mariner icon indicating copy to clipboard operation
mariner copied to clipboard

Signature expired - preventing access to repo

Open coderbec opened this issue 2 years ago • 7 comments

Description Trying to install on rpi and hitting a snag when trying to set up access to Mariner repo.

Firslty getting a warning on sudo apt-key add that apt-key is deprecated so I switched this this command: curl -sL gpg.l9o.dev | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/mariner3d.gpg

However, the signature itself is I think expired: GPG error: https://ppa.l9o.dev/raspbian ./ InRelease: The following signatures were invalid: EXPKEYSIG BF6F8043AC280E02 Luiz Ribeiro <[email protected]>

Reproduction Steps Steps to reproduce the behavior:

  1. Go to '...'
  2. Click on '....'
  3. Scroll down to '....'
  4. See error

Expected Behavior A clear and concise description of what you expected to happen.

Screenshots / Logs If applicable, attach screenshots or logs to help explain your problem. Reading package lists... Done Building dependency tree... Done Reading state information... Done E: Unable to locate package mariner3d

Details:

  • Mariner Version: [e.g. 0.2.0 - use apt show mariner3d to check]
  • Printer Model: [e.g. Elegoo Mars Pro]
  • Raspberry Pi Model: [e.g. RPi Zero W]

pi 3B - Raspbian GNU/Linux 11 (bullseye)

Additional context Add any other context about the problem here.

coderbec avatar Jan 21 '23 05:01 coderbec

Yep same here. 🙏 Expired 2023-01-20

pi@elegoo:/etc/apt/sources.list.d $ sudo apt-key list

/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2012-04-01 [SC]
      A0DA 38D0 D76E 8B5D 6388  7281 9165 938D 90FD DD2E
uid           [ unknown] Mike Thompson (Raspberry Pi Debian armhf ARMv6+VFP) <[email protected]>
sub   rsa2048 2012-04-01 [E]

pub   rsa2048 2012-06-17 [SC]
      CF8A 1AF5 02A2 AA2D 763B  AE7E 82B1 2992 7FA3 303E
uid           [ unknown] Raspberry Pi Archive Signing Key
sub   rsa2048 2012-06-17 [E]

pub   rsa4096 2019-11-23 [C] [expired: 2023-01-20]
      97A0 AE5E 03F3 499B 7D7A  65C6 76A4 1432 37EF 5817
uid           [ expired] Luiz Ribeiro <[email protected]>

mdbijl avatar Jan 21 '23 08:01 mdbijl

For people who want to continue anyway (highly discouraged, yadayadayada...):

edit /etc/apt/sources.list.d/l9o.list by adding [trusted=yes]

deb [trusted=yes] https://ppa.l9o.dev/raspbian ./

mdbijl avatar Jan 21 '23 08:01 mdbijl

any other way to get this working because stil expired

felenna avatar Mar 30 '23 20:03 felenna

You have to add the key: sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02

MarkGyver-source avatar May 08 '23 17:05 MarkGyver-source

I have dug thru alot of the documentation, I found this thread, after adding the key, I still cant seem to get access to the repository either. Looks like the key has expired.

freq-geek32 avatar May 11 '23 16:05 freq-geek32

I have dug thru alot of the documentation, I found this thread, after adding the key, I still cant seem to get access to the repository either. Looks like the key has expired.

For me it is working:

`pi@elegoo: $ curl -sL gpg.l9o.dev | sudo apt-key add - Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)). gpg: no valid OpenPGP data found. pi@elegoo: $ echo "deb https://ppa.l9o.dev/raspbian ./" | sudo tee /etc/apt/sources.list.d/l9o.list deb https://ppa.l9o.dev/raspbian ./

pi@elegoo: $ sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02 Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)). Executing: /tmp/apt-key-gpghome.1bB3M5P8V0/gpg.1.sh --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02 gpg: key 76A4143237EF5817: public key "Luiz Ribeiro [email protected]" imported gpg: Total number processed: 1 gpg: imported: 1

pi@elegoo: $ sudo apt update Get:1 http://raspbian.raspberrypi.org/raspbian bullseye InRelease [15.0 kB] Hit:2 http://archive.raspberrypi.org/debian bullseye InRelease Get:3 https://ppa.l9o.dev/raspbian ./ InRelease [2,119 B] Get:4 https://ppa.l9o.dev/raspbian ./ Packages [529 B] Fetched 17.6 kB in 3s (6,079 B/s) Reading package lists... Done Building dependency tree... Done Reading state information... Done 1 package can be upgraded. Run 'apt list --upgradable' to see it.`

MarkGyver-source avatar May 11 '23 17:05 MarkGyver-source

Looks like https://gpg.l9o.dev/ is no longer up. However, the key can still be added directly from the keyserver. I got @MarkGyver-source's process working and have copied it here for a bit better readability

echo "deb https://ppa.l9o.dev/raspbian ./" | sudo tee /etc/apt/sources.list.d/l9o.list
sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys BF6F8043AC280E02
sudo apt update && sudo apt install -y mariner3d

jbohanon avatar Nov 09 '23 16:11 jbohanon