Invalid signatures Topic is solved

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1111
Joined: 2019-04-24, 09:38

Re: Invalid signatures

Unread post by Pentium4User » 2021-02-03, 19:04

And also make sure the old key is removed.
You can show them via

Code: Select all

apt-key list
The profile picture shows my Maico EC30 E ceiling fan.

Ez-waker

Re: Invalid signatures

Unread post by Ez-waker » 2021-02-03, 19:29

stevepusser wrote:
2021-02-03, 18:59
If you still have the original Release.key file sitting in the same place as you try and download a new one, curl will give it a different name. Always run "rm -f Release.key" before downloading a new one.

If that doesn't work, please give us the terminal output of the repo setup commands.
Pentium4User wrote:
2021-02-03, 19:04
And also make sure the old key is removed.
You can show them via

Code: Select all

apt-key list
Thanks to you both. Removing the key was the key.

Python54

Re: Invalid signatures

Unread post by Python54 » 2021-02-04, 08:19

stevepusser wrote:
2021-02-03, 18:56
29.0.0 is not building for amd64 for 20.04, for reasons I don't really know yet. It builds for ARM 64, armhf (32-bit like on the Pi), and for x86 32-bit systems, and has no issues building on 18.04 and 20.10. Perhaps it's some new problem with gcc-9 on that architecture, AFAIK, that's the only distro now that my PM's building against with that version.

This is going to take time and effort to diagnose. Right now I'm trying a build in an sbuild 20.04 schroot on my laptop to see if that fails.
Palemoon v29.0.0 appeared in Update Manager on my Mint 20.1/20.04 PC this morning and is now installed OK. Thanks for fixing the problem Steve :thumbup:

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 11:05

@Steve pusser
I also get the message, that key EXPKEYSIG 0FAD31CA8719FCE4 is expired. I run ubuntu 18.04.
Lots of different commands and links have been posted, about how to solve this issue, by different members.
could you please offer a step by step way to download the new key for ubuntu 18.04?
or do you consider the problem for 18.04 solved at some point?
I'm a bit scared to mess things up completely
kind regards oscar

New Tobin Paradigm

Re: Invalid signatures

Unread post by New Tobin Paradigm » 2021-02-04, 11:11

If you are scared then you shouldn't be using Linux.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35474
Joined: 2011-08-28, 17:27
Location: Motala, SE
Contact:

Re: Invalid signatures

Unread post by Moonchild » 2021-02-04, 11:15

New Tobin Paradigm wrote:
2021-02-04, 11:11
If you are scared then you shouldn't be using Linux.
I should print and frame that.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite

User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1111
Joined: 2019-04-24, 09:38

Re: Invalid signatures

Unread post by Pentium4User » 2021-02-04, 11:33

oscar wrote:
2021-02-04, 11:05
@Steve pusser
I also get the message, that key EXPKEYSIG 0FAD31CA8719FCE4 is expired. I run ubuntu 18.04.
Lots of different commands and links have been posted, about how to solve this issue, by different members.
could you please offer a step by step way to download the new key for ubuntu 18.04?
or do you consider the problem for 18.04 solved at some point?
I'm a bit scared to mess things up completely
kind regards oscar
Please show the output of the commands you ran.
The profile picture shows my Maico EC30 E ceiling fan.

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 12:11

Pentium4user wrote:
"please show the output of the commands you ran"


I'd be happy to, but it's in danish.
However it's the same text as the one sent by Alerche tue.feb.02 8:32

"Fehl:4 http://download.opensuse.org/repositori ... /Debian_10 InRelease
Die folgenden Signaturen waren ungültig: EXPKEYSIG 0FAD31CA8719FCE4 home:stevenpusser OBS Project <home:stevenpusser@build.opensuse.org>
W: Während der Überprüfung der Signatur trat ein Fehler auf. Das Depot wurde nicht aktualisiert und die vorherigen Indexdateien werden verwendet. GPG-Fehler: http://download.opensuse.org/repositori ... /Debian_10 InRelease: Die folgenden Signaturen waren ungültig: EXPKEYSIG 0FAD31CA8719FCE4 home:stevenpusser OBS Project <home:stevenpusser@build.opensuse.org>
W: Fehlschlag beim Holen von http://download.opensuse.org/repositori ... /InRelease Die folgenden Signaturen waren ungültig: EXPKEYSIG 0FAD31CA8719FCE4 home:stevenpusser OBS Project <home:stevenpusser@build.opensuse.org>
W: Einige Indexdateien konnten nicht heruntergeladen werden. Sie wurden ignoriert oder alte an ihrer Stelle benutzt."


only difference is that my output refers to: "http://download.opensuse.org/repositori ... untu_18.04 InRelease"
I hope you understand german. otherwise I'll try to translate into english

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 12:13


User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1111
Joined: 2019-04-24, 09:38

Re: Invalid signatures

Unread post by Pentium4User » 2021-02-04, 12:15

Show the output of

Code: Select all

sudo apt-key del "F961 1EC6 ADCF DD30 3362 217A 0FAD 31CA 8719 FCE4"
sudo apt-key list
 
The profile picture shows my Maico EC30 E ceiling fan.

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 12:28

/etc/apt/trusted.gpg
--------------------
pub rsa2048 2017-04-05 [SC] [udløber: 2021-02-27]
E64C 7A04 DC65 3D07 ACA3 EA58 5E62 D791 625A 271E
uid [ ukendt] home:hawkeye116477 OBS Project <home:hawkeye116477@build.opensuse.org>

/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-archive.gpg
------------------------------------------------------
pub rsa4096 2012-05-11 [SC]
790B C727 7767 219C 42C8 6F93 3B4F E6AC C0B2 1F32
uid [ ukendt] Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com>

/etc/apt/trusted.gpg.d/ubuntu-keyring-2012-cdimage.gpg
------------------------------------------------------
pub rsa4096 2012-05-11 [SC]
8439 38DF 228D 22F7 B374 2BC0 D94A A3F0 EFE2 1092
uid [ ukendt] Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>

/etc/apt/trusted.gpg.d/ubuntu-keyring-2018-archive.gpg
------------------------------------------------------
pub rsa4096 2018-09-17 [SC]
F6EC B376 2474 EDA9 D21B 7022 8719 20D1 991B C93C
uid [ ukendt] Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>


"ukendt" means: unknown

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 14:39

@Pentium4user
the output for:
sudo apt-key del "F961 1EC6 ADCF DD30 3362 217A 0FAD 31CA 8719 FCE4"
was a plain: OK

User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1111
Joined: 2019-04-24, 09:38

Re: Invalid signatures

Unread post by Pentium4User » 2021-02-04, 15:25

Now

Code: Select all

curl -fsSL https://download.opensuse.org/repositories/home:stevenpusser/xUbuntu_20.10/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_stevenpusser.gpg > /dev/null
sudo apt update
The profile picture shows my Maico EC30 E ceiling fan.

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 15:38

it seems like the command to follow (and thanks for helping our. I really appreciate) is meant for xUbuntu 20.10?
I'm on 18.04

User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1111
Joined: 2019-04-24, 09:38

Re: Invalid signatures

Unread post by Pentium4User » 2021-02-04, 15:44

regardless, file is the same (I checked the md5 checksum).
The profile picture shows my Maico EC30 E ceiling fan.

oscar

Re: Invalid signatures

Unread post by oscar » 2021-02-04, 16:04

I had to install curl.
ran your command afterwards and voila! the upgrade to 29.0.0 succeeded :thumbup:
thank you for good support. you made my day

User avatar
jobbautista9
Keeps coming back
Keeps coming back
Posts: 782
Joined: 2020-11-03, 06:47
Location: Philippines
Contact:

Re: Invalid signatures

Unread post by jobbautista9 » 2021-02-06, 06:56

I'm pretty sure you can do that in wget as well.
Image

merry mimas

XUL add-ons developer. You can find a list of add-ons I manage at http://rw.rs/~job/software.html.

Mima avatar by 絵虎. Pixiv post: https://www.pixiv.net/en/artworks/15431817

Image

blackchoy

Re: Invalid signatures

Unread post by blackchoy » 2021-03-08, 00:39

Can anyone help me get updated to version 29? I followed the expired key commands here in Linux Mint 20:

Code: Select all

sudo apt-key del "F961 1EC6 ADCF DD30 3362  217A 0FAD 31CA 8719 FCE4"
curl -fsSL https://download.opensuse.org/repositories/home:stevenpusser/xUbuntu_20.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_stevenpusser.gpg > /dev/null
sudo apt update
sudo apt install palemoon
But I kept getting these errors...
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositori ... untu_20.04 InRelease: The following signatures were invalid: EXPKEYSIG 0FAD31CA8719FCE4 home:stevenpusser OBS Project <home:stevenpusser@build.opensuse.org>
W: Failed to fetch http://download.opensuse.org/repositori ... /InRelease The following signatures were invalid: EXPKEYSIG 0FAD31CA8719FCE4 home:stevenpusser OBS Project <home:stevenpusser@build.opensuse.org>
W: Some index files failed to download. They have been ignored, or old ones used instead.

I tried removing palemoon and re-entered all the commands but still get the same results. I don't know what's wrong but this worked on my other machine that runs LM 19.

User avatar
Pentium4User
Board Warrior
Board Warrior
Posts: 1111
Joined: 2019-04-24, 09:38

Re: Invalid signatures

Unread post by Pentium4User » 2021-03-08, 05:39

Show

Code: Select all

ls -la /etc/apt/trusted.gpg.d
The profile picture shows my Maico EC30 E ceiling fan.

blackchoy

Re: Invalid signatures

Unread post by blackchoy » 2021-03-08, 12:07

Code: Select all

ls -la /etc/apt/trusted.gpg.d
total 44
drwxr-xr-x 2 root root 4096 Mar  7 18:32 .
drwxr-xr-x 7 root root 4096 Aug 26  2020 ..
-rw-r--r-- 1 root root  735 Aug 26  2020 home:stevenpusser.gpg
-rw-r--r-- 1 root root  735 Mar  7 19:25 home_stevenpusser.gpg
-rw-r--r-- 1 root root  735 Mar  7 18:10 home_stevenpusser.gpg~
-rw-r--r-- 1 root root 7801 Jun 24  2020 ubuntu-defaults.chroot.key.gpg
-rw-r--r-- 1 root root 2796 Apr  9  2020 ubuntu-keyring-2012-archive.gpg
-rw-r--r-- 1 root root 2794 Apr  9  2020 ubuntu-keyring-2012-cdimage.gpg
-rw-r--r-- 1 root root 2283 Apr  9  2020 ubuntu-keyring-2016-dbgsym.gpg
-rw-r--r-- 1 root root 1733 Apr  9  2020 ubuntu-keyring-2018-archive.gpg
I also noticed in Synaptic Package Manager the "palemoon:arm64" is still showing 28.17.0-1.

Locked