Hi, I apologise for the naiveness of this question, but I experienced an error when running apt-get update on Debian 9. It’s telling me that it can’t update the xiph repository. Not sure if I should be asking for help about this here, but if not… please let me know where I should take this issue. Any help is appreciated. Damian Get:1 http://security.debian.org/debian-security stretch/updates InRelease [94.3 kB] Ign:2 http://ftp.us.debian.org/debian stretch InRelease Hit:3 http://ftp.us.debian.org/debian stretch-updates InRelease Hit:4 http://ftp.us.debian.org/debian stretch Release Hit:6 http://www.deb-multimedia.org stretch InRelease Get:5 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease [1,526 B] Err:5 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3 multimedia OBS Project <multimedia at build.opensuse.org> Reading package lists... Done W: GPG error: http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease: The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3 multimedia OBS Project <multimedia at build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease' is no longer signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200223/e1c23cb1/attachment.html>
On Sat, 22 Feb 2020 at 14:17, Damian <db76 at riseup.net> wrote:> Hi, > > I apologise for the naiveness of this question, but I experienced an error > when running apt-get update on Debian 9. > It’s telling me that it can’t update the xiph repository. > > Not sure if I should be asking for help about this here, but if not… > please let me know where I should take this issue. > Any help is appreciated. > > Damian > > > > Get:1 http://security.debian.org/debian-security stretch/updates > InRelease [94.3 kB] > > Ign:2 http://ftp.us.debian.org/debian stretch InRelease > > > Hit:3 http://ftp.us.debian.org/debian stretch-updates InRelease > > > Hit:4 http://ftp.us.debian.org/debian stretch Release > > Hit:6 http://www.deb-multimedia.org stretch InRelease > > Get:5 > http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ > InRelease [1,526 B] > Err:5 > http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ > InRelease > The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3 > multimedia OBS Project <multimedia at build.opensuse.org> > Reading package lists... Done > W: GPG error: > http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ > InRelease: The following signatures were invalid: EXPKEYSIG > 77EC2301F23C6AA3 multimedia OBS Project <multimedia at build.opensuse.org> > E: The repository 'http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 > ./ InRelease' is no longer signed. > N: Updating from such a repository can't be done securely, and is > therefore disabled by default. > N: See apt-secure(8) manpage for repository creation and user > configuration details. >What have you searched for? What have you tried so far? Searching around, I found this - which might help - https://askubuntu.com/questions/650032/gpg-errorthe-following-signatures-were-invalid-keyexpired - https://chrisjean.com/fix-apt-get-update-the-following-signatures-couldnt-be-verified-because-the-public-key-is-not-available/ Chip -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200223/c5728438/attachment.html>
Hi Damian The main reason for this issue is the expired Multimedia signing key expired for openSUSE OBS Multimedia – aka xiph repository. The documentation has not been updated as mentioned in Step 2 : https://wiki.xiph.org/index.php?title=Icecast_Server/Installing_latest_version_(official_Xiph_repositories) <https://wiki.xiph.org/index.php?title=Icecast_Server/Installing_latest_version_(official_Xiph_repositories)&mobileaction=toggle_view_desktop> &mobileaction=toggle_view_desktop (btw. The let’s encrypt Cert on wiki.xiph.org expired as well February 18th 2020 – just ignore the message in your browser). There is already a new key available as mentioned in https://gitlab.xiph.org/xiph/icecast-server/issues/2381 The workaround to solve your issue : 1. Open a shell and become root 2. wget -qO - https://download.opensuse.org/repositories/multimedia:/xiph/CentOS_8/repodata/repomd.xml.key | sudo apt-key add - If you dont use sudo, remove this command. After adding the new signing key, you should be able to install Icecast2 from the xiph repository. Regards Thomas Von: Icecast <icecast-bounces at xiph.org> Im Auftrag von Damian Gesendet: Samstag, 22. Februar 2020 15:17 An: icecast at xiph.org Betreff: [Icecast] Cannot update xiph repository Hi, I apologise for the naiveness of this question, but I experienced an error when running apt-get update on Debian 9. It’s telling me that it can’t update the xiph repository. Not sure if I should be asking for help about this here, but if not… please let me know where I should take this issue. Any help is appreciated. Damian Get:1 http://security.debian.org/debian-security stretch/updates InRelease [94.3 kB] Ign:2 http://ftp.us.debian.org/debian stretch InRelease Hit:3 http://ftp.us.debian.org/debian stretch-updates InRelease Hit:4 http://ftp.us.debian.org/debian stretch Release Hit:6 http://www.deb-multimedia.org stretch InRelease Get:5 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease [1,526 B] Err:5 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3 multimedia OBS Project <multimedia at build.opensuse.org <mailto:multimedia at build.opensuse.org> > Reading package lists... Done W: GPG error: http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease: The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3 multimedia OBS Project <multimedia at build.opensuse.org <mailto:multimedia at build.opensuse.org> > E: The repository 'http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./ InRelease <http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0%20./%20InRelease> ' is no longer signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.xiph.org/pipermail/icecast/attachments/20200223/e2b5f70f/attachment.html>
Hello, On 23 Feb 2020, at 14:34, Thomas Zumbrunnen wrote:> Hi Damian > > The main reason for this issue is the expired Multimedia signing key > expired for openSUSE OBS Multimedia – aka xiph repository. The > documentation has not been updated as mentioned in Step 2 : > https://wiki.xiph.org/index.php?title=Icecast_Server/Installing_latest_version_(official_Xiph_repositories) > <https://wiki.xiph.org/index.php?title=Icecast_Server/Installing_latest_version_(official_Xiph_repositories)&mobileaction=toggle_view_desktop> > &mobileaction=toggle_view_desktop (btw. The let’s encrypt Cert on > wiki.xiph.org expired as well February 18th 2020 – just ignore the > message in your browser).I’ve updated the certificate, it should work fine now again.> There is already a new key available as mentioned in > https://gitlab.xiph.org/xiph/icecast-server/issues/2381Sorry for this, I forgot to update the key on the website, it should be up to date now!> > [...] >