linuxmint / mintupdate

The Linux Mint Update Manager
320 stars 156 forks source link

Authentication keys not shown with "signed-by" option, repository not shown when using *.sources file #763

Open State-Of-Joshing-Gentle-Peevishness opened 2 years ago

State-Of-Joshing-Gentle-Peevishness commented 2 years ago

Describe the bug When saving authentication keys of additional repositories to a location outside the apt-key area (using signed-by=<path-to-keyring.gpg> in the corresponding sources entry), the authentication keys are not shown under software sources > authentication keys. In addition, when the sources entry is a *.sources file, the repository is not shown under software sources > additional repositories

To Reproduce Steps to reproduce the behavior:

  1. Using QGIS repository as an example: https://www.qgis.org/en/site/forusers/alldownloads.html#debian-ubuntu
  2. If you follow the instructions, it will generate/use the folder /etc/apt/keyrings/ to safe the signing key and create the sources-file /etc/apt/sources.list.d/qgis.sources with Signed-By: /etc/apt/keyrings/qgis-archive-keyring.gpg
  3. After following the instructions, the update manager doesn't show the signing key under software sources > authentication keys and doesn't show the repository under software sources > additional repositories
  4. The signing key is also not shown if it's path is referenced in a *.list file with the singed-by option

Expected behavior The signing key and the repository should be shown.

Distribution:

Software version: 5.8.8

Additional context As far as I understand is apt-key deprecated for security reasons and now signing keys must not be placed anymore in /etc/apt/trusted.gpg.d or loaded by apt-key add, but be referenced with "signed-by" option. Debian wiki reference: https://wiki.debian.org/DebianRepository/UseThirdParty