Skip to content

NO_PUBKEY 5478FEE00E35DFD3 #13

Open

Description

@andoresuperesu

Got this error while trying to update.

The install procedure after deleting the ppa and keys don't fix it.

Activity

  1. ChristopherHX commented on Feb 16, 2025

    @ChristopherHX
    Member

    hmm, did I let my gpg key expire...

    GPG error: https://minecraft-linux.github.io/pkg/deb jammy InRelease: The following signatures were invalid: EXPKEYSIG 5478FEE00E35DFD3 Christopher Homberger <christopher.homberger@web.de>
    

    I need a new key, then everyone need to update the key.
    ...I will look into this tomorrow, thanks for opening an issue

  2. ChristopherHX commented on Feb 16, 2025

    @ChristopherHX
    Member
    MEMO for me
    # To get the fingerprint
    gpg --list-secret-keys --keyid-format LONG
    gpg --quick-set-expire <fingerprint> 8y
    gpg --armor --export-secret-keys <fingerprint>
    

    You need to repeat this step, since the public key has been updated, now longer valid than 2 years

    curl -sS https://minecraft-linux.github.io/pkg/deb/pubkey.gpg | sudo tee /etc/apt/trusted.gpg.d/minecraft-linux-pkg.asc
    
  3. andoresuperesu commented on Feb 16, 2025

    @andoresuperesu
    Author
  4. dilnix commented on Feb 16, 2025

    @dilnix

    MEMO for me
    You need to repeat this step, since the public key has been updated, now longer valid than 2 years

    curl -sS https://minecraft-linux.github.io/pkg/deb/pubkey.gpg | sudo tee -a /etc/apt/trusted.gpg.d/minecraft-linux-pkg.asc
    

    Thanks for the key update. Are there instructions for Fedora for the similar step?

  5. dilnix commented on Feb 16, 2025

    @dilnix

    For now, just used a workaround like:
    sudo dnf update <package> --downloadonly --destdir .
    sudo rpm -U --nosignature ./<package>

    But definitely, there should be a proper way to update the local pubkey.

  6. ChristopherHX commented on Feb 16, 2025

    @ChristopherHX
    Member

    The .repo files I shown in the readme point to that url for rpm, so could be caching

    Maybe https://forums.fedoraforum.org/showthread.php?327792-How-can-I-force-dnf-to-download-new-GPG-keys&p=1855568#post1855568

    sudo dnf clean all

    I don't think to have a fedora system that has fetched the old key at the moment

  7. dilnix commented on Feb 16, 2025

    @dilnix

    The .repo files I shown in the readme point to that url for rpm, so could be caching

    Maybe https://forums.fedoraforum.org/showthread.php?327792-How-can-I-force-dnf-to-download-new-GPG-keys&p=1855568#post1855568

    sudo dnf clean all

    I don't think to have a fedora system that has fetched the old key at the moment

    Unfortunately, it was not working, tried it the first thing. But ok, for Fedora (on daughter's laptop) it's done using the workaround.
    What about Ubuntu? The key resetting using:
    curl -sS https://minecraft-linux.github.io/pkg/deb/pubkey.gpg | sudo tee -a /etc/apt/trusted.gpg.d/minecraft-linux-pkg.asc
    ...didn't help me, I'm still unable to update from 1.1.3 to 1.2.1, getting the error:
    An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://minecraft-linux.github.io/pkg/deb jammy InRelease: Наступні підписи були невірними: EXPKEYSIG 5478FEE00E35DFD3 Christopher Homberger <christopher.homberger@web.de>

  8. ChristopherHX commented on Feb 16, 2025

    @ChristopherHX
    Member

    didn't help me, I'm still unable to update from 1.1.3 to 1.2.1

    You may have an old copy of my public key under a different file name in /etc/apt/trusted.gpg.d

    At least that was it for me. If you remove all keys of my ppa from that folder, the error should just print key not found instead of expired

  9. dilnix commented on Feb 16, 2025

    @dilnix

    Thanks, it worked to delete first the same file /etc/apt/trusted.gpg.d/minecraft-linux-pkg.asc, and then to reset it using the offered command. 👍
    It is unclear to me why it was not working without deleting the local file first, but OK, at least it's figured out now.

  10. ChristopherHX commented on Feb 16, 2025

    @ChristopherHX
    Member

    @dilnix Could you please try this command on fedora?

    rpmkeys --delete "$(rpmkeys --list | grep christopher.homberger@web.de | awk -F ':' '{print $1}')"
    

    This seems to delete the previously imported key (I have published) of my repository and asks again on install like first time.

  11. robinelvin commented on Feb 16, 2025

    @robinelvin

    On Fedora 41 I have done it like this:

    sudo rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n'

    Your output should be something like the following:

    gpg-pubkey-a15b79cc-63d04c2c	Fedora (40) <fedora-40-primary@fedoraproject.org> public key
    gpg-pubkey-e99d6ad1-64d2612c	Fedora (41) <fedora-41-primary@fedoraproject.org> public key
    gpg-pubkey-0e35dfd3-63eea313	Christopher Homberger <christopher.homberger@web.de> public key
    gpg-pubkey-20038257-63ab09c9	Brave Linux Release (Brave Linux Release) <brave-linux-release@brave.com> public key
    gpg-pubkey-f661cdcb-63ab09ad	Brave Linux Pre Release (Brave Linux Pre Release) <brave-linux-pre-release@brave.com> public key
    gpg-pubkey-94843c65-5dadbc64	RPM Fusion nonfree repository for Fedora (2020) <rpmfusion-buildsys@lists.rpmfusion.org> public key
    

    Look for the old key and remove with:

    sudo rpm -e gpg-pubkey-0e35dfd3-63eea313

    Then you can retry sudo dnf update and it will prompt to add the updated key:

    Importing OpenPGP key 0x0E35DFD3:
     UserID     : "Christopher Homberger <christopher.homberger@web.de>"
     Fingerprint: DB0D769C9BBC6478B29A1A715478FEE00E35DFD3
     From       : https://minecraft-linux.github.io/pkg/deb/pubkey.gpg
    Is this ok [y/N]: y
    The key was successfully imported.
    
  12. dilnix commented on Feb 16, 2025

    @dilnix

    Thanks both, it worked.
    Great to see such a support from the community. =]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions