[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1028389: marked as done (GPG keys for packages squid3, nginx and apache2 expired)

Your message dated Tue, 10 Jan 2023 12:32:20 +0100
with message-id <20230110123151.GA1574285@debian.org>
and subject line Re: Bug#1028389: GPG keys for packages squid3, nginx and apache2 expired
has caused the Debian Bug report #1028389,
regarding GPG keys for packages squid3, nginx and apache2 expired
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1028389: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028389
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: apt
Version: 1.0.9.8.2
X-Debbugs-CC: Marco.MINGHINI@ec.europa.eu,inspire.jrc@guadaltel.com

Dear Debian maintainance team,

We are contacting you because when we are downloading certain packages to be installed, it appears the same debian-related issue related to the expiration of the GPG key in the repository.
The traces obtained for the issue are the following:

RUN apt-get update; true
 ---> Running in e87514d0208a
Ign http://httpredir.debian.org jessie InRelease
Get:1 http://security.debian.org jessie/updates InRelease [44.9 kB]
Get:2 http://httpredir.debian.org jessie-updates InRelease [16.3 kB]
Ign http://httpredir.debian.org jessie-backports InRelease
Get:3 http://httpredir.debian.org jessie Release.gpg [1652 B]
Ign http://httpredir.debian.org jessie-backports Release.gpg
Get:4 http://httpredir.debian.org jessie Release [77.3 kB]
Ign http://httpredir.debian.org jessie-backports Release
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
 
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
 
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
 
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
 
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
  404  Not Found
Ign http://security.debian.org jessie/updates InRelease
Get:5 http://security.debian.org jessie/updates/main amd64 Packages [992 kB]
Ign http://httpredir.debian.org jessie-updates InRelease
Ign http://httpredir.debian.org jessie Release
Get:6 http://httpredir.debian.org jessie-updates/main amd64 Packages [20 B]
Get:7 http://httpredir.debian.org jessie/main amd64 Packages [9098 kB]
Fetched 10.2 MB in 2s (3980 kB/s)
W: GPG error: http://security.debian.org jessie/updates InRelease: The following signatures were invalid: KEYEXPIRED 1668892417 The following signatures couldn't be verified because the public key is not available: NO_PUBKEY AA8E81B4331F7F50
W: GPG error: http://httpredir.debian.org jessie-updates InRelease: The following signatures were invalid: KEYEXPIRED 1668891673
W: GPG error: http://httpredir.debian.org jessie Release: The following signatures were invalid: KEYEXPIRED 1668891673
W: Failed to fetch http://httpredir.debian.org/debian/dists/jessie-backports/main/binary-amd64/Packages  404  Not Found

E: Some index files failed to download. They have been ignored, or old ones used instead.

This error make it impossible to install those packages in a normal way, cause they are unauthorized.

As we have determined, the cause of it are three expired keys which are related to the packages: squid3, nginx and apache2.

So, we are asking if you will extend the validity of these three certificates. And if that not the case, how can we proceed to solve this issue?

Thank you for your attention,


Manuel Antonio Romero Caro

--
Manuel Antonio Romero Caro
www.guadaltel.com
Pastor y Landero, 19
41001 Sevilla (España)
tel +34 954 562 540
Gran Vía, 6 - 4ª pl.
28013 Madrid (España)
tel +34 915 247 475
San Antonio, 19 Of. 401
Santiago (Chile)
tel +56 226 646 263

Nivel 5 en CMMI DEV+SVC por el CMMI Institute y certificada por AENOR conforme con el ENS, en UNE-EN ISO 9001:2015, UNE-EN ISO 14001:2015 y en UNE-EN ISO 22301:2015 así como en UNE-ISO/IEC 27001:2014 y 20000-1:2018.

--- End Message ---
--- Begin Message --- 
On Tue, Jan 10, 2023 at 11:48:27AM +0100, Manuel Antonio Romero Caro wrote:
> Package: apt
> Version: 1.0.9.8.2
> X-Debbugs-CC:Marco.MINGHINI@ec.europa.eu,inspire.jrc@guadaltel.com
> 
> 
> Dear Debian maintainance team,
> 
> We are contacting you because when we are downloading certain packages to be
> installed, it appears the same debian-related issue related to the
> expiration of the GPG key in the repository.
> The traces obtained for the issue are the following:
> 
> RUN apt-get update; true
>  ---> Running in e87514d0208a
> Ign http://httpredir.debian.org jessie InRelease
> Get:1 http://security.debian.org jessie/updates InRelease [44.9 kB]
> Get:2 http://httpredir.debian.org jessie-updates InRelease [16.3 kB]
> Ign http://httpredir.debian.org jessie-backports InRelease
> Get:3 http://httpredir.debian.org jessie Release.gpg [1652 B]
> Ign http://httpredir.debian.org jessie-backports Release.gpg
> Get:4 http://httpredir.debian.org jessie Release [77.3 kB]
> Ign http://httpredir.debian.org jessie-backports Release
> Err http://httpredir.debian.org jessie-backports/main amd64 Packages
> 
> Err http://httpredir.debian.org jessie-backports/main amd64 Packages
> 
> Err http://httpredir.debian.org jessie-backports/main amd64 Packages
> 
> Err http://httpredir.debian.org jessie-backports/main amd64 Packages
> 
> Err http://httpredir.debian.org jessie-backports/main amd64 Packages
>   404  Not Found
> Ign http://security.debian.org jessie/updates InRelease
> Get:5 http://security.debian.org jessie/updates/main amd64 Packages [992 kB]
> Ign http://httpredir.debian.org jessie-updates InRelease
> Ign http://httpredir.debian.org jessie Release
> Get:6 http://httpredir.debian.org jessie-updates/main amd64 Packages [20 B]
> Get:7 http://httpredir.debian.org jessie/main amd64 Packages [9098 kB]
> Fetched 10.2 MB in 2s (3980 kB/s)
> W: GPG error: http://security.debian.org jessie/updates InRelease: The
> following signatures were invalid: KEYEXPIRED 1668892417 The following
> signatures couldn't be verified because the public key is not available:
> NO_PUBKEY AA8E81B4331F7F50
> W: GPG error: http://httpredir.debian.org jessie-updates InRelease: The
> following signatures were invalid: KEYEXPIRED 1668891673
> W: GPG error: http://httpredir.debian.org jessie Release: The following
> signatures were invalid: KEYEXPIRED 1668891673
> W: Failed to fetch http://httpredir.debian.org/debian/dists/jessie-backports/main/binary-amd64/Packages
> 404  Not Found

This is not a bug in apt.

-- 
debian developer - deb.li/jak | jak-linux.org - free software dev
ubuntu core developer                              i speak de, en

--- End Message ---
Reply to: