D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Expired apt-get keys

 
Hi Ben,

Thanks for your reply and advice about "incremental" dist-upgrade. When I have finished my current shifts I will give it a go, thank you.

There may be further questions when I attempt it!

Cheers roly :-)


On Fri, Oct 9, 2015 at 4:41 PM, Ben Whorwood <ml-devcornlinuxgrp@xxxxxxxxxx> wrote:
Glad you sorted out your issues with apt sources.

dist-upgrade should still work but you may wish to upgrade to the different releases of Debian one at a time, e.g. go from squeeze to wheezy and then to jessie (and then stretch if going to testing).

This can be achieved by changing the values in your apt sources, doing apt-get upgrade && apt-get dist-upgrade then rebooting (and make sure everything is OK) then update your apt sources to the next release and repeating the process.

Make sure you do an upgrade before dist-upgrade to be safe.


On 09/10/15 15:21, Roland Tarver wrote:
Folks - STAND DOWN!

I think I have fixed the above. After a reboot one of the warnings resolved and after more googling I found that debian-multimedia.org has been moved to deb-multimedia.org

http://lists.alioth.debian.org/pipermail/pkg-multimedia-maintainers/2012-May/026678.html

and I added an apparently required public key from:-

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x5C808C2B65558117

Sorry to waist anyoneâs time! I would still welcome comments on dist-upgrade option however?

Many thanks
roly :-)

On Fri, Oct 9, 2015 at 2:01 PM, Roland Tarver <roland.tarver@xxxxxxxxxxxxxx> wrote:
Hello Folks!

Yes - I am still alive! (have not posted here in yonks). I hope you are all well :-)

So, I have an old version of debian on a fairly modern laptop.

roly@Nemisis:~/fixingApt-Get$ cat /etc/debian_version
6.0.3

I was trying to install a package and got the following messages when I did apt-get update...


W: A error occurred during the signature verification. The repository
is not updated and the previous index files will be used. GPG error:
http://mozilla.debian.net squeeze-backports Release: The following
signatures were invalid: KEYEXPIRED 1321788755

W: A error occurred during the signature verification. The repository
is not updated and the previous index files will be used. GPG error:
http://backports.debian.org squeeze-backports Release: The following
signatures couldn't be verified because the public key is not
available: NO_PUBKEY 8B48AD6246925553

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/Release.gpg Could not
resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en_GB.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en_GB.bz2
Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch
http://mozilla.debian.net/dists/squeeze-backports/Release

W: Failed to fetch
http://backports.debian.org/debian-backports/dists/squeeze-backports/Release

W: Some index files failed to download, they have been ignored, or old
ones used instead.




After seeing these warning messages I attempted to carry on regardless and install the package I wanted. apt-get install failed with a bunch of other error messages (which I now cannot reproduce).

and tried to update the local keyring with a new key (nb. I dont fully understand what i'm writing here!)

root@Nemisis:/home/roly# apt-key list
/etc/apt/trusted.gpg
--------------------
pubÂÂ 1024D/F42584E6 2008-04-06 [expired: 2012-05-15]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Lenny Stable Release Key <debian-release@xxxxxxxxxxxxxxxx>

pubÂÂ 4096R/55BE302B 2009-01-27 [expired: 2012-12-31]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian Archive Automatic Signing Key (5.0/lenny) <ftpmaster@xxxxxxxxxx>

pubÂÂ 2048R/6D849617 2009-01-24 [expired: 2013-01-23]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian-Volatile Archive Automatic Signing Key (5.0/lenny)

pubÂÂ 4096R/B98321F9 2010-08-07 [expires: 2017-08-05]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Squeeze Stable Release Key <debian-release@xxxxxxxxxxxxxxxx>

pubÂÂ 4096R/473041FA 2010-08-27 [expires: 2018-03-05]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian Archive Automatic Signing Key (6.0/squeeze) <ftpmaster@xxxxxxxxxx>

pubÂÂ 1024D/1F41B907 1999-10-03
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Christian Marillat <marillat@xxxxxxxxxx>
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Christian Marillat <marillat@xxxxxxx>
subÂÂ 1536g/C28DCC42 1999-10-03
subÂÂ 1024D/5D3877A7 2002-08-26

pubÂÂ 4096R/06C4AE2A 2010-11-20 [expires: 2019-11-13]
uidÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂÂ Debian Mozilla team APT archive <pkg-mozilla-maintainers@xxxxxxxxxxxxxxxxxxxxxxx>


I then tried apt-key update. This made no difference. Identical warning messages and unable to install new packages.

I then used apt-key add to add the key found at mozilla.debian.net/archive.asc

I am now able to install packages and the software appears to work as anticipated. However, when performing an apt-get update I still get the following warning messages. It appears expired keys are no longer a problem...


W: A error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://backports.debian.org squeeze-backports Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 8B48AD6246925553

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/Release.gpg Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/main/i18n/Translation-en_GB.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch ftp://ftp.debian-multimedia.org/dists/squeeze/non-free/i18n/Translation-en_GB.bz2Â Could not resolve 'ftp.debian-multimedia.org'

W: Failed to fetch http://backports.debian.org/debian-backports/dists/squeeze-backports/ReleaseÂ

W: Failed to fetch http://mozilla.debian.net/dists/squeeze-backports/Release Unable to find expected entry iceweasel-release/binary-i386/Packages in Meta-index file (malformed Release file?)

W: Some index files failed to download, they have been ignored, or old ones used instead.


I was intending to use the dist-upgrade method to upgrade the entire system, which is why i figured it wise to sort these warnings before making such an attempt. Perhaps this is not the best way of upgrading however?

Thanks in advance for any help/adivce.
Best wishes
Roly :-)





--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq


-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq