APT Repo Public Key Expiration & Update

My system also does not accept the signature of this repo:

W: GPG-Fehler: https://openhab.jfrog.io/openhab/openhab-linuxpkg stable Release: Die folgenden Signaturen waren ungültig: EXPKEYSIG 075721F6A224060A openHAB Bintray Repositories <owner@openhab.org>
W: The repository 'https://openhab.jfrog.io/openhab/openhab-linuxpkg stable Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

How do I get OpenHAB updates working again?

1 Like

Same issue with the repository not being signed.

sudo apt-get update
[...]
Reading package lists... Done
W: The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is not signed.
N: Data from such a repository can't be authenticated and is therefore potentially dangerous to use.
N: See apt-secure(8) manpage for repository creation and user configuration details.

deb https://openhab.jfrog.io/openhab/openhab-linuxpkg stable main was added to sources and I updated the key.

sudo apt-key list gave me this for the repository key.

[...]
pub   rsa4096 2015-07-25 [SC] [expires: 2023-07-24]
      EDB7 D030 4E2F CAF6 29DF  1163 0757 21F6 A224 060A
uid           [ unknown] openHAB Bintray Repositories <owner@openhab.org>
sub   rsa4096 2015-07-25 [E] [expires: 2023-07-25]

The documentation for Linux listed the new and old repositories. The old directions didn’t have the jfrog.io repository leading me to believe the directions were updated and both repositories should be in the sources. So I’m not sure if there is still a problem in the repository, it seems like the problem started when the key was renewed.

A post above said the snapshot repository changed, but did the stable release repository change hosts as well?

folks,

I’m also getting an error with this.
RPi-4 running Buster
added the key and now I get this

pub   rsa4096 2015-07-25 [SC] [expires: 2023-07-24]
      EDB7 D030 4E2F CAF6 29DF  1163 0757 21F6 A224 060A
uid           [ unknown] openHAB Bintray Repositories <owner@openhab.org>
sub   rsa4096 2015-07-25 [E] [expires: 2023-07-25]

…which looks right?

and an apt update gives me this;

root@homeauto:~# apt update
Hit:1 http://raspbian.raspberrypi.org/raspbian buster InRelease
Hit:2 http://archive.raspberrypi.org/debian buster InRelease
Ign:3 http://repos.azulsystems.com/debian stable InRelease
Ign:4 https://dl.bintray.com/openhab/apt-repo2 stable InRelease
Hit:5 http://repos.azulsystems.com/debian stable Release
Get:6 https://dl.bintray.com/openhab/apt-repo2 stable Release [6,051 B]
Ign:7 https://dl.bintray.com/openhab/apt-repo2 stable Release.gpg
Reading package lists... Done
E: The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

I’ve tried the various tips above like deleting the cache etc but it’s still the same; fails.

Is there any difference between Debian Jessie and Buster for this?

Hi,
I tried this but leads me to:

Hit:1 Index of /webupd8team/java/ubuntu xenial InRelease
Hit:2 Index of /raspbian stretch InRelease
Hit:3 Index of /debian stretch InRelease
Hit:4 Index of linux/debian/ jessie InRelease
Hit:5 InfluxData - Package Repository jessie InRelease
Ign:6 JFrog 54 InRelease
Err:7 JFrog 54 Release
404 Not Found
Reading package lists… Done
E: The repository ‘JFrog 54 Release’ does not have a Release file.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Any ideas how to go on?
I think I’ll try [trusted=yes] for the moment

BR
Markus

Hi,
my update also stops with signature invalid as reported by the last posts.
Updated the repo-list as mentioned by Burkart before that.
Using RPi with rasbian stretch
Do not want to switch off security by [trusted=yes]
Hope someone can help here!
Thanks.
Christian

The issue with the stable repo has been resolved now. I’d reccomend using the bintray server for the stable releases.

3 Likes

So you recommend me and others who changed the file openhab2.list according to @mstormi’s
solution should change it back to the original “https://dl.bintray.com/openhab/apt-repo2 stable main”?

Both repositories will continue to work fine, but the Bintray server is better suited to distribution-time releases than the jfrog (artifactory) server.

I could try whatever I want - I always got GPG errors for the OpenHAB repos, both jfrog and bintray. This is what worked for me in the end:

Delete apt status information:

sudo rm -rf /var/lib/apt/lists/*

Load bintray key again:

wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | sudo apt-key add -

After that, apt-get update started working again.

3 Likes

Any idea why I am getting an error when running the command?

wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | sudo apt-key add -

Gives me:

curl: option -: is unknown
curl: try 'curl --help' or 'curl --manual' for more information
gpg: no valid OpenPGP data found.

You probably have messed up your installation or are using some exotic OS, but ‘curl’ is not part of the apt-key script (at least not on Raspbian). Eventually you have created an misdirected alias, too.

And please follow community guidelines when posting from now on.

How to ask a good question / Help Us Help You - Tutorials & Examples - openHAB Community

Same problem here with a rpi4, raspbian (buster): stable release is not signed.

Tried removing all files under/var/lib/apt/lists, but did not work…

Anybody having the same problem?

Thanks so much.

I might have accidentially destroyed the signature last night… Will see to get it working asap again, sorry!

1 Like

The repo should be working now!

3 Likes

Doesn’t work for me.
Just tried on Debian 9.9 for the stable release with the bintray server.

Hi @matzR

Could you send a copy of the error you’re getting? I’ve just checked and the repo is working for me.

Hei Guys,
can somebody tell me where i can find the Home UUID for the camera thing in the Paper UI

Please open a new thread. In that thread, please include:

  • version of OH you are running
  • what binding you are talking about (IP Camera binding?)
  • what you have done thus far to solve the problem.

This question is not related in any way to this thread.

Kai, it’s working fine now, thanks a lot!

Sorry, I have been out for a while, could not have tried earlier.

Cheers!