quadrantsec / ppa

This is the PPA area for Sagan, Meer and other Quadrant projecrts!
GNU General Public License v2.0
2 stars 0 forks source link

PPA for Debian doesn't work due to key change issues. #1

Open k9io opened 1 week ago

k9io commented 1 week ago

Debian and I assume Ubuntu have changed the way there keys storage. When I follow instructions I get the follow errors:

The following signatures were invalid: EXPKEYSIG 1BEDBB2BFF0044F2 Quadrant Information Security soc@quadrantsec.com Reading package lists... Done W: https://quadrantsec.github.io/ppa/debian/./InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details. W: GPG error: https://quadrantsec.github.io/ppa/debian ./ InRelease: The following signatures were invalid: EXPKEYSIG 1BEDBB2BFF0044F2 Quadrant Information Security soc@quadrantsec.com E: The repository 'https://quadrantsec.github.io/ppa/debian ./ InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details. root@Test-Box:~# cat /etc/apt/sources.list.d/quadrantsec.list^C

Key storage moved to /usr/share/keyrings:

Instead of the client running "apt-key", this seemed to work for me and my testing:

curl -SsL http://download.k9.io/k9-ssh/KEY.gpg | gpg --dearmour -o /usr/share/keyrings/k9-ssh.gpg

Then I could cleanly apt-get. I also followed this: https://assafmo.github.io/2019/05/02/ppa-repo-hosted-on-github.html

k9io commented 1 week ago

This is Champ BTW. :)