I’m trying to update apt on Debian and GPG claims the insync key is expired. Also, it states that the repo is not signed.
My /etc/apt/sources.list.d/insync.list is:
deb [signed-by=/usr/share/keyrings/insynchq.gpg] http://apt.insync.io/debian trixie non-free contrib
Updated the key with:
wget -O- “https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xa684470caccaf35c” | gpg --dearmor | tee -a /usr/share/keyrings/insynchq.gpg > /dev/null
–2024-09-15 15:24:01-- https://keyserver.ubuntu.com/pks/lookup?op=get&search=0xa684470caccaf35c
Resolving keyserver.ubuntu.com (keyserver.ubuntu.com)… 185.125.188.26, 185.125.188.27, 2620:2d:4000:1007::d43, …
Connecting to keyserver.ubuntu.com (keyserver.ubuntu.com)|185.125.188.26|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: unspecified [application/pgp-keys]
Saving to: ‘STDOUT’
[ <=> ] 4.35K --.-KB/s in 0.002s2024-09-15 15:24:02 (2.57 MB/s) - written to stdout [4458]
ls -l /usr/share/keyrings/insynchq.gpg
-rw-r–r-- 1 root root 9260 Sep 15 15:24 /usr/share/keyrings/insynchq.gpg
date
Sun Sep 15 03:24:16 PM PDT 2024
Then tried apt update:
apt update
…
Err:25 http://apt.insync.io/debian trixie InRelease
The following signatures were invalid: EXPKEYSIG A684470CACCAF35C Insynchq Inc services@insynchq.com
…
Warning: GPG error: http://apt.insync.io/debian trixie InRelease: The following signatures were invalid: EXPKEYSIG A684470CACCAF35C Insynchq Inc <service
s@insynchq.com>
Error: The repository ‘http://apt.insync.io/debian trixie InRelease’ is not signed.
Notice: Updating from such a repository can’t be done securely, and is therefore disabled by default.
Notice: See apt-secure(8) manpage for repository creation and user configuration details.