The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is not signed. (Raspberry pi 3)

[4integration]

Having this issue

Linux openHABianPi 4.19.42-v7+ #1219 SMP Tue May 14 21:20:58 BST 2019 armv7l

Getting

[18:06:01] openhabian@openHABianPi:~$ sudo apt-get update
[sudo] password for openhabian:
Ign:1 http://repos.azulsystems.com/debian stable InRelease
Hit:2 http://repos.azulsystems.com/debian stable Release
Hit:3 http://raspbian.raspberrypi.org/raspbian stretch InRelease
Get:4 http://archive.raspberrypi.org/debian stretch InRelease [25.4 kB]
Ign:5 https://dl.bintray.com/openhab/apt-repo2 stable InRelease
Get:6 https://dl.bintray.com/openhab/apt-repo2 stable Release [6,051 B]
Ign:7 https://dl.bintray.com/openhab/apt-repo2 stable Release.gpg
Reading package lists... Done
E: The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Any final solution?

[Max_G]

Same here…
OH 2.4.0
On rPi Stretch

# [2019-08-28 21:26] maxg@rpi3ohv2 ~ $
sudo apt-get update
Get:1 http://archive.raspberrypi.org/debian stretch InRelease [25.4 kB]
Get:2 http://raspbian.raspberrypi.org/raspbian stretch InRelease [15.0 kB]
Ign:3 https://dl.bintray.com/openhab/apt-repo2 stable InRelease
Get:4 https://dl.bintray.com/openhab/apt-repo2 stable Release [6,051 B]
Get:5 http://archive.raspberrypi.org/debian stretch/main armhf Packages [221 kB]
Ign:6 https://dl.bintray.com/openhab/apt-repo2 stable Release.gpg
Get:7 http://raspbian.raspberrypi.org/raspbian stretch/main armhf Packages [11.7 MB]
Hit:8 http://repo.owntracks.org/debian stretch InRelease
Reading package lists... Done
E: The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[marcel_erkel]

You both are still on the bintray repo. You need to switch to the jfrog repo.

[Hoween]

So, somebody should fix official documentation, don’t you think? There’s still “bintray” repo mentioned on https://www.openhab.org/download/

[marcel_erkel]

That somebody could be you

[apica (Aaron)]

I’m getting the same problem:

The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is not signed.

Maybe the error is back?

[coeffee (Bastian)]

yes, I have the same iussue. Can anyone fix this?

[marcel_erkel]

Did you change the repo from bintray to jfrog?

[TAN (Tom Andersen)]

Neither bintray or jfrog works for stable release, how to solve?

[Benjy (Ben Clark)]

This issue should be resolved now, I’d reccomend using Bintray for stable releases.

[delrey (Chris)]

An update, disable signed verification does work…

echo ‘deb [trusted=yes] https://dl.bintray.com/openhab/apt-repo2 stable main’ | sudo tee /etc/apt/sources.list.d/openhab2.list

How frustrating this has been… this is a new install on an existing pi I’ve had. I’m trying to test the latest with my setup but can’t even get the basic image installed and from the looks of the thread I’m not the only once having issues for quite a while now… Everything seemed to work fine with exception to upgdate/upgrade to Openhabian on the provided image, the apt process seems to fail against the repository. Any guidance? I’m assuming a manual install would result the same?

[17:57:03] openhabian@openhab : ~ $ wget -qO - ‘https://bintray.com/user/downloadSubjectPublicKey?username=openhab’ | sudo apt-key add -

OK

[17:57:07] openhabian@openhab : ~ $ sudo apt-get install apt-transport-https

Reading package lists… Done

Building dependency tree

Reading state information… Done

apt-transport-https is already the newest version (1.8.2).

The following packages were automatically installed and are no longer required:

rpi.gpio-common triggerhappy

Use ‘sudo apt autoremove’ to remove them.

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

[17:57:24] openhabian@openhab : ~ $ sudo apt autoremove

Reading package lists… Done

Building dependency tree

Reading state information… Done

The following packages will be REMOVED:

rpi.gpio-common triggerhappy

0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.

After this operation, 115 kB disk space will be freed.

Do you want to continue? [Y/n] y

(Reading database … 45105 files and directories currently installed.)

Removing rpi.gpio-common:armhf (0.6.5-1) …

Removing triggerhappy (0.5.0-1) …

Warning: Stopping triggerhappy.service, but it can still be activated by:

triggerhappy.socket

Processing triggers for man-db (2.8.5-2) …

Updating FireMotD available updates count …

[17:57:53] openhabian@openhab : ~ $ sudo apt-get install apt-transport-https

Reading package lists… Done

Building dependency tree

Reading state information… Done

apt-transport-https is already the newest version (1.8.2).

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

[17:57:59] openhabian@openhab : ~ $ echo ‘deb https://dl.bintray.com/openhab/apt-repo2 stable main’ | sudo tee /etc/apt/sources.list.d/openhab2.list

deb https://dl.bintray.com/openhab/apt-repo2 stable main

[17:58:15] openhabian@openhab : ~ $ sudo apt-get update && sudo apt-get install openhab2

Hit:1 http://archive.raspberrypi.org/debian buster InRelease

Hit:2 http://raspbian.raspberrypi.org/raspbian buster InRelease

Ign:3 https://dl.bintray.com/openhab/apt-repo2 stable InRelease

Get:4 https://dl.bintray.com/openhab/apt-repo2 stable Release [6,051 B]

Ign:5 https://dl.bintray.com/openhab/apt-repo2 stable Release.gpg

Reading package lists… Done

E: The repository ‘https://dl.bintray.com/openhab/apt-repo2 stable Release’ is not signed.

N: Updating from such a repository can’t be done securely, and is therefore disabled by default.

N: See apt-secure(8) manpage for repository creation and user configuration details.

[17:58:34] openhabian@openhab : ~ $

[Bruce_Osborne]

@delrey

this is a new install on an existing pi I’ve had

But you appear to be running openhabian. Why are you not using its tools? You should be installing OpenHAB using sudo openhabian-config as listed in the documentation.

openHABian

[questionmark78]

I am using openhab 3 on openhabian (fresh install a few weeks ago) and the updater in the openhabian-config shows me an error:

The command line shows the messages after exiting the openhabian-config:

2021-01-27_08:23:35_CET [openHABian] Loading configuration file '/etc/openhabian.conf'... OK
2021-01-27_08:23:35_CET [openHABian] openHABian configuration tool version: [openHAB3]patchday-20210119-1147(fbc2b15)
2021-01-27_08:23:35_CET [openHABian] Checking for changes in origin branch openHAB3... OK
2021-01-27_08:23:44_CET [openHABian] Switching to branch openHAB3... OK
2021-01-27_08:23:53_CET [openHABian] Beginning openHAB backup... 2021-01-27_08:23:56_CET [openHABian] Creating openHAB backup... OK
2021-01-27_08:27:23_CET [openHABian] Updating Linux package information... OK
2021-01-27_08:27:23_CET [openHABian] Updating repositories and upgrading installed packages... FAILED

When I tried to update manually with sudo apt-get update it gave me the error in this topic:

The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is no longer signed.

Should this be fixed in Openhabian?
I did run a successful update using the openhabian-config last week.

[shutterfreak (Olivier Biot)]

E: The repository ‘https://dl.bintray.com/openhab/apt-repo2 stable Release’ is no longer signed.

Either the public key expired or someone deliberately removed the signature from the repository.

Alas, the following command works but doesn’t fix the problem:

openhabian@openhab:~ $ wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | sudo apt-key add -
OK

Looking for the openHAB key from apt-key list now yields a non-expired key:

pub   rsa4096 2015-07-25 [SC] [expires: 2023-07-24]
      EDB7 D030 4E2F CAF6 29DF  1163 0757 21F6 A224 060A
uid           [ unknown] openHAB Bintray Repositories <owner@openhab.org>
sub   rsa4096 2015-07-25 [E] [expires: 2023-07-25]

But running sudo apt update fails on the openhab repository. Due to the missing signature (I infer at the server side):

openhabian@openhab:~ $ sudo apt update
Hit:1 http://raspbian.raspberrypi.org/raspbian buster InRelease
Hit:2 https://packages.grafana.com/oss/deb stable InRelease                                                                                  
Hit:3 https://repos.influxdata.com/debian buster InRelease                                                                                   
Ign:4 https://dl.bintray.com/openhab/apt-repo2 stable InRelease                                                                              
Hit:5 http://archive.raspberrypi.org/debian buster InRelease                                                                                 
Get:6 https://dl.bintray.com/openhab/apt-repo2 stable Release [6,051 B]                                                                      
Hit:7 http://deb.debian.org/debian buster InRelease                                                                                          
Hit:8 https://deb.nodesource.com/node_10.x buster InRelease                                  
Ign:9 https://dl.bintray.com/openhab/apt-repo2 stable Release.gpg                            
Hit:10 https://repo.z-wave.me/z-way/raspbian buster InRelease          
Reading package lists... Done                    
E: The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[Benjy (Ben Clark)]

@questionmark78

Should this be fixed in Openhabian

This is a wider issue with the repository that openHABian uses. I’ll fix it asap.

[foresthus (Gero Waldhausen)]

Thnx 4 your quick solution. it works again.

[Benjy (Ben Clark)]

Glad to hear it working again!

[McMaster05 (Manuel)]

I get this error today on my pi with rasbian:
E: Failed to fetch https://dl.bintray.com/openhab/apt-repo2/dists/stable/InRelease 403 Forbidden [IP: 3.124.41.190 443]
E: The repository ‘https://dl.bintray.com/openhab/apt-repo2 stable InRelease’ is no longer signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[Benjy (Ben Clark)]

Hi @McMaster05,

Please checkout the following thread:

The Stable (Release) Linux repositories have changed location

Hi All, As mentioned in the 3.0.2 announcement thread, Bintray - the service we used to host the Stable Linux packages will be halted at the end of the month, as a result we have had to switch to use Artifactory for our Stable repository, as we do for the milestones and snapshots. The last release on Bintray will be 3.0.2, anyone who updates to it will automatically have their apt, yum or dnf repositories pointed towards the new location, so if you update before May there’s nothing for you to …

[hmerk (Hans-Jörg Merk)]

Please check the docs, we have moved to artifactory, as bintray is shutting down its service.