian.org/debian buster InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Reading package lists... Done
W: GPG error: https://repo.skype.com/deb stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1F3045A5DF7587C3
E: The repository 'https://repo.skype.com/deb stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.it.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: GPG error: http://dl.google.com/linux/chrome/deb stable Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1397BC53640DB551
E: The repository 'http://dl.google.com/linux/chrome/deb stable Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.debian.org/debian-security buster/updates InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
W: GPG error: https://www.deb-multimedia.org buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 5C808C2B65558117
E: The repository 'https://www.deb-multimedia.org buster InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://cdn-aws.deb.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010


My sources.list contains the following lines:
Code: Select all
deb http://ftp.it.debian.org/debian/ buster main non-free contrib
deb-src http://ftp.it.debian.org/debian/ buster main non-free contrib
deb http://security.debian.org/debian-security buster/updates main contrib non-free
deb https://deb.debian.org/debian/ buster non-free main contrib
deb-src https://security.debian.org/debian-security buster/updates main contrib non-free
deb https://www.deb-multimedia.org buster main non-free


My other sources are:
/etc/apt/sources.list.d/
├── google-chrome.list
├── google-chrome.list.save
├── skype-stable.list
└── skype-stable.list.save

google-chrome.list content:
Code: Select all
deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main


skype-stable.list content:
Code: Select all
deb [arch=amd64] https://repo.skype.com/deb stable main


I tried many methods I found on internet but none of them solves the problem. What can I do to fix it?
Thanks
Last edited by csavorgn on 2017-08-23 08:42, edited 1 time in total.
csavorgn
 
Posts: 3
Joined: 2017-08-23 07:29

Re: apt-get update error: NO_PUBKEY

Postby kedaha » 2017-08-23 08:28

Hi,
I'm not going to comment on the GPG errors but but I would advise you that, particularly, software installed from this third-party source:
Code: Select all
deb https://www.deb-multimedia.org buster main non-free

can break your system, if it has not done so already. As mentioned at DebianMultimedia/FAQ#Common_issues:
It is highly recommended to remove these unofficial packages from your system and replace them with the official ones provided by Debian instead.

The GPG errors associated with google Chrome and Skype and deb-multimedia.org, should really be discussed in off-topic because System Configuration is about Debian, and not these unofficial, third-party sources of proprietary software.
By the way, please, when you post code wrap it in code blocks so that it looks, not like this:

deb http://ftp.it.debian.org/debian/ buster main non-free contrib

but like this

Code: Select all
deb http://ftp.it.debian.org/debian/ buster main non-free contrib

specially when posting a lot of output.
May I ask you, why have you chosen to install Debian testing "Buster?"
Mate DE & OSSv4.
LaMp, WordPress; ispmail
Debian Stable & Software

Words, as is well known, are the great foes of reality. Joseph Conrad.
User avatar
kedaha
 
Posts: 2794
Joined: 2008-05-24 12:26

Re: apt-get update error: NO_PUBKEY

Postby csavorgn » 2017-08-23 09:02

I fixed the formatting in my first post. Now it should be more readable. Thanks, kedaha
Since some years I'm using Testing on my computers. I moved to testing because I needed some software which was not available in Stable.

Since my first post I removed
Code: Select all
deb https://www.deb-multimedia.org buster main non-free

and I managed to correct the problem with the Skype a Chrome repos by adding the key files in Synaptic manually.

So I'm now left only with the errors with the Debian repos:
Code: Select all
Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease
Get:2 http://dl.google.com/linux/chrome/deb stable Release [1,189 B]                                                                 
Get:5 http://dl.google.com/linux/chrome/deb stable Release.gpg [819 B]                                                                                                 
Get:3 http://security.debian.org/debian-security buster/updates InRelease [25.5 kB]                                                               
Get:4 http://ftp.it.debian.org/debian buster InRelease [124 kB]                                                                                             
Hit:6 https://repo.skype.com/deb stable InRelease                                                                                                                   
Get:7 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages [1,360 B]                                                                                     
Err:3 http://security.debian.org/debian-security buster/updates InRelease                                                                   
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
Err:4 http://ftp.it.debian.org/debian buster InRelease                                                     
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Get:8 https://cdn-aws.deb.debian.org/debian buster InRelease [124 kB]   
Err:8 https://cdn-aws.deb.debian.org/debian buster InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Fetched 276 kB in 4s (66.3 kB/s)
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.debian.org/debian-security buster/updates InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.it.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://cdn-aws.deb.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: Failed to fetch http://ftp.it.debian.org/debian/dists/buster/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: Failed to fetch http://security.debian.org/debian-security/dists/buster/updates/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
W: Failed to fetch https://deb.debian.org/debian/dists/buster/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: Some index files failed to download. They have been ignored, or old ones used instead.
csavorgn
 
Posts: 3
Joined: 2017-08-23 07:29

Re: apt-get update error: NO_PUBKEY

Postby csavorgn » 2017-08-23 09:26

I managed to fix also the problem with the 2 remaining keys. First I tried with the command:
Code: Select all
apt-key adv --keyserver keyring.debian.org --recv-keys 7638D0442B90D010

but I got the error
Code: Select all
Executing: /tmp/apt-key-gpghome.vnazRX2hMQ/gpg.1.sh --keyserver keyring.debian.org --recv-keys 7638D0442B90D010
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0

Then I tried
Code: Select all
apt-key adv --keyserver  --recv-keys 7638D0442B90D010

and got a different error
Code: Select all
Executing: /tmp/apt-key-gpghome.9P13myiXv0/gpg.1.sh --keyserver pgpkeys.mit.edu --recv-keys 7638D0442B90D010
gpg: key 7638D0442B90D010: "Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: Warning: 1 key skipped due to its large size
gpg: Warning: 1 key skipped due to its large size

Finally, I managed to install the key by running the following two commands
Code: Select all
gpg --keyserver pgpkeys.mit.edu --recv-key 7638D0442B90D010
gpg -a --export 7638D0442B90D010 >> key.txt

and adding the key in Synaptic manually.

I have two question remaining:
Why the two keys 7638D0442B90D010 and 8B48AD6246925553 are not in keyring.debian.org?
Why do I get the size error on these keys?
csavorgn
 
Posts: 3
Joined: 2017-08-23 07:29

Re: apt-get update error: NO_PUBKEY

Postby kedaha » 2017-08-23 16:02

csavorgn wrote:I fixed the formatting in my first post. Now it should be more readable.

Thanks, it's quite an improvement.
csavorgn wrote:Since some years I'm using Testing on my computers. I moved to testing because I needed some software which was not available in Stable.

I wouldn't recommend using the developmental distribution—where you might have broken packages or functionality for a few weeks and continual upgrades being written to disk—as an avenue to newer software but, since you've been using it for years, that's different.
csavorgn wrote:I have two question remaining:
Why the two keys 7638D0442B90D010 and 8B48AD6246925553 are not in keyring.debian.org?
Why do I get the size error on these keys?

Something may be awry. You may be interested to read: viewtopic.php?t=133986.
Mate DE & OSSv4.
LaMp, WordPress; ispmail
Debian Stable & Software

Words, as is well known, are the great foes of reality. Joseph Conrad.
User avatar
kedaha
 
Posts: 2794
Joined: 2008-05-24 12:26


Return to Offtopic

Who is online

Users browsing this forum: No registered users and 3 guests

fashionable