IntelMQ manager/API from intelmq_api.serve import __hug_wsgi__ about intelmq

[sebix]

@mariuskarotkis
The current key expires in two years:

$ curl -L https://download.opensuse.org/repositories/home:sebix:intelmq:unstable/xUbuntu_20.04/Release.key 2> /dev/null | gpg --show-key - | grep expire
pub   rsa2048 2020-07-03 [SC] [expires: 2024-11-08]

You may need to re-import the key.

[sebix]

I re-built a package to re-create the repository:

curl -L https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_20.04/Release.key 2> /dev/null | gpg --show-key - | grep expire

You may now get an update for package without any changes.

[sebix]

In #2243 a similar error was reported

[mariuskarotkis]

@sebix
https://software.opensuse.org/download.html?project=home:sebix:intelmq&package=intelmq

Ubuntu 20.04

# echo 'deb http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_20.04/ /' | sudo tee /etc/apt/sources.list.d/home:sebix:intelmq.list
# curl -fsSL https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_20.04/Release.key | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/home_sebix_intelmq.gpg > /dev/null
# sudo apt update

Get:1 http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_20.04  InRelease [1,562 B]
Hit:2 http://lt.archive.ubuntu.com/ubuntu focal InRelease
Hit:3 http://lt.archive.ubuntu.com/ubuntu focal-updates InRelease
Err:1 http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_20.04  InRelease
  The following signatures were invalid: EXPKEYSIG E811A89C85E36691 home:sebix:intelmq OBS Project <home:sebix:[email protected]>
Hit:4 http://lt.archive.ubuntu.com/ubuntu focal-backports InRelease
Hit:5 http://lt.archive.ubuntu.com/ubuntu focal-security InRelease
Hit:6 http://repo.zabbix.com/zabbix/6.0/ubuntu focal InRelease
Reading package lists... Done
W: GPG error: http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_20.04  InRelease: The following signatures were invalid: EXPKEYSIG E811A89C85E36691 home:sebix:intelmq OBS Project <home:sebix:[email protected]>
E: The repository 'http://download.opensuse.org/repositories/home:/sebix:/intelmq/xUbuntu_20.04  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

# sudo apt-key list | grep "expired: "

pub   rsa2048 2020-07-23 [SC] [expired: 2022-10-05]

[ndnikolaev]

Is there any chance key to be updated?

[laciKE]

curl -L https://download.opensuse.org/repositories/home:sebix:intelmq:unstable/xUbuntu_20.04/Release.key 2> /dev/null | gpg --show-key - | grep expire

@sebix thanks, this helps. However, it uses home:sebix:intelmq:unstable repository, while the documentation still references the home:sebix:intelmq repository, which has the expired key:

curl -L https://download.opensuse.org/repositories/home:sebix:intelmq/xUbuntu_20.04/Release.key 2> /dev/null | gpg --show-key - | grep expire
pub   rsa2048/0xE811A89C85E36691 2020-07-23 [SC] [expired: 2022-10-05]

[sebix]

The API was in the meantime also migrated from hug to fastapi