Package: debian-edu-archive-keyring Version: 2010.01.05 Severity: grave X-Debbugs-CC: debian-release@lists.debian.org User: debian-edu@lists.debian.org Usertags: debian-edu Hi,6 days ago (2014-02-20) the key 0xA26FF456 shipped in the Debian squeeze version of package debian-edu-archive-keyring (version 2010.01.05) has expired.
mike@minobo:~/tmp/edu/debian-edu-archive-keyring-2010.01.05/keyrings$ gpg --list-key ftpmaster@skolelinux.org
pub 1024D/A26FF456 2006-02-22 [verfallen: 2014-02-20]uid Skolelinux Archive Automatic Signing Key <ftpmaster@skolelinux.org>
The key is used as archive key for the Debian Edu archive on ftp.skolelinux.org.
This key validity expiration breaks all Debian Edu squeeze installations, may it be from DVD/Netinst-CD or may it be via PXE-installation.
Marking this as a "grave" bug, as it completely breaks Debian Edu squeeze on all installed sites world-wide.
@Release team / @Debian Edu Users: the Debian Edu team apologizes for not having this issue better on our radar. @Release team: We desperately hope for your support to get a quick solution for this problem.My personal approach would be uploading a rebuild of debian-edu-archive-keyring 2013.05.20 versioned as 2013.05.20~deb6 to squeeze-proposed-updates. The same key in that newer package will expire in 2019, which will give people plenty of time to upgrade their running Debian Edu setups.
Mike -- mike gabriel aka sunweaver (Debian Developer) fon: +49 (1520) 1976 148 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: sunweaver@debian.org, http://sunweavers.net
Attachment:
pgplYPFc7dGDt.pgp
Description: Digitale PGP-Signatur