Linux packages: OBS GPG key expired

[Ejdamm]

Seems like a key expired yesterday.

Steps to reproduce

1. apt update

W: Failed to fetch http://download.opensuse.org/repositories/home:/dg0yt/Ubuntu_20.04/InRelease  The following signatures were invalid: EXPKEYSIG CD7B217B7CE0AE6A home:dg0yt OBS Project <home:[email protected]>

2. curl -fsSL https://download.opensuse.org/repositories/home:dg0yt/Ubuntu_20.04/Release.key | gpg

pub   rsa2048 2014-05-11 [SC] [expired: 2020-11-21]
      5D2123C57FA7BDCC60B77A67CD7B217B7CE0AE6A
uid           home:dg0yt OBS Project <home:[email protected]>

Configuration

Operating System: ubuntu 20.04

[dg0yt]

The OBS website has instructions how to add the new/current key. However, on my computer I just learned that it doesn't tell the whole story: The old key is not stored in /etc/apt/trusted.gpg.d/home_dg0yt.gpg but in the central file /etc/apt/trusted.gpg:

$ sudo apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2014-05-11 [SC] [expired: 2020-11-21]
      5D21 23C5 7FA7 BDCC 60B7  7A67 CD7B 217B 7CE0 AE6A
uid        [ expired] home:dg0yt OBS Project <home:[email protected]>
[...]
/etc/apt/trusted.gpg.d/home_dg0yt.gpg
-------------------------------------
pub   rsa2048 2014-05-11 [SC] [expires: 2023-01-16]
      5D21 23C5 7FA7 BDCC 60B7  7A67 CD7B 217B 7CE0 AE6A
uid        [ unknown] home:dg0yt OBS Project <home:[email protected]>

This practice is now deprecated (cf. add in man apt-key). So we need to cleanup first, and the re-add the key as recommended. The full list of commands for copy-and-paste:

sudo apt-key del "5D21 23C5 7FA7 BDCC 60B7  7A67 CD7B 217B 7CE0 AE6A"
curl -fsSL https://download.opensuse.org/repositories/home:dg0yt/Ubuntu_20.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_dg0yt.gpg > /dev/null
sudo apt update