Failed to install provider: openpgp: key expired

[markszabo]

Describe the bug

Since today installing the provider (running terraform init) fails with the following error:

Initializing provider plugins...
- Finding vmware/wavefront versions matching "5.0.1"...
- Installing vmware/wavefront v5.0.1...
╷
│ Error: Failed to install provider
│ 
│ Error while installing vmware/wavefront v5.0.1: error checking signature:
│ openpgp: key expired
╵

Reproduction steps

1. Checkout https://github.com/markszabo/vmware-wavefront-openpgp-key-expired
2. Run terraform init

Expected behavior

Provider can install.

Additional context

No response

[dkuldeep22]

@markszabo what is the terraform version you are using?

I tried reproducing the steps as mentioned above. This is working fine.

dkuldeep@dkuldeepYMD6R terraform-gpg % git clone https://github.com/markszabo/vmware-wavefront-openpgp-key-expired.git
Cloning into 'vmware-wavefront-openpgp-key-expired'...
remote: Enumerating objects: 11, done.
remote: Counting objects: 100% (11/11), done.
remote: Compressing objects: 100% (8/8), done.
remote: Total 11 (delta 0), reused 0 (delta 0), pack-reused 0
Receiving objects: 100% (11/11), done.
dkuldeep@dkuldeepYMD6R terraform-gpg % cd vmware-wavefront-openpgp-key-expired 
dkuldeep@dkuldeepYMD6R vmware-wavefront-openpgp-key-expired % terraform init

Initializing the backend...

Initializing provider plugins...
- Finding vmware/wavefront versions matching "5.0.1"...
- Installing vmware/wavefront v5.0.1...
- Installed vmware/wavefront v5.0.1 (signed by a HashiCorp partner, key ID 6B6B0F38607A2264)

Partner and community providers are signed by their developers.
If you'd like to know more about provider signing, you can read about it here:
https://www.terraform.io/docs/cli/plugins/signing.html

Terraform has created a lock file .terraform.lock.hcl to record the provider
selections it made above. Include this file in your version control repository
so that Terraform can guarantee to make the same selections by default when
you run "terraform init" in the future.

Terraform has been successfully initialized!

You may now begin working with Terraform. Try running "terraform plan" to see
any changes that are required for your infrastructure. All Terraform commands
should now work.

If you ever set or change modules or backend configuration for Terraform,
rerun this command to reinitialize your working directory. If you forget, other
commands will detect it and remind you to do so if necessary.

[markszabo]

Thanks for taking a look at this so quickly. I'm using the latest terraform that hashicorp/setup-terraform installs (v1.6.0) and it is failing in the GitHub workflow as well: https://github.com/markszabo/vmware-wavefront-openpgp-key-expired/actions/runs/6415658330/job/17417936554 (I added you to the repository as contributor. Feel free to push code to tests things there)

[dkuldeep22]

Thanks for inviting for collaboration. i just tried upgrading the terraform version on my local machine from v1.5.7 to v1.6.0. I am able to reproduce this issue. This issue is not coming in just previous version v1.5.7. We are working to fix this issue.

[frodenas]

FYI: https://github.com/hashicorp/terraform/issues/33984

[bwinter]

We are in the process of our key. I should have a new version properly signed and deployed in the coming days.