Page 1 of 1

apt-get update error: NO_PUBKEY

Posted: 2017-08-23 07:39
by csavorgn
Hi,
I'm trying to update my system but I keep getting errors. When I run "apt-get update" I get the following errors:

Code: Select all

Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease                                                                                                                                                      
Get:2 http://ftp.it.debian.org/debian buster InRelease [124 kB]                                                                                                                                                   
Get:4 https://repo.skype.com/deb stable InRelease [4,487 B]                                                                                                                                              
Get:5 http://dl.google.com/linux/chrome/deb stable Release [1,189 B]                                                                                                                                              
Get:6 http://dl.google.com/linux/chrome/deb stable Release.gpg [819 B]                                                                                                                                        
Get:3 http://security.debian.org/debian-security buster/updates InRelease [25.5 kB]                                                         
Get:7 https://www.deb-multimedia.org buster InRelease [19.9 kB]                                                                  
Err:4 https://repo.skype.com/deb stable InRelease                                                                                        
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1F3045A5DF7587C3
Err:2 http://ftp.it.debian.org/debian buster InRelease                                                                                   
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Ign:6 http://dl.google.com/linux/chrome/deb stable Release.gpg           
Err:3 http://security.debian.org/debian-security buster/updates InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
Err:7 https://www.deb-multimedia.org buster InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 5C808C2B65558117
Get:8 https://cdn-aws.deb.debian.org/debian buster InRelease [124 kB]
Err:8 https://cdn-aws.deb.debian.org/debian buster InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Reading package lists... Done
W: GPG error: https://repo.skype.com/deb stable InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1F3045A5DF7587C3
E: The repository 'https://repo.skype.com/deb stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.it.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: GPG error: http://dl.google.com/linux/chrome/deb stable Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 1397BC53640DB551
E: The repository 'http://dl.google.com/linux/chrome/deb stable Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.debian.org/debian-security buster/updates InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
W: GPG error: https://www.deb-multimedia.org buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 5C808C2B65558117
E: The repository 'https://www.deb-multimedia.org buster InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://cdn-aws.deb.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
My sources.list contains the following lines:

Code: Select all

deb http://ftp.it.debian.org/debian/ buster main non-free contrib
deb-src http://ftp.it.debian.org/debian/ buster main non-free contrib
deb http://security.debian.org/debian-security buster/updates main contrib non-free
deb https://deb.debian.org/debian/ buster non-free main contrib
deb-src https://security.debian.org/debian-security buster/updates main contrib non-free
deb https://www.deb-multimedia.org buster main non-free
My other sources are:
/etc/apt/sources.list.d/
├── google-chrome.list
├── google-chrome.list.save
├── skype-stable.list
└── skype-stable.list.save

google-chrome.list content:

Code: Select all

deb [arch=amd64] http://dl.google.com/linux/chrome/deb/ stable main
skype-stable.list content:

Code: Select all

deb [arch=amd64] https://repo.skype.com/deb stable main
I tried many methods I found on internet but none of them solves the problem. What can I do to fix it?
Thanks

Re: apt-get update error: NO_PUBKEY

Posted: 2017-08-23 08:28
by kedaha
Hi,
I'm not going to comment on the GPG errors but but I would advise you that, particularly, software installed from this third-party source:

Code: Select all

deb https://www.deb-multimedia.org buster main non-free
can break your system, if it has not done so already. As mentioned at DebianMultimedia/FAQ#Common_issues:
It is highly recommended to remove these unofficial packages from your system and replace them with the official ones provided by Debian instead.
The GPG errors associated with google Chrome and Skype and deb-multimedia.org, should really be discussed in off-topic because System Configuration is about Debian, and not these unofficial, third-party sources of proprietary software.
By the way, please, when you post code wrap it in code blocks so that it looks, not like this:

deb http://ftp.it.debian.org/debian/ buster main non-free contrib

but like this

Code: Select all

deb http://ftp.it.debian.org/debian/ buster main non-free contrib
specially when posting a lot of output.
May I ask you, why have you chosen to install Debian testing "Buster?"

Re: apt-get update error: NO_PUBKEY

Posted: 2017-08-23 09:02
by csavorgn
I fixed the formatting in my first post. Now it should be more readable. Thanks, kedaha
Since some years I'm using Testing on my computers. I moved to testing because I needed some software which was not available in Stable.

Since my first post I removed

Code: Select all

deb https://www.deb-multimedia.org buster main non-free
and I managed to correct the problem with the Skype a Chrome repos by adding the key files in Synaptic manually.

So I'm now left only with the errors with the Debian repos:

Code: Select all

Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease
Get:2 http://dl.google.com/linux/chrome/deb stable Release [1,189 B]                                                                  
Get:5 http://dl.google.com/linux/chrome/deb stable Release.gpg [819 B]                                                                                                 
Get:3 http://security.debian.org/debian-security buster/updates InRelease [25.5 kB]                                                               
Get:4 http://ftp.it.debian.org/debian buster InRelease [124 kB]                                                                                              
Hit:6 https://repo.skype.com/deb stable InRelease                                                                                                                    
Get:7 http://dl.google.com/linux/chrome/deb stable/main amd64 Packages [1,360 B]                                                                                     
Err:3 http://security.debian.org/debian-security buster/updates InRelease                                                                    
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
Err:4 http://ftp.it.debian.org/debian buster InRelease                                                     
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Get:8 https://cdn-aws.deb.debian.org/debian buster InRelease [124 kB]    
Err:8 https://cdn-aws.deb.debian.org/debian buster InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
Fetched 276 kB in 4s (66.3 kB/s)
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://security.debian.org/debian-security buster/updates InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.it.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://cdn-aws.deb.debian.org/debian buster InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: Failed to fetch http://ftp.it.debian.org/debian/dists/buster/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: Failed to fetch http://security.debian.org/debian-security/dists/buster/updates/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553
W: Failed to fetch https://deb.debian.org/debian/dists/buster/InRelease  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 7638D0442B90D010
W: Some index files failed to download. They have been ignored, or old ones used instead.

Re: apt-get update error: NO_PUBKEY

Posted: 2017-08-23 09:26
by csavorgn
I managed to fix also the problem with the 2 remaining keys. First I tried with the command:

Code: Select all

apt-key adv --keyserver keyring.debian.org --recv-keys 7638D0442B90D010
but I got the error

Code: Select all

Executing: /tmp/apt-key-gpghome.vnazRX2hMQ/gpg.1.sh --keyserver keyring.debian.org --recv-keys 7638D0442B90D010
gpg: no valid OpenPGP data found.
gpg: Total number processed: 0
Then I tried

Code: Select all

apt-key adv --keyserver  --recv-keys 7638D0442B90D010
and got a different error

Code: Select all

Executing: /tmp/apt-key-gpghome.9P13myiXv0/gpg.1.sh --keyserver pgpkeys.mit.edu --recv-keys 7638D0442B90D010
gpg: key 7638D0442B90D010: "Debian Archive Automatic Signing Key (8/jessie) <ftpmaster@debian.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
gpg: Warning: 1 key skipped due to its large size
gpg: Warning: 1 key skipped due to its large size
Finally, I managed to install the key by running the following two commands

Code: Select all

gpg --keyserver pgpkeys.mit.edu --recv-key 7638D0442B90D010
gpg -a --export 7638D0442B90D010 >> key.txt
and adding the key in Synaptic manually.

I have two question remaining:
Why the two keys 7638D0442B90D010 and 8B48AD6246925553 are not in keyring.debian.org?
Why do I get the size error on these keys?

Re: apt-get update error: NO_PUBKEY

Posted: 2017-08-23 16:02
by kedaha
csavorgn wrote:I fixed the formatting in my first post. Now it should be more readable.
Thanks, it's quite an improvement.
csavorgn wrote:Since some years I'm using Testing on my computers. I moved to testing because I needed some software which was not available in Stable.
I wouldn't recommend using the developmental distribution—where you might have broken packages or functionality for a few weeks and continual upgrades being written to disk—as an avenue to newer software but, since you've been using it for years, that's different.
csavorgn wrote:I have two question remaining:
Why the two keys 7638D0442B90D010 and 8B48AD6246925553 are not in keyring.debian.org?
Why do I get the size error on these keys?
Something may be awry. You may be interested to read: viewtopic.php?t=133986.