search

ProtonVPN / proton-vpn-gtk-app

Official ProtonVPN Linux app
https://protonvpn.com/download-linux
GNU General Public License v3.0
152 stars 20 forks source link

Fedora 38 & 39: cannot install protonvpn (certificate is not live error) #12

Closed firepol closed 7 months ago

firepol commented 7 months ago

Hi,

my OS: Linux Fedora 38

Previously I had Fedora 36, I upgraded to 37 and 38. During the upgrade I had to disable/remove the protonvpn repo Then I tried to (re-)install protonvpn following this guide https://protonvpn.com/support/official-linux-vpn-fedora/ After downloading the RPM, I do:

sudo dnf install ./protonvpn-stable-release-1.0.1-2.noarch.rpm

I'm getting this error:

sudo dnf install ./protonvpn-stable-release-1.0.1-2.noarch.rpm
Last metadata expiration check: 0:19:09 ago on Sun 19 Nov 2023 04:12:08 PM CET.
Dependencies resolved.
======================================================================================================================================================================================================
 Package                                                    Architecture                             Version                                     Repository                                      Size
======================================================================================================================================================================================================
Installing:
 protonvpn-stable-release                                   noarch                                   1.0.1-2                                     @commandline                                   7.1 k

Transaction Summary
======================================================================================================================================================================================================
Install  1 Package

Total size: 7.1 k
Installed size: 280  
Is this ok [y/N]: y
Downloading Packages:
Running transaction check
Transaction check succeeded.
Running transaction test
RPM: error: Verifying a signature using certificate A88441BD4864F95BEE08E63A71EB474019940E11 (Proton Technologies AG <opensource@proton.me>):
RPM:   1. Certificiate 71EB474019940E11 invalid: certificate is not alive
RPM:       because: The primary key is not live
RPM:       because: Expired on 2022-10-28T13:52:11Z
RPM:   2. Key 71EB474019940E11 invalid: key is not alive
RPM:       because: The primary key is not live
RPM:       because: Expired on 2022-10-28T13:52:11Z
Error: Transaction test error:
  package protonvpn-stable-release-1.0.1-2.noarch does not verify: Header V4 RSA/SHA256 Signature, key ID 19940e11: NOTTRUSTED

I upgraded my system to Fedora 39, same issue when I try installing the RPM. So I have no clue what to do to make this work. Ideas? Thank you.

Please complete the following checklist (by adding [x]):

firepol commented 7 months ago

Update, found how to fix this (finally)

I had to find the expired key and remove it:

List keys with "Proton"

rpm -q gpg-pubkey --qf '%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n' | grep Proton

In my case it showed: gpg-pubkey-19940e11-5f99778b Proton Technologies AG <opensource@proton.me> public key

Remove the expired key, in my case this one:

sudo rpm -e gpg-pubkey-19940e11-5f99778b

After this I could install the rpm and continue the installation...