How to renew expired PowerDNS repository key

Written by Claudio Kuenzler - 0 comments

Published on May 22nd 2024 - Listed in PowerDNS Linux

---

A while ago the GPG key signing the PowerDNS packages expired. If the new key was not updated, apt would throw an error:

root@powerdns:~# apt-get update
Hit:1 http://ch.archive.ubuntu.com/ubuntu focal InRelease
Hit:2 http://ch.archive.ubuntu.com/ubuntu focal-updates InRelease
Hit:3 http://repo.powerdns.com/ubuntu focal-auth-45 InRelease
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease
Err:3 http://repo.powerdns.com/ubuntu focal-auth-45 InRelease
  The following signatures were invalid: EXPKEYSIG 1B0C6205FD380FBB PowerDNS Release Signing Key <powerdns.support@powerdns.com>
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://repo.powerdns.com/ubuntu focal-auth-45 InRelease: The following signatures were invalid: EXPKEYSIG 1B0C6205FD380FBB PowerDNS Release Signing Key <powerdns.support@powerdns.com>
W: Failed to fetch http://repo.powerdns.com/ubuntu/dists/focal-auth-45/InRelease  The following signatures were invalid: EXPKEYSIG 1B0C6205FD380FBB PowerDNS Release Signing Key <powerdns.support@powerdns.com>
W: Some index files failed to download. They have been ignored, or old ones used instead.

The PowerDNS repository mentions to update the key from the Ubuntu key server using the apt-key command. But if your PowerDNS server sits behind a proxy, there could be communication problems (because hkp is not http).

To manually download and install the new key you can run this:

root@powerdns:~# curl -s http://repo.powerdns.com/FD380FBB-pub.asc | apt-key add -
OK

Note: If the server is behind a HTTP proxy, define the proxy prior to the curl command above:

root@powerdns:~# export http_proxy=http://myproxy.example.com:8888

The repo update now works again and updates can be installed:

root@powerdns:~# apt-get update
Hit:1 http://ch.archive.ubuntu.com/ubuntu focal InRelease
Hit:2 http://ch.archive.ubuntu.com/ubuntu focal-updates InRelease          
Hit:3 http://repo.powerdns.com/ubuntu focal-auth-45 InRelease              
Hit:4 http://security.ubuntu.com/ubuntu focal-security InRelease           
Reading package lists... Done

Add a comment

Show form to leave a comment

Comments (newest first)

No comments yet.