Problem with GPG key installing OpenProject

I am currently in the process of trying to install OpenProject on a fresh instance of UCS 5.0

When I run ‘univention-app install openproject’ I get errors looking like this:

W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release' is not signed.

When I run ‘apt-key list’ I get this:

/etc/apt/trusted.gpg.d/univention-archive-key-ucs-3x.gpg
--------------------------------------------------------
pub   dsa1024 2011-10-05 [SC] [expired: 2018-10-03]
      3550 FB4C C61F DB88 D334  E31A 1DD6 7AFB 2CBD A4B0
uid           [ expired] Univention Corporate Server 3.x Archive Key <packages@univention.de>

/etc/apt/trusted.gpg.d/univention-archive-key-ucs-4x.gpg
--------------------------------------------------------
pub   rsa4096 2014-06-30 [SC] [expired: 2021-06-28]
      6B6E 7E32 59A9 F44F 1452  D1BE 3660 2BA8 6B8B FD3C
uid           [ expired] Univention Corporate Server 4.x <packages@univention.de>

/etc/apt/trusted.gpg.d/univention-archive-key-ucs-5x.gpg
--------------------------------------------------------
pub   rsa4096 2020-05-08 [SC] [expires: 2027-05-07]
      8321 745B B32A 82C7 5BBD  4BC2 D293 E501 A055 F562
uid           [ unknown] Univention Corporate Server 5.x <packages@univention.de>

I have been looking at this post:

And tried the solution, but only the dirty workaround works…

If you can advice, I’d much appreciate :slight_smile:
Noa

Exact the same problem here, except here 4.4-8 errata1072 is used. It seems there is indeed a installation problem. The (condensed) output of the installation:

root@web01:~# univention-app install openproject
Going to install OpenProject (11.3.2)
Password for Administrator:
Configuring 4.3/openproject=11.3.2

[...snipp ...]

Installing packages for openproject=11.3.2
Filling the App Center file cache from our local archive /usr/share/univention-appcenter/archives/appcenter.software-univention.de/4.3/all.tar.gz!
Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"...
Downloading ...

[...snipp ...]


File: /etc/apt/mirror.list

File: /etc/apt/sources.list.d/15_ucs-online-version.list

Ign:1 https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/all/ InRelease

[...snipp ...]

Ign:144 https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/amd64/ Release.gpg
Reading package lists...
W: GPG error: https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/all/ Release' is not signed.
W: GPG error: https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-0/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-4/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-4/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-4/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-4/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-5/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-5/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-5/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
Could not install the app packages
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-0/all/ Release' is not signed.
Something went wrong while installing the app
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
Setup failed
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-4/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-4/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-4/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-4/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-5/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-5/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-5/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-0/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-4/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-4/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-4/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-4/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-5/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-5/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-0/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/amd64/ Release' is not signed.
Could not install the app packages

Something went wrong while installing the app

Setup failed

Setup script failed!
Aborting...
Going to remove OpenProject (11.3.2)

[...snipp ...]

As workaround, the following works fo me as well:

root@web01:~# ucr set update/secure_apt='no'; univention-app install openproject

So it seems there is the new GPG added recently keys is missing or not copied to the docker container docker.software-univention.de/ucs-appbox-amd64:4.3-3?

How can we debug this further, and what can we do so that this GPG error no longer occurs during installation?

1 Like

The expired UCS keys are re-signed with the UCS5 key. The installation of openproject should work again.
For more informations see here ( UCS 4.x key expired )

1 Like

Awesome, thank you to whom ever took the time to fix that will test now :slight_smile:

Tested, works. Thank you :slight_smile:

The solution did not work for me. apt-get update is all fine but when I want to upgrade Openproject from 11.2.1 to 12.0.7 (UCS is 4.4-9 errata1229) updater log throws many errors in kind of:

An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://updates.software-univention.de/4.3/maintained 4.3-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
The repository 'https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20220126133338/amd64/ Release' is not signed.

The workaround with setting apt to non secure did not work neither.

After trying to apply all the suggested workarounds, solutions and hot fixes, I stll get the error about the missing Public Key D293E501A055F562.
I’m running 4.4.9 errata 1277 and I am stuck here because I can’t update OpenProject.

I need some advice urgently…
Thanks in Advance