Re: Expired GPG keys of older release

[john doe <johndoe65534@mail.com>]

On 6/19/2018 8:33 PM, john doe wrote:
> On 6/19/2018 9:22 AM, Adam Cecile wrote:
> > Hello,
> >
> >
> > GPG key that signed the Squeeze repo is now expired. How should I 
> > handle this properly ? Despite the key is expired, it use to be valid 
> > and I don't like much the idea of going for [trusted=yes] for each 
> > impacted sources.list entry.
>
> Sadly, if the expiry date of the key is not extended there is little you 
> can do beyond insuring that the key in your keyring is up-to-date which 
> is normaly done automatically on Debian.
>
> Googling this gives some things to try.

Reading:

https://wiki.debian.org/DebianKeyring

you could try:

"# Fetch a key from the keyring
$ gpg --keyserver keyring.debian.org --recv-key 0xkeyid"

Where <0xkeyid> is the keyid to be updated.

$ --refresh-keys

I don't use squeeze so I can't properly test it! :)

--
John Doe