<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On Feb-7-2022 03:02PM, Ralph Little
      wrote:<br>
    </div>
    <blockquote type="cite"
cite="mid:CAFNXweM002YcxT3vDp3CFOq=hPbY8aPQQaaAGovJ-Yw4HErT-A@mail.gmail.com">
      <meta http-equiv="content-type" content="text/html; charset=UTF-8">
      <div dir="ltr">
        <div dir="ltr">Hi,<br>
        </div>
        <br>
        <div class="gmail_quote">
          <div dir="ltr" class="gmail_attr">On Mon, Feb 7, 2022 at 11:59
            AM -pj <<a href="mailto:pj.world@gmx.com"
              moz-do-not-send="true" class="moz-txt-link-freetext">pj.world@gmx.com</a>>
            wrote:<br>
          </div>
          <blockquote class="gmail_quote" style="margin:0px 0px 0px
            0.8ex;border-left:1px solid
            rgb(204,204,204);padding-left:1ex">
            <div>
              <p>Hello, I am using Linux Mint 20.2 Uma 64-bit with Mate
                desktop on my computer. Today I updated the machine in
                terminal as superuser by passing the following command <b>apt-get
                  update && apt-get upgrade </b>. <br>
              </p>
              <p>1. I received the following invalid signature key
                message output as follows:<br>
              </p>
              Ign:1 <a href="http://packages.linuxmint.com"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://packages.linuxmint.com</a>
              uma InRelease<br>
              Hit:2 <a href="http://packages.linuxmint.com"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://packages.linuxmint.com</a>
              uma Release                                <br>
              Hit:3 <a href="http://security.ubuntu.com/ubuntu"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://security.ubuntu.com/ubuntu</a>
              focal-security InRelease               <br>
              Hit:4 <a href="http://archive.ubuntu.com/ubuntu"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://archive.ubuntu.com/ubuntu</a>
              focal InRelease                         <br>
              Hit:5 <a href="http://archive.canonical.com/ubuntu"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://archive.canonical.com/ubuntu</a>
              focal InRelease                      <br>
              Hit:6 <a
                href="http://ppa.launchpad.net/sane-project/sane-release/ubuntu"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://ppa.launchpad.net/sane-project/sane-release/ubuntu</a>
              focal InRelease<br>
              Hit:7 <a href="https://repo.skype.com/deb"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">https://repo.skype.com/deb</a>
              stable InRelease                              <br>
              Hit:8 <a href="http://archive.ubuntu.com/ubuntu"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://archive.ubuntu.com/ubuntu</a>
              focal-updates InRelease                 <br>
              Hit:10 <a href="http://archive.ubuntu.com/ubuntu"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://archive.ubuntu.com/ubuntu</a>
              focal-backports InRelease<br>
              Get:11 <a
                href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04</a> 
              InRelease [1,509 B]<br>
              Err:11 <a
                href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04</a> 
              InRelease<br>
                The following signatures were invalid: EXPKEYSIG
              23E07629B9E3C9E4 home:pzz OBS Project <a
                href="mailto:home:pzz@build.opensuse.org"
                target="_blank" moz-do-not-send="true"><home:pzz@build.opensuse.org></a><br>
              Reading package lists... Done<br>
              W: GPG error: <a
                href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04</a> 
              InRelease: The following signatures were invalid:
              EXPKEYSIG 23E07629B9E3C9E4 home:pzz OBS Project <a
                href="mailto:home:pzz@build.opensuse.org"
                target="_blank" moz-do-not-send="true"><home:pzz@build.opensuse.org></a><br>
              E: The repository '<a
                href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04"
                target="_blank" moz-do-not-send="true"
                class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04</a> 
              InRelease' is not signed.<br>
              N: Updating from such a repository can't be done securely,
              and is therefore disabled by default.<br>
              N: See apt-secure(8) manpage for repository creation and
              user configuration details.<br>
              <p><br>
              </p>
              <p>2. I am using the openSUSE build service to aquire a
                prebuilt binary package of sane-airscan and have the
                following sources entry added in Update Manager ->
                Software Sources -> deb <a
href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04/"
                  target="_blank" moz-do-not-send="true"
                  class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04/</a>
                /</p>
              <p>3. I typically update the desktop here every few days
                and have had no signature issues for quite some time.</p>
              <p>4. I did attempt the following by using GUI: Update
                Manager -> Software Sources -> Maintenance ->
                Add missing keys <br>
              </p>
              <p>5. I then attempted to once again update APT cache
                within update manager (not bash terminal this time) with
                the following error output: <b>Failed to download
                  repository information </b>the following dialog is
                shown below this message -> W:GPG error: <a
                  href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04"
                  target="_blank" moz-do-not-send="true"
                  class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04</a> 
                InRelease: The following signatures were invalid:
                EXPKEYSIG 23E07629B9E3C9E4 home:pzz OBS Project <a
                  href="mailto:home:pzz@build.opensuse.org"
                  target="_blank" moz-do-not-send="true"><home:pzz@build.opensuse.org></a>,
                E:The repository '<a
                  href="http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04"
                  target="_blank" moz-do-not-send="true"
                  class="moz-txt-link-freetext">http://download.opensuse.org/repositories/home:/pzz/xUbuntu_20.04</a> 
                InRelease' is not signed.</p>
              <p>I am wondering of what is the best step to proceed with
                this matter? I understand that I could possibly disable
                the repository quite easily in update manager. Then I
                would no longer receive updates for sane-airscan though.
                I thank you for help with this if able.</p>
              <p><br>
              </p>
            </div>
          </blockquote>
          <div>sane-airscan is not part of the SANE project but a
            project of Alexander Pevsner, although I am aware that he
            does frequent this forum :D</div>
          <div><br>
          </div>
          <div>You should probably open an issue here: <a
              href="https://github.com/alexpevzner/sane-airscan"
              moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/alexpevzner/sane-airscan</a></div>
          <div><br>
          </div>
          <div>Cheers,</div>
          <div>Ralph<br>
          </div>
        </div>
      </div>
    </blockquote>
    <p>Thank you for pointing me to the link above at github. I see that
      one has opened an issue with the following topic there already. <br>
    </p>
    <p>Debian: key expired  at OBS #212</p>
    <p>Best Regards<br>
    </p>
    <h1 class="gh-header-title mb-2 lh-condensed f1 mr-0 flex-auto
      wb-break-word"><br>
      <span class="js-issue-title markdown-title"></span></h1>
    <h1 class="gh-header-title mb-2 lh-condensed f1 mr-0 flex-auto
      wb-break-word"><span class="js-issue-title markdown-title"><br>
      </span><span class="f1-light color-fg-muted"></span> </h1>
  </body>
</html>