[Bug 1920610] Re: The repository 'http://ddebs.ubuntu.com groovy Release' is not signed

[Dimitry Andric]

The GPG key has simply expired, as of 2021-03-20:

$ wget -q http://ddebs.ubuntu.com/dists/focal-proposed/Release
http://ddebs.ubuntu.com/dists/focal-proposed/Release.gpg


$ gpg --verify Release.gpg Release
gpg: Signature made Fri 19 Mar 2021 04:52:53 AM CET
gpg:                using RSA key 0xC8CAB6595FDFF622
gpg: Good signature from "Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive at lists.ubuntu.com>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: F2ED C64D C5AE E1F6 B9C6  21F0 C8CA B659 5FDF F622

$ gpg --list-key 0xC8CAB6595FDFF622
pub   rsa4096/0xC8CAB6595FDFF622 2016-03-21 [SC] [expired: 2021-03-20]
      Key fingerprint = F2ED C64D C5AE E1F6 B9C6  21F0 C8CA B659 5FDF F622
uid                   [ expired] Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive at lists.ubuntu.com>

Time to generate a new key and distribute it, I guess. :-)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ubuntu-keyring in Ubuntu.
https://bugs.launchpad.net/bugs/1920610

Title:
  The repository 'http://ddebs.ubuntu.com groovy Release' is not signed

Status in ubuntu-keyring package in Ubuntu:
  Confirmed

Bug description:
  Did an update this morning and it looks like the key has expired.
  W: GPG error: http://ddebs.ubuntu.com groovy Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive at lists.ubuntu.com>
  E: The repository 'http://ddebs.ubuntu.com groovy Release' is not signed.
  N: Updating from such a repository can't be done securely, and is therefore disabled by default.
  N: See apt-secure(8) manpage for repository creation and user configuration details.
  W: GPG error: http://ddebs.ubuntu.com groovy-updates Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive at lists.ubuntu.com>
  E: The repository 'http://ddebs.ubuntu.com groovy-updates Release' is not signed.
  N: Updating from such a repository can't be done securely, and is therefore disabled by default.
  N: See apt-secure(8) manpage for repository creation and user configuration details.
  W: GPG error: http://ddebs.ubuntu.com groovy-proposed Release: The following signatures were invalid: EXPKEYSIG C8CAB6595FDFF622 Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive at lists.ubuntu.com>
  E: The repository 'http://ddebs.ubuntu.com groovy-proposed Release' is not signed.
  N: Updating from such a repository can't be done securely, and is therefore disabled by default.
  N: See apt-secure(8) manpage for repository creation and user configuration details.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-keyring/+bug/1920610/+subscriptions