Update fails due to NO_PUBKEY

classic Classic list List threaded Threaded
5 messages Options
Reply | Threaded
Open this post in threaded view
|

Update fails due to NO_PUBKEY

mickbert
I am trying to update debian in my iBook G4 since a very long time, but
the "apt update" command fails due to mising public key for signature
checking.

My current sources.list is:

# binary default
deb http://ftp.ports.debian.org/debian-ports/ unstable main
deb http://ftp.ports.debian.org/debian-ports/ unreleased main
deb http://incoming.ports.debian.org/buildd/ unstable main

# source
deb-src http://ftp.debian.org/debian unstable main
deb-src http://incoming.debian.org/debian-buildd/ buildd-unstable main

and the debian-version:

buster/sid

It's not the first time I got this error (even though on other systems),
but I never remember how to get out of it. I allready tried with
--allow-unauthenticated, with the same result.

--
Mick

Reply | Threaded
Open this post in threaded view
|

Re: Update fails due to NO_PUBKEY

John Paul Adrian Glaubitz
Hi Mick!

On 5/20/20 9:52 AM, Mick Bert wrote:
> I am trying to update debian in my iBook G4 since a very long time, but the
> "apt update" command fails due to mising public key for signature checking.

Try this as root:

# wget http://ftp.ports.debian.org/debian-ports/pool/main/d/debian-ports-archive-keyring/debian-ports-archive-keyring_2019.11.05_all.deb
# dpkg -i debian-ports-archive-keyring_2019.11.05_all.deb

This should fix "apt update".

Adrian

--
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - [hidden email]
`. `'   Freie Universitaet Berlin - [hidden email]
  `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913

Reply | Threaded
Open this post in threaded view
|

Re: Update fails due to NO_PUBKEY

Steffen Grunewald
In reply to this post by mickbert
On Wed, 2020-05-20 at 09:52:51 +0200, Mick Bert wrote:
> I am trying to update debian in my iBook G4 since a very long time, but the
> "apt update" command fails due to mising public key for signature checking.

Extract the key ID from the error message, fetch the key (using gpg --recv-keys),
then add it to the keyring known to APT (apt-key add) ...

HTH,
 Steffen

Reply | Threaded
Open this post in threaded view
|

Re: Update fails due to NO_PUBKEY

mickbert
In reply to this post by John Paul Adrian Glaubitz
Il 20/05/20 09:54, Steffen Grunewald ha scritto:
On Wed, 2020-05-20 at 09:52:51 +0200, Mick Bert wrote:
I am trying to update debian in my iBook G4 since a very long time, but the
"apt update" command fails due to mising public key for signature checking.
Extract the key ID from the error message, fetch the key (using gpg --recv-keys),
then a

The key ID is the following 'NO_PUBKEY 84C573CD4E1AFD6C'

but the command 'gpg --recv-key 84C573CD4E1AFD6C' fails with a "general error". Anyway...

Il 20/05/20 09:54, John Paul Adrian Glaubitz ha scritto:
Try this as root:
# wget http://ftp.ports.debian.org/debian-ports/pool/main/d/debian-ports-archive-keyring/debian-ports-archive-keyring_2019.11.05_all.deb
# dpkg -i debian-ports-archive-keyring_2019.11.05_all.deb

This seems to work. Now the long process of "apt-get dist-upgrade" is in course.

Thanks all

-- 
Mick
Reply | Threaded
Open this post in threaded view
|

Re: Update fails due to NO_PUBKEY

John Paul Adrian Glaubitz
On 5/20/20 10:14 AM, Mick Bert wrote:

> Il 20/05/20 09:54, Steffen Grunewald ha scritto:
>> On Wed, 2020-05-20 at 09:52:51 +0200, Mick Bert wrote:
>>> I am trying to update debian in my iBook G4 since a very long time, but the
>>> "apt update" command fails due to mising public key for signature checking.
>> Extract the key ID from the error message, fetch the key (using gpg --recv-keys),
>> then a
>
> The key ID is the following 'NO_PUBKEY 84C573CD4E1AFD6C'
>
> but the command 'gpg --recv-key 84C573CD4E1AFD6C' fails with a "general error". Anyway...

That's because this particular key has expired:

glaubitz@suse-laptop:~> gpg --fingerprint 84C573CD4E1AFD6C
gpg: checking the trustdb
gpg: key 2064C53641C25E5D: no user ID for key signature packet of class 10
gpg: key 2064C53641C25E5D: no user ID for key signature packet of class 10
gpg: key 2064C53641C25E5D: no user ID for key signature packet of class 10
gpg: marginals needed: 3  completes needed: 1  trust model: pgp
gpg: depth: 0  valid:   4  signed:  88  trust: 0-, 0q, 0n, 0m, 0f, 4u
gpg: depth: 1  valid:  88  signed:  85  trust: 88-, 0q, 0n, 0m, 0f, 0u
gpg: next trustdb check due at 2020-05-30
pub   rsa4096 2018-12-26 [SC] [expired: 2020-01-31]
      1177 213F 7B9E F1C5 280C  FEEA 84C5 73CD 4E1A FD6C
uid           [ expired] Debian Ports Archive Automatic Signing Key (2020) <[hidden email]>

glaubitz@suse-laptop:~>

Adrian

--
 .''`.  John Paul Adrian Glaubitz
: :' :  Debian Developer - [hidden email]
`. `'   Freie Universitaet Berlin - [hidden email]
  `-    GPG: 62FF 8A75 84E0 2956 9546  0006 7426 3B37 F5B5 F913