up vote 10 down vote favorite
2

The error I am having when trying to update my package list.

W: GPG error: http://download.opensuse.org ./ Release: The following signatures were invalid: KEYEXPIRED 1436387333
E: Some index files failed to download. They have been ignored, or old ones used instead.
share|improve this question
up vote 6 down vote accepted 
GPG error: http://download.opensuse.org ./ Release: The following signatures were invalid: KEYEXPIRED 1436387333

This says that your GPG key for that repository has expired, which means one of two things, either your system has the wrong date or the key really expired. Sadly for the later, you can't fix this yourself, unless you import the new key (removing the old one, probably), once the repository updates their keys to sign the files.

You can safely ignore these messages if you aren't using packages of these repositories. The message can be removed if you remove the repository from your source.list file/directory.

share|improve this answer
    
... suggest adding in confirming that the system clock is at least reasonably correct. If the system thinks its 2020, I bet that'd lead to key expired errors. – derobert Jul 21 '15 at 17:04
up vote 7 down vote

I don't get the answers above, my system clock was fine. The following worked for me:

sudo apt-key list | grep "expired: "
sudo apt-key adv --keyserver keys.gnupg.net --recv-keys [KEY]

The key being the the part behind the slash: 0000X/<this part is the key>

Or use this one liner:

sudo apt-key list  | grep "expired: " | sed -ne 's|pub .*/\([^ ]*\) .*|\1|gp' | xargs -n1 sudo apt-key adv --keyserver keys.gnupg.net --recv-keys
share|improve this answer
1  
Thanks, fixed the problem for me with MySQL but used --keyserver pgp.mit.edu. Source: bugs.mysql.com/bug.php?id=85029 – Craig van Tonder Mar 16 '17 at 20:42
up vote 5 down vote

That ppa has been removed and no longer exists. You must find a different source for the packages installed through the samrog131 ppa.

In the meantime, run the following commands to resolve the situation.

First, to delete the expired key:

sudo apt-key del 1436387333

Then, to delete the ppa:

sudo rm /etc/apt/sources.list.d/samrog131*
sudo apt-get clean
sudo apt-get update

If you need to add a key see here.

sudo apt-get upgrade

You may want to run:

sudo apt-get dist-upgrade

depending on your situation. If you are not sure, see here.

share|improve this answer
    
This wont solve anything. APT would try to fetch the packages from the PPA again, and fail at it again – Braiam Jul 19 '15 at 0:09
    
@Braiam Actually, it does solve the problem of the 404 error for the missing samrog131 ppa, the one you deleted from the question. – mchid Jul 20 '15 at 21:04
    
We have duplicates that covers that issue already, you didn't answered the question fully, since you ignored the most important part which was the GPG error. Please, do not edit the question again. – Braiam Jul 20 '15 at 21:24
    
@Braiam why not, just to make it look like my answer doesn't solve anything? – mchid Jul 20 '15 at 21:33
    
1) If the user added the ppa in the sources.list directly, your answer will fail, actually it will fail if add-ppa-repository wasn't used and the OP just named the file differently. 2) If you remove the key, now the warning will be replaced with an error, since the key wasn't found, therefore making more problems. – Braiam Jul 21 '15 at 11:25
up vote 2 down vote

As displayed earlier First, to delete the expired key:

sudo apt-key del 1436387333 Then go to the site:

http://download.opensuse.org/repositories/home:/sarimkhan/xUbuntu_14.04/

and download "Release.key" Then import the key using the ubuntu14.04 software updater or synaptic package manager.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.