GPG key invalid on repository download.passbolt.com

1

One of our checks just fired that the APT GPG key is no longer valid.

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://download.passbolt.com/ce/ubuntu focal InRelease: The following signatures were invalid: EXPKEYSIG DE8B853FC155581D Passbolt SA package signing key <contact@passbolt.com>
W: Failed to fetch https://download.passbolt.com/ce/ubuntu/dists/focal/InRelease  The following signatures were invalid: EXPKEYSIG DE8B853FC155581D Passbolt SA package signing key <contact@passbolt.com>
W: Some index files failed to download. They have been ignored, or old ones used instead.

I ran the install repo script again however it seems to want to add the same server already present.

2

Hi eddie,

Yes we’ve rotated the key expiration date, we posted about it recently on all channels:
https://community.passbolt.com/t/action-needed-update-of-the-package-signing-key/5258/2

3

Ahh thank you.

I googled the issue but that page didn’t come up. Sorry for the spam.

1 Like
4

No worries, your post will be useful for others also.