0009357: apt repo for nightlies failing signature check

ID	Project	Category	View Status	Date Submitted	Last Update
0009357	Taler	deployment and operations	public	2024-11-27 00:22	2024-12-13 18:15

Reporter	dvn	Assigned To	dvn	Resolution deadline
Implementer		Reviewer
Release signed by		Deployed by
Verifier		Communicator
Data protection authority notification required	No
CSIRT notification required	No
Estimated effort (hours)		Actual effort (hours)	0
Fast-track	No
Work package	none
Priority	urgent	Severity	major	Reproducibility	have not tried
Status	closed	Resolution	fixed
Target Version	0.14	Fixed in Version	0.14

Summary	0009357: apt repo for nightlies failing signature check
Description	Trying to apt-update after setting up the Taler nightly package repo results in error. ``` $ curl -sS https://deb.taler.net/apt-nightly/taler-bookworm-ci.sources -o /etc/apt/sources.list.d/taler.sources $ apt update GPG error: https://deb.taler.net/apt-nightly bookworm InRelease: The following signatures were invalid: EXPKEYSIG 61BB851C184F44CF Taler Packaging Nightly <packaging-nightly@taler.net> The repository 'https://deb.taler.net/apt-nightly bookworm InRelease' is not signed. ``` The signing key has expired.
Tags	No tags attached.

Date Modified	Username	Field	Change
2024-11-27 00:22	dvn	New Issue
2024-11-27 00:22	dvn	Status	new => assigned
2024-11-27 00:22	dvn	Assigned To	=> dvn
2024-11-27 00:24	dvn	Note Added: 0023761
2024-11-27 00:24	dvn	Status	assigned => informing
2024-11-27 00:24	dvn	Resolution	open => fixed
2024-12-13 00:59	Christian Grothoff	Fixed in Version	=> 0.14
2024-12-13 01:00	Christian Grothoff	Target Version	=> 0.14
2024-12-13 18:15	Christian Grothoff	Status	informing => closed

dvn 2024-11-27 00:24 reporter ~0023761	I renewed the key + subkeys, but it was still failing due to the fact that I didn't update the deb822 sources file correctly. The public key must be updated in the file on GV at `/home/aptbuilder/.aptly/public/taler-bookworm-ci.sources`.