GPG error when trying to update Lenny

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

GPG error when trying to update Lenny

Marie-Madeleine Gullibert
Hello to all,

I'm relatively new to Debian. I'm helping out a small organization that has a library server installed on Debian to update their system. They run currently on Debian lenny so I'm first trying to upgrade the Debian system, but I keep running into a GPG error when I try to first update. I've tried many things but none have worked so far, and would gladly welcome any suggestions. I do have debian-archive-keyring installed (and up to date) and I've tried retrieving my expired keys from a two different keyservers to no avail.

Here's what happens (I'm running as root):

localhost:~# apt-get update
Get:1 http://archive.debian.org lenny Release.gpg [1034B]
Ign http://archive.debian.org lenny/main Translation-en_US
Get:2 http://archive.debian.org lenny/updates Release.gpg [836B]
Ign http://archive.debian.org lenny/updates/main Translation-en_US
Ign http://archive.debian.org lenny/updates/contrib Translation-en_US
Get:3 http://archive.debian.org lenny/volatile Release.gpg [481B]
Ign http://archive.debian.org lenny/volatile/main Translation-en_US
Hit http://archive.debian.org lenny Release
Hit http://archive.debian.org lenny/updates Release
Hit http://archive.debian.org lenny/volatile Release
Get:4 http://archive.debian.org lenny Release [99.6kB]
Get:5 http://archive.debian.org lenny/updates Release [92.4kB]
Ign http://archive.debian.org lenny Release
Get:6 http://archive.debian.org lenny/volatile Release [40.7kB]
Ign http://archive.debian.org lenny/updates Release
Ign http://archive.debian.org lenny/volatile Release
Ign http://archive.debian.org lenny/main Packages/DiffIndex
Ign http://archive.debian.org lenny/main Sources/DiffIndex
Ign http://archive.debian.org lenny/updates/main Packages/DiffIndex
Ign http://archive.debian.org lenny/updates/contrib Packages/DiffIndex
Ign http://archive.debian.org lenny/updates/main Sources/DiffIndex
Ign http://archive.debian.org lenny/updates/contrib Sources/DiffIndex
Ign http://archive.debian.org lenny/volatile/main Packages/DiffIndex
Ign http://archive.debian.org lenny/volatile/main Sources/DiffIndex
Hit http://archive.debian.org lenny/main Packages
Hit http://archive.debian.org lenny/main Sources
Hit http://archive.debian.org lenny/updates/main Packages
Hit http://archive.debian.org lenny/updates/contrib Packages
Hit http://archive.debian.org lenny/updates/main Sources
Hit http://archive.debian.org lenny/updates/contrib Sources
Hit http://archive.debian.org lenny/volatile/main Packages
Hit http://archive.debian.org lenny/volatile/main Sources
Fetched 235kB in 0s (301kB/s)
Reading package lists... Done
W: GPG error: http://archive.debian.org lenny Release: The following signatures were invalid: KEYEXPIRED 1520281423 KEYEXPIRED 1337087218
W: GPG error: http://archive.debian.org lenny/updates Release: The following signatures were invalid: KEYEXPIRED 1356982504
W: GPG error: http://archive.debian.org lenny/volatile Release: The following signatures were invalid: KEYEXPIRED 1358963195
W: You may want to run apt-get update to correct these problems




Marie

Reply | Threaded
Open this post in threaded view
|

Re: GPG error when trying to update Lenny

Greg Wooledge
On Wed, May 16, 2018 at 03:20:09PM +0000, Marie-Madeleine Gullibert wrote:
> Fetched 235kB in 0s (301kB/s)
> Reading package lists... Done
> W: GPG error: http://archive.debian.org lenny Release: The following signatures were invalid: KEYEXPIRED 1520281423 KEYEXPIRED 1337087218
> W: GPG error: http://archive.debian.org lenny/updates Release: The following signatures were invalid: KEYEXPIRED 1356982504
> W: GPG error: http://archive.debian.org lenny/volatile Release: The following signatures were invalid: KEYEXPIRED 1358963195
> W: You may want to run apt-get update to correct these problems

The "W:" means it's just a warning, right?  Ignore it and move on?

Reply | Threaded
Open this post in threaded view
|

Re: GPG error when trying to update Lenny

tomas@tuxteam.de
In reply to this post by Marie-Madeleine Gullibert
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, May 16, 2018 at 03:20:09PM +0000, Marie-Madeleine Gullibert wrote:
> Hello to all,
>
> I'm relatively new to Debian. I'm helping out a small organization that has a library server installed on Debian to update their system. They run currently on Debian lenny so I'm first trying to upgrade the Debian system, but I keep running into a GPG error when I try to first update. I've tried many things but none have worked so far, and would gladly welcome any suggestions. I do have debian-archive-keyring installed (and up to date) and I've tried retrieving my expired keys from a two different keyservers to no avail.
>
> Here's what happens (I'm running as root):
>
> localhost:~# apt-get update
> Get:1 http://archive.debian.org lenny Release.gpg [1034B]

Lenny is "archived": packages don't get updated anymore, so at
some point in time expired keys shouldn't be a surprise. I guess
you'll have to live with that warning (if you, for some reason,
have to stay with lenny: otherwise, an upgrade lenny->squeeze->
wheezy->jessie should be the way to go).

Cheers
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlr8VsMACgkQBcgs9XrR2kYqzQCdEWnCmh+qvdOI/SLZfqqTv96x
2DcAn0il9ZcC4hXIhqYX5r5O+87vgQ3+
=ZaCs
-----END PGP SIGNATURE-----

Reply | Threaded
Open this post in threaded view
|

Re: GPG error when trying to update Lenny

john doe-6
In reply to this post by Marie-Madeleine Gullibert
On 5/16/2018 5:20 PM, Marie-Madeleine Gullibert wrote:

> Hello to all,
>
> I'm relatively new to Debian. I'm helping out a small organization that has a library server installed on Debian to update their system. They run currently on Debian lenny so I'm first trying to upgrade the Debian system, but I keep running into a GPG error when I try to first update. I've tried many things but none have worked so far, and would gladly welcome any suggestions. I do have debian-archive-keyring installed (and up to date) and I've tried retrieving my expired keys from a two different keyservers to no avail.
>
> Here's what happens (I'm running as root):
>
> localhost:~# apt-get update
> Get:1 http://archive.debian.org lenny Release.gpg [1034B]
> Ign http://archive.debian.org lenny/main Translation-en_US
> Get:2 http://archive.debian.org lenny/updates Release.gpg [836B]
> Ign http://archive.debian.org lenny/updates/main Translation-en_US
> Ign http://archive.debian.org lenny/updates/contrib Translation-en_US
> Get:3 http://archive.debian.org lenny/volatile Release.gpg [481B]
> Ign http://archive.debian.org lenny/volatile/main Translation-en_US
> Hit http://archive.debian.org lenny Release
> Hit http://archive.debian.org lenny/updates Release
> Hit http://archive.debian.org lenny/volatile Release
> Get:4 http://archive.debian.org lenny Release [99.6kB]
> Get:5 http://archive.debian.org lenny/updates Release [92.4kB]
> Ign http://archive.debian.org lenny Release
> Get:6 http://archive.debian.org lenny/volatile Release [40.7kB]
> Ign http://archive.debian.org lenny/updates Release
> Ign http://archive.debian.org lenny/volatile Release
> Ign http://archive.debian.org lenny/main Packages/DiffIndex
> Ign http://archive.debian.org lenny/main Sources/DiffIndex
> Ign http://archive.debian.org lenny/updates/main Packages/DiffIndex
> Ign http://archive.debian.org lenny/updates/contrib Packages/DiffIndex
> Ign http://archive.debian.org lenny/updates/main Sources/DiffIndex
> Ign http://archive.debian.org lenny/updates/contrib Sources/DiffIndex
> Ign http://archive.debian.org lenny/volatile/main Packages/DiffIndex
> Ign http://archive.debian.org lenny/volatile/main Sources/DiffIndex
> Hit http://archive.debian.org lenny/main Packages
> Hit http://archive.debian.org lenny/main Sources
> Hit http://archive.debian.org lenny/updates/main Packages
> Hit http://archive.debian.org lenny/updates/contrib Packages
> Hit http://archive.debian.org lenny/updates/main Sources
> Hit http://archive.debian.org lenny/updates/contrib Sources
> Hit http://archive.debian.org lenny/volatile/main Packages
> Hit http://archive.debian.org lenny/volatile/main Sources
> Fetched 235kB in 0s (301kB/s)
> Reading package lists... Done
> W: GPG error: http://archive.debian.org lenny Release: The following signatures were invalid: KEYEXPIRED 1520281423 KEYEXPIRED 1337087218
> W: GPG error: http://archive.debian.org lenny/updates Release: The following signatures were invalid: KEYEXPIRED 1356982504
> W: GPG error: http://archive.debian.org lenny/volatile Release: The following signatures were invalid: KEYEXPIRED 1358963195
> W: You may want to run apt-get update to correct these problems
>

This is a rather old release of Debian! :)
By any chance don't you have an other box laying around that you could
configure with Debian 9 and install all required packages?

The idea here would be to not do anything on the "working" box before
you have an other box that could take over that role.

Alternatively you could try to refresh the keys but I'm not sure if that
would work with the Debian's keys.

--
John Doe

Reply | Threaded
Open this post in threaded view
|

Re: GPG error when trying to update Lenny

Mark Fletcher-2
In reply to this post by Marie-Madeleine Gullibert
On Wed, May 16, 2018 at 03:20:09PM +0000, Marie-Madeleine Gullibert wrote:

> Hello to all,
>
> I'm relatively new to Debian. I'm helping out a small organization that has a library server installed on Debian to update their system. They run currently on Debian lenny so I'm first trying to upgrade the Debian system, but I keep running into a GPG error when I try to first update. I've tried many things but none have worked so far, and would gladly welcome any suggestions. I do have debian-archive-keyring installed (and up to date) and I've tried retrieving my expired keys from a two different keyservers to no avail.
>
> Here's what happens (I'm running as root):
>
> localhost:~# apt-get update
> Get:1 http://archive.debian.org lenny Release.gpg [1034B]
> Ign http://archive.debian.org lenny/main Translation-en_US
> Get:2 http://archive.debian.org lenny/updates Release.gpg [836B]
> Ign http://archive.debian.org lenny/updates/main Translation-en_US
> Ign http://archive.debian.org lenny/updates/contrib Translation-en_US
> Get:3 http://archive.debian.org lenny/volatile Release.gpg [481B]
> Ign http://archive.debian.org lenny/volatile/main Translation-en_US
> Hit http://archive.debian.org lenny Release
> Hit http://archive.debian.org lenny/updates Release
> Hit http://archive.debian.org lenny/volatile Release
> Get:4 http://archive.debian.org lenny Release [99.6kB]
> Get:5 http://archive.debian.org lenny/updates Release [92.4kB]
> Ign http://archive.debian.org lenny Release
> Get:6 http://archive.debian.org lenny/volatile Release [40.7kB]
> Ign http://archive.debian.org lenny/updates Release
> Ign http://archive.debian.org lenny/volatile Release
> Ign http://archive.debian.org lenny/main Packages/DiffIndex
> Ign http://archive.debian.org lenny/main Sources/DiffIndex
> Ign http://archive.debian.org lenny/updates/main Packages/DiffIndex
> Ign http://archive.debian.org lenny/updates/contrib Packages/DiffIndex
> Ign http://archive.debian.org lenny/updates/main Sources/DiffIndex
> Ign http://archive.debian.org lenny/updates/contrib Sources/DiffIndex
> Ign http://archive.debian.org lenny/volatile/main Packages/DiffIndex
> Ign http://archive.debian.org lenny/volatile/main Sources/DiffIndex
> Hit http://archive.debian.org lenny/main Packages
> Hit http://archive.debian.org lenny/main Sources
> Hit http://archive.debian.org lenny/updates/main Packages
> Hit http://archive.debian.org lenny/updates/contrib Packages
> Hit http://archive.debian.org lenny/updates/main Sources
> Hit http://archive.debian.org lenny/updates/contrib Sources
> Hit http://archive.debian.org lenny/volatile/main Packages
> Hit http://archive.debian.org lenny/volatile/main Sources
> Fetched 235kB in 0s (301kB/s)
> Reading package lists... Done
> W: GPG error: http://archive.debian.org lenny Release: The following signatures were invalid: KEYEXPIRED 1520281423 KEYEXPIRED 1337087218
> W: GPG error: http://archive.debian.org lenny/updates Release: The following signatures were invalid: KEYEXPIRED 1356982504
> W: GPG error: http://archive.debian.org lenny/volatile Release: The following signatures were invalid: KEYEXPIRED 1358963195
> W: You may want to run apt-get update to correct these problems
>

Since you want to upgrade the installation to a later version, my
suggestion is don't bother first trying to update Lenny. Just update
your sources.list to the next release (was that Jessie? I don't even
recall) and then update as usual.

Some releases had recommendations to use aptitude / not use aptitude, as
opposed to apt-get, to do the update, I don't recall now if releases
after Lenny did, but hopefully this comment will trigger someone else
who does remember to chime in. Google may still be able to find old
copies of the upgrade guides that are published with each new Debian
release.

The only other piece of advice I have is don't try to go straight to
stretch or buster from lenny -- instead upgrade one major release at a
time, as that path is better trodden and more likely to work, and any
issues you encounter are more likely to have been well-discussed in
places Google can find (including the archives of this list).

Mark

Reply | Threaded
Open this post in threaded view
|

Re: GPG error when trying to update Lenny

David Wright-3
On Fri 18 May 2018 at 08:08:49 (+0900), Mark Fletcher wrote:

> On Wed, May 16, 2018 at 03:20:09PM +0000, Marie-Madeleine Gullibert wrote:
> > Hello to all,
> >
> > I'm relatively new to Debian. I'm helping out a small organization that has a library server installed on Debian to update their system. They run currently on Debian lenny so I'm first trying to upgrade the Debian system, but I keep running into a GPG error when I try to first update. I've tried many things but none have worked so far, and would gladly welcome any suggestions. I do have debian-archive-keyring installed (and up to date) and I've tried retrieving my expired keys from a two different keyservers to no avail.
> >
> > Here's what happens (I'm running as root):
> >
> > localhost:~# apt-get update
> > Get:1 http://archive.debian.org lenny Release.gpg [1034B]
> > Ign http://archive.debian.org lenny/main Translation-en_US
> > Get:2 http://archive.debian.org lenny/updates Release.gpg [836B]
> > Ign http://archive.debian.org lenny/updates/main Translation-en_US
> > Ign http://archive.debian.org lenny/updates/contrib Translation-en_US
> > Get:3 http://archive.debian.org lenny/volatile Release.gpg [481B]
> > Ign http://archive.debian.org lenny/volatile/main Translation-en_US
> > Hit http://archive.debian.org lenny Release
> > Hit http://archive.debian.org lenny/updates Release
> > Hit http://archive.debian.org lenny/volatile Release
> > Get:4 http://archive.debian.org lenny Release [99.6kB]
> > Get:5 http://archive.debian.org lenny/updates Release [92.4kB]
> > Ign http://archive.debian.org lenny Release
> > Get:6 http://archive.debian.org lenny/volatile Release [40.7kB]
> > Ign http://archive.debian.org lenny/updates Release
> > Ign http://archive.debian.org lenny/volatile Release
> > Ign http://archive.debian.org lenny/main Packages/DiffIndex
> > Ign http://archive.debian.org lenny/main Sources/DiffIndex
> > Ign http://archive.debian.org lenny/updates/main Packages/DiffIndex
> > Ign http://archive.debian.org lenny/updates/contrib Packages/DiffIndex
> > Ign http://archive.debian.org lenny/updates/main Sources/DiffIndex
> > Ign http://archive.debian.org lenny/updates/contrib Sources/DiffIndex
> > Ign http://archive.debian.org lenny/volatile/main Packages/DiffIndex
> > Ign http://archive.debian.org lenny/volatile/main Sources/DiffIndex
> > Hit http://archive.debian.org lenny/main Packages
> > Hit http://archive.debian.org lenny/main Sources
> > Hit http://archive.debian.org lenny/updates/main Packages
> > Hit http://archive.debian.org lenny/updates/contrib Packages
> > Hit http://archive.debian.org lenny/updates/main Sources
> > Hit http://archive.debian.org lenny/updates/contrib Sources
> > Hit http://archive.debian.org lenny/volatile/main Packages
> > Hit http://archive.debian.org lenny/volatile/main Sources
> > Fetched 235kB in 0s (301kB/s)
> > Reading package lists... Done
> > W: GPG error: http://archive.debian.org lenny Release: The following signatures were invalid: KEYEXPIRED 1520281423 KEYEXPIRED 1337087218
> > W: GPG error: http://archive.debian.org lenny/updates Release: The following signatures were invalid: KEYEXPIRED 1356982504
> > W: GPG error: http://archive.debian.org lenny/volatile Release: The following signatures were invalid: KEYEXPIRED 1358963195
> > W: You may want to run apt-get update to correct these problems
> >
>
> Since you want to upgrade the installation to a later version, my
> suggestion is don't bother first trying to update Lenny. Just update
> your sources.list to the next release (was that Jessie? I don't even
> recall) and then update as usual.

No, squeeze is next. It might be worth looking at §4.4.5 in the
Release Notes so that the kernel and udev remain compatible.
The later upgrades don't AFAIK have a problem like that, but there
are changes, depending on your hardware, that might be worth checking
on. Eg to use 686 kernels in wheezy I think you need pae, and by the
time you reach stretch there are no 586 kernels I believe. You'll
probably also meet systemd, and booting should be faster but with
a more varied order of process startup.

Cheers,
David.