Skip to content

singning key of repo expired

6 messages · bodo riediger-klaus, Dirk Eddelbuettel, John C Nash +2 more

Original
bodo riediger-klaus
# 
Hello,

i get a key-expired message when i try to update my repository

root at merlot:/etc/apt/sources.list.d# cat rbase-stable.list
deb http://ftp.gwdg.de/pub/misc/cran/bin/linux/debian buster-cran40/


W: GPG-Fehler: http://ftp.gwdg.de/pub/misc/cran/bin/linux/debian 
buster-cran40/ InRelease: Die folgenden Signaturen waren ung?ltig: 
EXPKEYSIG FCAE2A0E115C3D8A Johannes Ranke (Wissenschaftlicher Berater) 
<johannes.ranke at jrwb.de>

As you can see on

https://keyserver.ubuntu.com/pks/lookup?search=0xE19F5F87128899B192B1A2C2AD5F960A256A04AF&fingerprint=on&op=index

there are two Expired Sub-Keys:

sub rsa3072/5bc121cfdc61bdae03062260af83ce117fbb4c22 
2016-11-15T20:12:04Z
sig sbind ad5f960a256a04af 2016-11-15T20:12:04Z ____________________ 
2021-11-14T18:17:46Z []

sub rsa3072/ad7b5162ba456be3526f8d92fcae2a0e115c3d8a 
2016-11-15T19:58:24Z
sig sbind ad5f960a256a04af 2016-11-15T19:58:24Z ____________________ 
2021-11-14T18:17:46Z []


greetings, bodo
Dirk Eddelbuettel
#
On 16 November 2021 at 12:08, bodo riediger-klaus wrote:
| Hello,
| 
| i get a key-expired message when i try to update my repository
| 
| root at merlot:/etc/apt/sources.list.d# cat rbase-stable.list
| deb http://ftp.gwdg.de/pub/misc/cran/bin/linux/debian buster-cran40/
| 
| 
| W: GPG-Fehler: http://ftp.gwdg.de/pub/misc/cran/bin/linux/debian 
| buster-cran40/ InRelease: Die folgenden Signaturen waren ung?ltig: 
| EXPKEYSIG FCAE2A0E115C3D8A Johannes Ranke (Wissenschaftlicher Berater) 
| <johannes.ranke at jrwb.de>

As it is the personal key of Johannes, only Johannes (CC'ed) can fix it.
It is my understanding that he has been contacted, but as we had not said so
on the list it is good to have it here too.

Dirk

| As you can see on
| 
| https://keyserver.ubuntu.com/pks/lookup?search=0xE19F5F87128899B192B1A2C2AD5F960A256A04AF&fingerprint=on&op=index
| 
| there are two Expired Sub-Keys:
| 
| sub rsa3072/5bc121cfdc61bdae03062260af83ce117fbb4c22 
| 2016-11-15T20:12:04Z
| sig sbind ad5f960a256a04af 2016-11-15T20:12:04Z ____________________ 
| 2021-11-14T18:17:46Z []
| 
| sub rsa3072/ad7b5162ba456be3526f8d92fcae2a0e115c3d8a 
| 2016-11-15T19:58:24Z
| sig sbind ad5f960a256a04af 2016-11-15T19:58:24Z ____________________ 
| 2021-11-14T18:17:46Z []
| 
| 
| greetings, bodo
| 
| -- 
| R.-Bodo Riediger-Klaus     IT-Dienst FB MI Freie Universit?t Berlin
| bodo.riediger-klaus at fu-berlin.de Takustr.9 R.038 Fon: 030 838 75175
| 
| _______________________________________________
| R-SIG-Debian mailing list
| R-SIG-Debian at r-project.org
| https://stat.ethz.ch/mailman/listinfo/r-sig-debian
Johannes Ranke
# 
Hi all,

sorry to all users of the CRAN Debian backports for the inconvenience caused 
by the expiration of my signing key.

I have created a new key and uploaded it to keyserver.ubuntu.com, and signed 
the buster40 and bullseye40 repositories with it. The repos signed with the 
new key will be available to all users of the CRAN Debian archive as soon as 
the synchronisation has taken place.

Kind regards,

Johannes

P.S.: Unfortunately I could not change the key expiration of the old key, as I 
have lost the passphrase of the corresponding master key. For the same reason, 
the new key is not signed with the old one.

Am Dienstag, 16. November 2021, 14:18:06 CET schrieb Dirk Eddelbuettel:
John C Nash
# 
I've seen several issues like this with "private" repositories or
sections thereof. Is there a reasonable way to set things up so keys
or access is shared across several people or held in an organizational
escrow? I think there is general good will on the part of most people
contributing, but things happen in life, and the collective can be
inconvenienced.

Best,

JN
On 2021-11-16 8:28 a.m., Johannes Ranke wrote:
Johannes Ranke
# 
While waiting for the mirrors to sync, you might want to have a look at my 
(poor man's) key transition statement located here

  https://jrwb.de/docs/key_transition_2021-11-16.asc

By the way, volunteers for improving the maintenance of the Debian section on 
CRAN are certainly welcome. It would be nice to have a team instead of a one 
man show! The scripts currently used can be studied here:

  https://cgit.jrwb.de/r-backports/
  
or cloned from this very URL.

Kind regards,

Johannes

Am Dienstag, 16. November 2021, 15:29:34 CET schrieb J C Nash:
1 day later
Griera
# 
Thanks a lot!

A dimarts 16 de novembre 2021,  v?reu escriure: