The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is not signed. (Raspberry pi 3)

I am using openhab 3 on openhabian (fresh install a few weeks ago) and the updater in the openhabian-config shows me an error:

The command line shows the messages after exiting the openhabian-config:

2021-01-27_08:23:35_CET [openHABian] Loading configuration file '/etc/openhabian.conf'... OK
2021-01-27_08:23:35_CET [openHABian] openHABian configuration tool version: [openHAB3]patchday-20210119-1147(fbc2b15)
2021-01-27_08:23:35_CET [openHABian] Checking for changes in origin branch openHAB3... OK
2021-01-27_08:23:44_CET [openHABian] Switching to branch openHAB3... OK
2021-01-27_08:23:53_CET [openHABian] Beginning openHAB backup... 2021-01-27_08:23:56_CET [openHABian] Creating openHAB backup... OK
2021-01-27_08:27:23_CET [openHABian] Updating Linux package information... OK
2021-01-27_08:27:23_CET [openHABian] Updating repositories and upgrading installed packages... FAILED

When I tried to update manually with sudo apt-get update it gave me the error in this topic:

The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is no longer signed.

Should this be fixed in Openhabian?
I did run a successful update using the openhabian-config last week.

E: The repository ‘https://dl.bintray.com/openhab/apt-repo2 stable Release’ is no longer signed.

Either the public key expired or someone deliberately removed the signature from the repository.

Alas, the following command works but doesn’t fix the problem:

openhabian@openhab:~ $ wget -qO - 'https://bintray.com/user/downloadSubjectPublicKey?username=openhab' | sudo apt-key add -
OK

Looking for the openHAB key from apt-key list now yields a non-expired key:

pub   rsa4096 2015-07-25 [SC] [expires: 2023-07-24]
      EDB7 D030 4E2F CAF6 29DF  1163 0757 21F6 A224 060A
uid           [ unknown] openHAB Bintray Repositories <owner@openhab.org>
sub   rsa4096 2015-07-25 [E] [expires: 2023-07-25]

But running sudo apt update fails on the openhab repository. Due to the missing signature (I infer at the server side):

openhabian@openhab:~ $ sudo apt update
Hit:1 http://raspbian.raspberrypi.org/raspbian buster InRelease
Hit:2 https://packages.grafana.com/oss/deb stable InRelease                                                                                  
Hit:3 https://repos.influxdata.com/debian buster InRelease                                                                                   
Ign:4 https://dl.bintray.com/openhab/apt-repo2 stable InRelease                                                                              
Hit:5 http://archive.raspberrypi.org/debian buster InRelease                                                                                 
Get:6 https://dl.bintray.com/openhab/apt-repo2 stable Release [6,051 B]                                                                      
Hit:7 http://deb.debian.org/debian buster InRelease                                                                                          
Hit:8 https://deb.nodesource.com/node_10.x buster InRelease                                  
Ign:9 https://dl.bintray.com/openhab/apt-repo2 stable Release.gpg                            
Hit:10 https://repo.z-wave.me/z-way/raspbian buster InRelease          
Reading package lists... Done                    
E: The repository 'https://dl.bintray.com/openhab/apt-repo2 stable Release' is no longer signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

This is a wider issue with the repository that openHABian uses. I’ll fix it asap.

2 Likes

Thnx 4 your quick solution. it works again.

1 Like

Glad to hear it working again! :slightly_smiling_face:

I get this error today on my pi with rasbian:
E: Failed to fetch https://dl.bintray.com/openhab/apt-repo2/dists/stable/InRelease 403 Forbidden [IP: 3.124.41.190 443]
E: The repository ‘https://dl.bintray.com/openhab/apt-repo2 stable InRelease’ is no longer signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Hi @McMaster05,

Please checkout the following thread:

2 Likes

Please check the docs, we have moved to artifactory, as bintray is shutting down its service.