24

The error I am having when trying to update my package list.

W: GPG error: http://download.opensuse.org ./ Release: The following signatures were invalid: KEYEXPIRED 1436387333
E: Some index files failed to download. They have been ignored, or old ones used instead.
8
GPG error: http://download.opensuse.org ./ Release: The following signatures were invalid: KEYEXPIRED 1436387333

This says that your GPG key for that repository has expired, which means one of two things, either your system has the wrong date or the key really expired. For the later, you need to contact the repository maintainer and import the new key (removing the old one, probably), once the repository updates their keys to sign the files.

You can safely ignore these messages if you aren't using packages of these repositories. The message can be removed if you remove the repository from your source.list file/directory.

  • ... suggest adding in confirming that the system clock is at least reasonably correct. If the system thinks its 2020, I bet that'd lead to key expired errors. – derobert Jul 21 '15 at 17:04
27

I don't get the answers above, my system clock was fine. The following worked for me:

sudo apt-key list | grep "expired: "
sudo apt-key adv --keyserver keys.gnupg.net --recv-keys [KEY]

The key being the the part behind the slash: 0000X/<this part is the key>

Or use this one liner:

sudo apt-key list  | grep "expired: " | sed -ne 's|pub .*/\([^ ]*\) .*|\1|gp' | xargs -n1 sudo apt-key adv --keyserver keys.gnupg.net --recv-keys 
7

That ppa has been removed and no longer exists. You must find a different source for the packages installed through the samrog131 ppa.

In the meantime, run the following commands to resolve the situation.

First, to delete the expired key:

sudo apt-key del 1436387333

Then, to delete the ppa:

sudo rm /etc/apt/sources.list.d/samrog131*
sudo apt-get clean
sudo apt-get update

If you need to add a key see here.

sudo apt-get upgrade

You may want to run:

sudo apt-get dist-upgrade

depending on your situation. If you are not sure, see here.

  • This wont solve anything. APT would try to fetch the packages from the PPA again, and fail at it again – Braiam Jul 19 '15 at 0:09
  • @Braiam Actually, it does solve the problem of the 404 error for the missing samrog131 ppa, the one you deleted from the question. – mchid Jul 20 '15 at 21:04
  • We have duplicates that covers that issue already, you didn't answered the question fully, since you ignored the most important part which was the GPG error. Please, do not edit the question again. – Braiam Jul 20 '15 at 21:24
  • @Braiam why not, just to make it look like my answer doesn't solve anything? – mchid Jul 20 '15 at 21:33
  • 1) If the user added the ppa in the sources.list directly, your answer will fail, actually it will fail if add-ppa-repository wasn't used and the OP just named the file differently. 2) If you remove the key, now the warning will be replaced with an error, since the key wasn't found, therefore making more problems. – Braiam Jul 21 '15 at 11:25
2

As displayed earlier First, to delete the expired key:

sudo apt-key del 1436387333 Then go to the site:

http://download.opensuse.org/repositories/home:/sarimkhan/xUbuntu_14.04/

and download "Release.key" Then import the key using the ubuntu14.04 software updater or synaptic package manager.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.