# GPG key invalid on repository download.passbolt.com

**URL:** <https://community.passbolt.com/t/gpg-key-invalid-on-repository-download-passbolt-com/5368>\
**Category:** Uncategorized\
**Created:** [May 19, 2022, 9:23am UTC](https://community.passbolt.com/t/gpg-key-invalid-on-repository-download-passbolt-com/5368 "2022-05-19T09:23:47Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![eddie4](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/eddie4/32/96_2.png) [@eddie4](https://community.passbolt.com/u/eddie4)\
**Post date:** [May 19, 2022, 9:23am UTC](https://community.passbolt.com/t/gpg-key-invalid-on-repository-download-passbolt-com/5368/1 "2022-05-19T09:23:47Z")

</div>

One of our checks just fired that the APT GPG key is no longer valid.

```auto
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://download.passbolt.com/ce/ubuntu focal InRelease: The following signatures were invalid: EXPKEYSIG DE8B853FC155581D Passbolt SA package signing key <contact@passbolt.com>
W: Failed to fetch https://download.passbolt.com/ce/ubuntu/dists/focal/InRelease The following signatures were invalid: EXPKEYSIG DE8B853FC155581D Passbolt SA package signing key <contact@passbolt.com>
W: Some index files failed to download. They have been ignored, or old ones used instead.

```

I ran the install repo script again however it seems to want to add the same server already present.

---

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [May 19, 2022, 9:26am UTC](https://community.passbolt.com/t/gpg-key-invalid-on-repository-download-passbolt-com/5368/2 "2022-05-19T09:26:08Z")

</div>

Hi eddie,

Yes we’ve rotated the key expiration date, we posted about it recently on all channels:  
[https://community.passbolt.com/t/action-needed-update-of-the-package-signing-key/5258/2](https://community.passbolt.com/t/action-needed-update-of-the-package-signing-key/5258/2)

> <https://twitter.com/passbolt/status/1521770170523475969>

---

<div class="post-metadata">

**Author:** ![eddie4](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/eddie4/32/96_2.png) [@eddie4](https://community.passbolt.com/u/eddie4)\
**Post date:** [May 19, 2022, 11:05am UTC](https://community.passbolt.com/t/gpg-key-invalid-on-repository-download-passbolt-com/5368/3 "2022-05-19T11:05:45Z")

</div>

Ahh thank you.

I googled the issue but that page didn’t come up. Sorry for the spam.

---

<div class="post-metadata">

**Author:** ![remy](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/remy/32/17_2.png) [@remy](https://community.passbolt.com/u/remy)\
**Post date:** [May 19, 2022, 12:33pm UTC](https://community.passbolt.com/t/gpg-key-invalid-on-repository-download-passbolt-com/5368/4 "2022-05-19T12:33:32Z")

</div>

No worries, your post will be useful for others also.