[Icecast] Cannot update xiph repository

Thomas Zumbrunnen
2020-02-23T13:34:51Z

Hi Damian



The main reason for this issue is the expired Multimedia signing key expired for
openSUSE OBS Multimedia – aka xiph repository. The documentation has not been
updated as mentioned in Step 2 :
https://wiki.xiph.org/index.php?title=Icecast_Server/Installing_latest_version_(official_Xiph_repositories)
<https://wiki.xiph.org/index.php?title=Icecast_Server/Installing_latest_version_(official_Xiph_repositories)&mobileaction=toggle_view_desktop>
&mobileaction=toggle_view_desktop (btw. The let’s encrypt Cert on
wiki.xiph.org expired as well February 18th 2020 – just ignore the message in
your browser). There is already a new key available  as mentioned  in
https://gitlab.xiph.org/xiph/icecast-server/issues/2381





The workaround to solve your issue :

1.	Open a shell and become root
2.	wget -qO -
https://download.opensuse.org/repositories/multimedia:/xiph/CentOS_8/repodata/repomd.xml.key
| sudo apt-key add -



If you dont use sudo, remove this command.



After adding the new signing key, you should be able to install Icecast2 from
the xiph repository.



Regards

Thomas



Von: Icecast <icecast-bounces at xiph.org> Im Auftrag von Damian
Gesendet: Samstag, 22. Februar 2020 15:17
An: icecast at xiph.org
Betreff: [Icecast] Cannot update xiph repository



Hi,





I apologise for the naiveness of this question, but I experienced an error when
running apt-get update on Debian 9.

It’s telling me that it can’t update the xiph repository.





Not sure if I should be asking for help about this here, but if not… please let
me know where I should take this issue.

Any help is appreciated.





Damian













Get:1 http://security.debian.org/debian-security stretch/updates InRelease [94.3
kB]

Ign:2 http://ftp.us.debian.org/debian stretch InRelease

Hit:3 http://ftp.us.debian.org/debian stretch-updates InRelease

Hit:4 http://ftp.us.debian.org/debian stretch Release

Hit:6 http://www.deb-multimedia.org stretch InRelease

Get:5 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./
InRelease [1,526 B]

Err:5 http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./
InRelease

  The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3 multimedia
OBS Project <multimedia at build.opensuse.org <mailto:multimedia at
build.opensuse.org> >

Reading package lists... Done

W: GPG error:
http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./
InRelease: The following signatures were invalid: EXPKEYSIG 77EC2301F23C6AA3
multimedia OBS Project <multimedia at build.opensuse.org
<mailto:multimedia at build.opensuse.org> >

E: The repository
'http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0 ./
InRelease
<http://download.opensuse.org/repositories/multimedia:/xiph/Debian_9.0%20./%20InRelease>
' is no longer signed.

N: Updating from such a repository can't be done securely, and is therefore
disabled by default.

N: See apt-secure(8) manpage for repository creation and user configuration
details.





-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/icecast/attachments/20200223/e2b5f70f/attachment.html>