Arch Linux

rwd3

Member

Registered: 2023-08-10

Posts: 8

linux-lts-headers-6.12.13-1.1-pentium4 signed with expired key

When I tried to update I got this error:

File /var/cache/pacman/pkg/linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst is corrupted (invalid or corrupted package).

When I check it manually it seems this package is signed with an expired key.:

[user1@arch-server sigtest]$ gpg --verify linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst.sig linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst
gpg: Signature made Mon 17 Feb 2025 08:00:53 PM CET
gpg:                using RSA key 16194A82231E9EF823562181C8E8F5A0AF9BA7E7
gpg: Can't check signature: No public key
[user1@arch-server sigtest]$ gpg --keyserver hkp://keyserver.ubuntu.com --recv-keys 16194A82231E9EF823562181C8E8F5A0AF9BA7E7
gpg: /home/user1/.gnupg/trustdb.gpg: trustdb created
gpg: key C8E8F5A0AF9BA7E7: public key "Andreas Baumann (sign) <mail@andreasbaumann.cc>" imported
gpg: Total number processed: 1
gpg:               imported: 1
[user1@arch-server sigtest]$ gpg --verify linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst.sig linux-lts-headers-6.12.13-1.1-pentium4.pkg.tar.zst
gpg: Signature made Mon 17 Feb 2025 08:00:53 PM CET
gpg:                using RSA key 16194A82231E9EF823562181C8E8F5A0AF9BA7E7
gpg: Good signature from "Andreas Baumann (sign) <mail@andreasbaumann.cc>" [expired]
gpg: Note: This key has expired!
Primary key fingerprint: 1619 4A82 231E 9EF8 2356  2181 C8E8 F5A0 AF9B A7E7

I know I can set siglevel to 'never' to get around it, but will this package be signed with an up-to-date key sometime in the future?

abaumann

Administrator

From: Zurich

Registered: 2019-11-14

Posts: 1,073

Website

Re: linux-lts-headers-6.12.13-1.1-pentium4 signed with expired key

Does it still happen, if you upgrade the archlinux32-kering first?