Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

[solved] Debian 10 - every key expired, cannot update keys

Linux Kernel, Network, and Services configuration.
Post Reply
Message
Author
dr_Fell
Posts: 1
Joined: 2020-10-28 15:10

[solved] Debian 10 - every key expired, cannot update keys

#1 Post by dr_Fell »

SOLVED: There was problem with system time that went crazy and was set to 2099.

Hey.
I have logged into my debian box after few months and discovered I cannot apt-get update, getting info about expired keys:

Code: Select all

Get:1 http://security.debian.org/debian-security buster/updates InRelease [65.4 kB]
Get:2 http://deb.debian.org/debian buster InRelease [121 kB]
Err:1 http://security.debian.org/debian-security buster/updates InRelease
  The following signatures were invalid: EXPKEYSIG XXXXXXXXXXXXXXXX Debian Security Archive Automatic Signing Key (9/stretch) <ftpmaster@debian.org> EXPKEYSIG XXXXXXXXXXXXXXXX Debian Security Archive Automatic Signing Key (10/buster) <ftpmaster@debian.org>
Get:3 http://deb.debian.org/debian buster-updates InRelease [51.9 kB]
Err:2 http://deb.debian.org/debian buster InRelease
  The following signatures were invalid: EXPKEYSIG...
I tried to find some solution so I tried to update keys manually, using

Code: Select all

apt-key adv --keyserver keys.gnupg.net --recv-keys <key>
But for every key on the list (all expired) I am getting something like this:

Code: Select all

gpg: key XXXXXXXXXXXXXXXX: "Debian Security Archive Automatic Signing Key (10/buster) <ftpmaster@debian.org>" not changed
gpg: Total number processed: 1
gpg:              unchanged: 1
...and the key remain unchanged.
What is strange, expired keys have future expiration date - some in 2022, some in 2027 etc...
I am stuck, don't know what to do next, appreciate any suggestions.

Michael

Post Reply