Quantcast
Channel: How to update the GPG keyring on a Debian Wheezy server - Server Fault
Viewing all articles
Browse latest Browse all 2

How to update the GPG keyring on a Debian Wheezy server

$
0
0

I am trying to setup a Dockerized Wheezy for some development which production servers are still on this old unmaintained Debian version.

The main problem I get is with checking the GPG signatures of the official archive repositories.

Starting from the official docker image, replacing /etc/apt/sources.list with

deb http://archive.debian.org/debian wheezy main

if I try apt-get update I get the result:

W: GPG error: http://archive.debian.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1587841717 KEYEXPIRED 1668891673 KEYEXPIRED 1557241909

Checking the GPG keys with apt-key list | grep expired

gpg: /etc/apt//trustdb.gpg: trustdb createdpub   4096R/2B90D010 2014-11-21 [expired: 2022-11-19]pub   4096R/C857C906 2014-11-21 [expired: 2022-11-19]pub   4096R/518E17E1 2013-08-17 [expired: 2021-08-15]pub   4096R/473041FA 2010-08-27 [expired: 2018-03-05]pub   4096R/B98321F9 2010-08-07 [expired: 2017-08-05]pub   4096R/46925553 2012-04-27 [expired: 2020-04-25]pub   4096R/65FFB764 2012-05-08 [expired: 2019-05-07]

So I update most of them with apt-key adv --recv-keys --keyserver keyserver.ubuntu.com $(apt-key list | grep expired | sed -E 's=[^/]+/([^ ]+).*=\1=g' | tr '\n''') but still getting this result from apt-key list:

pub   4096R/518E17E1 2013-08-17 [expired: 2021-08-15]pub   4096R/B98321F9 2010-08-07 [expired: 2017-08-05]pub   4096R/65FFB764 2012-05-08 [expired: 2019-05-07]

And now a call to apt-get update gives W: GPG error: http://archive.debian.org wheezy Release: The following signatures were invalid: KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1587841717 KEYEXPIRED 1668891673 KEYEXPIRED 1557241909

Then I tried getting the official debian keyring deb but it looks like it cannot be installed

dpkg -i /tmp/debian-archive-keyring_2023.4_all.deb dpkg-deb: error: archive '/tmp/debian-archive-keyring_2023.4_all.deb' contains not understood data member control.tar.xz, giving updpkg: error processing /tmp/debian-archive-keyring_2023.4_all.deb (--install):subprocess dpkg-deb --control returned error exit status 2Errors were encountered while processing:  /tmp/debian-archive-keyring_2023.4_all.deb

apt-get --allow-unauthenticated update does not work neither does replacing the source.list file content with

deb [trusted=yes] http://archive.debian.org/debian wheezy main

So is there a way to update those GPG keys or make it so apt does not check them?

Easiest way to experience the problem if you have docker available:

>docker run -it debian:7.11 bashroot@f391e03326c6:/# echo "deb http://archive.debian.org/debian wheezy main" > /etc/apt/sources.listroot@f391e03326c6:/# apt-get update --allow-unauthenticated

Viewing all articles
Browse latest Browse all 2

Latest Images

Trending Articles





Latest Images