Invalid sig : updating packages on Ubuntu

‘apt-get update’ returns this error :-

GPG error: https://apt.z.cash bullseye Release: The following signatures were invalid: EXPKEYSIG 70C830C67EB9DCB4 Zcash Master Signing Key (Zcash Electric Coin Company)

2 Likes

We updated the key for the year. Please see Debian Binary Packages Setup — Zcash Documentation 5.3.0 documentation

2 Likes

Those instructions don’t seem to work for Ubuntu 22.04

Here’s what happens…

wget -qO - https://apt.z.cash/zcash.asc | gpg --import

gpg: key 6DEF3BAF272766C0: “Zcash Master Signing Key (Zcash Electric Coin Company) signingkey@z.cash” not changed
gpg: Total number processed: 1
gpg: unchanged: 1

gpg --export 3FE63B67F85EA808DE9B880E6DEF3BAF272766C0 | sudo apt-key add -

Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
OK

apt-get update

Hit:1 Index of /ubuntu jammy InRelease
Hit:2 Index of /ubuntu jammy-security InRelease
Hit:3 Index of /ubuntu jammy-updates InRelease
Hit:4 Index of /ubuntu jammy-backports InRelease
Ign:5 https://apt.z.cash bullseye InRelease
Hit:6 https://apt.z.cash bullseye Release
Err:7 https://apt.z.cash bullseye Release.gpg
The following signatures were invalid: EXPKEYSIG 70C830C67EB9DCB4 Zcash Master Signing Key (Zcash Electric Coin Company) signingkey@z.cash
Reading package lists… Done
W: https://apt.z.cash/dists/bullseye/Release.gpg: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION section in apt-key(8) for details.
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.z.cash bullseye Release: The following signatures were invalid: EXPKEYSIG 70C830C67EB9DCB4 Zcash Master Signing Key (Zcash Electric Coin Company) signingkey@z.cash
W: Failed to fetch https://apt.z.cash/dists/bullseye/Release.gpg The following signatures were invalid: EXPKEYSIG 70C830C67EB9DCB4 Zcash Master Signing Key (Zcash Electric Coin Company) signingkey@z.cash

2 Likes

We ran into this as well and will be posting documents specific to Ubuntu soon since it has some slight differences.

For now :
sudo apt-key export 7EB9DCB4 | sudo gpg --dearmour -o /etc/apt/trusted.gpg.d/zcash.gpg

Should remove the error/warning upon update.

4 Likes