Your message dated Tue, 10 Jan 2023 12:32:20 +0100 with message-id <20230110123151.GA1574285@debian.org> and subject line Re: Bug#1028389: GPG keys for packages squid3, nginx and apache2 expired has caused the Debian Bug report #1028389, regarding GPG keys for packages squid3, nginx and apache2 expired to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 1028389: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028389 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: submit@bugs.debian.org, security@debian.org
- Subject: GPG keys for packages squid3, nginx and apache2 expired
- From: Manuel Antonio Romero Caro <manuelaromero@guadaltel.com>
- Date: Tue, 10 Jan 2023 11:48:27 +0100
- Message-id: <[🔎] 5832e102-1ec7-d2cb-4256-d086a9cb0416@guadaltel.com>
Package: apt Version: 1.0.9.8.2 X-Debbugs-CC: Marco.MINGHINI@ec.europa.eu,inspire.jrc@guadaltel.comDear Debian maintainance team,
We are contacting you because when we are downloading certain packages to be installed, it appears the same debian-related issue related to the expiration of the GPG key in the repository.
The traces obtained for the issue are the following:RUN apt-get update; true
---> Running in e87514d0208a
Ign http://httpredir.debian.org jessie InRelease
Get:1 http://security.debian.org jessie/updates InRelease [44.9 kB]
Get:2 http://httpredir.debian.org jessie-updates InRelease [16.3 kB]
Ign http://httpredir.debian.org jessie-backports InRelease
Get:3 http://httpredir.debian.org jessie Release.gpg [1652 B]
Ign http://httpredir.debian.org jessie-backports Release.gpg
Get:4 http://httpredir.debian.org jessie Release [77.3 kB]
Ign http://httpredir.debian.org jessie-backports Release
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
Err http://httpredir.debian.org jessie-backports/main amd64 Packages
404 Not Found
Ign http://security.debian.org jessie/updates InRelease
Get:5 http://security.debian.org jessie/updates/main amd64 Packages [992 kB]
Ign http://httpredir.debian.org jessie-updates InRelease
Ign http://httpredir.debian.org jessie Release
Get:6 http://httpredir.debian.org jessie-updates/main amd64 Packages [20 B]
Get:7 http://httpredir.debian.org jessie/main amd64 Packages [9098 kB]
Fetched 10.2 MB in 2s (3980 kB/s)
W: GPG error: http://security.debian.org jessie/updates InRelease: The following signatures were invalid: KEYEXPIRED 1668892417 The following signatures couldn't be verified because the public key is not available: NO_PUBKEY AA8E81B4331F7F50
W: GPG error: http://httpredir.debian.org jessie-updates InRelease: The following signatures were invalid: KEYEXPIRED 1668891673
W: GPG error: http://httpredir.debian.org jessie Release: The following signatures were invalid: KEYEXPIRED 1668891673
W: Failed to fetch http://httpredir.debian.org/debian/dists/jessie-backports/main/binary-amd64/Packages 404 Not Found
E: Some index files failed to download. They have been ignored, or old ones used instead.This error make it impossible to install those packages in a normal way, cause they are unauthorized.
As we have determined, the cause of it are three expired keys which are related to the packages: squid3, nginx and apache2.
So, we are asking if you will extend the validity of these three certificates. And if that not the case, how can we proceed to solve this issue?
Thank you for your attention,
Manuel Antonio Romero Caro
--
Manuel Antonio Romero Caro www.guadaltel.com Pastor y Landero, 19
41001 Sevilla (España)
tel +34 954 562 540
Gran Vía, 6 - 4ª pl.
28013 Madrid (España)
tel +34 915 247 475
San Antonio, 19 Of. 401
Santiago (Chile)
tel +56 226 646 263
Nivel 5 en CMMI DEV+SVC por el CMMI Institute y certificada por AENOR conforme con el ENS, en UNE-EN ISO 9001:2015, UNE-EN ISO 14001:2015 y en UNE-EN ISO 22301:2015 así como en UNE-ISO/IEC 27001:2014 y 20000-1:2018.
--- End Message ---
--- Begin Message ---
- To: 1028389-close@bugs.debian.org
- Subject: Re: Bug#1028389: GPG keys for packages squid3, nginx and apache2 expired
- From: Julian Andres Klode <jak@debian.org>
- Date: Tue, 10 Jan 2023 12:32:20 +0100
- Message-id: <20230110123151.GA1574285@debian.org>
- In-reply-to: <[🔎] 5832e102-1ec7-d2cb-4256-d086a9cb0416@guadaltel.com>
- References: <[🔎] 5832e102-1ec7-d2cb-4256-d086a9cb0416@guadaltel.com>
On Tue, Jan 10, 2023 at 11:48:27AM +0100, Manuel Antonio Romero Caro wrote: > Package: apt > Version: 1.0.9.8.2 > X-Debbugs-CC:Marco.MINGHINI@ec.europa.eu,inspire.jrc@guadaltel.com > > > Dear Debian maintainance team, > > We are contacting you because when we are downloading certain packages to be > installed, it appears the same debian-related issue related to the > expiration of the GPG key in the repository. > The traces obtained for the issue are the following: > > RUN apt-get update; true > ---> Running in e87514d0208a > Ign http://httpredir.debian.org jessie InRelease > Get:1 http://security.debian.org jessie/updates InRelease [44.9 kB] > Get:2 http://httpredir.debian.org jessie-updates InRelease [16.3 kB] > Ign http://httpredir.debian.org jessie-backports InRelease > Get:3 http://httpredir.debian.org jessie Release.gpg [1652 B] > Ign http://httpredir.debian.org jessie-backports Release.gpg > Get:4 http://httpredir.debian.org jessie Release [77.3 kB] > Ign http://httpredir.debian.org jessie-backports Release > Err http://httpredir.debian.org jessie-backports/main amd64 Packages > > Err http://httpredir.debian.org jessie-backports/main amd64 Packages > > Err http://httpredir.debian.org jessie-backports/main amd64 Packages > > Err http://httpredir.debian.org jessie-backports/main amd64 Packages > > Err http://httpredir.debian.org jessie-backports/main amd64 Packages > 404 Not Found > Ign http://security.debian.org jessie/updates InRelease > Get:5 http://security.debian.org jessie/updates/main amd64 Packages [992 kB] > Ign http://httpredir.debian.org jessie-updates InRelease > Ign http://httpredir.debian.org jessie Release > Get:6 http://httpredir.debian.org jessie-updates/main amd64 Packages [20 B] > Get:7 http://httpredir.debian.org jessie/main amd64 Packages [9098 kB] > Fetched 10.2 MB in 2s (3980 kB/s) > W: GPG error: http://security.debian.org jessie/updates InRelease: The > following signatures were invalid: KEYEXPIRED 1668892417 The following > signatures couldn't be verified because the public key is not available: > NO_PUBKEY AA8E81B4331F7F50 > W: GPG error: http://httpredir.debian.org jessie-updates InRelease: The > following signatures were invalid: KEYEXPIRED 1668891673 > W: GPG error: http://httpredir.debian.org jessie Release: The following > signatures were invalid: KEYEXPIRED 1668891673 > W: Failed to fetch http://httpredir.debian.org/debian/dists/jessie-backports/main/binary-amd64/Packages > 404 Not Found This is not a bug in apt. -- debian developer - deb.li/jak | jak-linux.org - free software dev ubuntu core developer i speak de, en
--- End Message ---