Problem with GPG key installing OpenProject

[kfk]

I am currently in the process of trying to install OpenProject on a fresh instance of UCS 5.0

When I run ‘univention-app install openproject’ I get errors looking like this:

W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release' is not signed.

When I run ‘apt-key list’ I get this:

/etc/apt/trusted.gpg.d/univention-archive-key-ucs-3x.gpg
--------------------------------------------------------
pub   dsa1024 2011-10-05 [SC] [expired: 2018-10-03]
      3550 FB4C C61F DB88 D334  E31A 1DD6 7AFB 2CBD A4B0
uid           [ expired] Univention Corporate Server 3.x Archive Key <packages@univention.de>

/etc/apt/trusted.gpg.d/univention-archive-key-ucs-4x.gpg
--------------------------------------------------------
pub   rsa4096 2014-06-30 [SC] [expired: 2021-06-28]
      6B6E 7E32 59A9 F44F 1452  D1BE 3660 2BA8 6B8B FD3C
uid           [ expired] Univention Corporate Server 4.x <packages@univention.de>

/etc/apt/trusted.gpg.d/univention-archive-key-ucs-5x.gpg
--------------------------------------------------------
pub   rsa4096 2020-05-08 [SC] [expires: 2027-05-07]
      8321 745B B32A 82C7 5BBD  4BC2 D293 E501 A055 F562
uid           [ unknown] Univention Corporate Server 5.x <packages@univention.de>

I have been looking at this post:

UCS 4.x apt key expired, no package installation,update, app installation is possible

Please check the article for updates, an overview can be found below. 2021-06-28 15:00 CEST original article 2021-06-28 19:00 CEST fix for UCS versions >= 4.4-4 errata 605, manual workaround for older systems required, see below. 2021-06-28 15:00 The apt key shipped with UCS 4 has expired. On UCS 4.x no package installations and updates are currently possible, as well as UCS Release updates and App installations. On an affected UCS system the problem can be seen when e.g. updating the apt pa…

And tried the solution, but only the dirty workaround works…

If you can advice, I’d much appreciate
Noa

[lutz.willek]

Exact the same problem here, except here 4.4-8 errata1072 is used. It seems there is indeed a installation problem. The (condensed) output of the installation:

root@web01:~# univention-app install openproject
Going to install OpenProject (11.3.2)
Password for Administrator:
Configuring 4.3/openproject=11.3.2

[...snipp ...]

Installing packages for openproject=11.3.2
Filling the App Center file cache from our local archive /usr/share/univention-appcenter/archives/appcenter.software-univention.de/4.3/all.tar.gz!
Downloading "https://appcenter.software-univention.de/meta-inf/categories.ini"...
Downloading ...

[...snipp ...]


File: /etc/apt/mirror.list

File: /etc/apt/sources.list.d/15_ucs-online-version.list

Ign:1 https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/all/ InRelease

[...snipp ...]

Ign:144 https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/amd64/ Release.gpg
Reading package lists...
W: GPG error: https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/all/ Release' is not signed.
W: GPG error: https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20210705143001/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-0/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-4/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-4/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-4/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-4/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-5/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-5/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.0/maintained 4.0-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.0/maintained 4.0-5/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
Could not install the app packages
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-0/all/ Release' is not signed.
Something went wrong while installing the app
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
Setup failed
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-4/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-4/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-4/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-4/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-5/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-5/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.1/maintained 4.1-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.1/maintained 4.1-5/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-0/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-4/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-4/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-4/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-4/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-5/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-5/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.2/maintained 4.2-5/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-0/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-0/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-0/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-0/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-1/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-1/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-1/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-1/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-2/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-2/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-2/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-2/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-3/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-3/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained 4.3-3/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained 4.3-3/amd64/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/all/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/all/ Release' is not signed.
W: GPG error: https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562
E: The repository 'https://updates.software-univention.de/4.3/maintained/component 4.3-3-errata/amd64/ Release' is not signed.
Could not install the app packages

Something went wrong while installing the app

Setup failed

Setup script failed!
Aborting...
Going to remove OpenProject (11.3.2)

[...snipp ...]

As workaround, the following works fo me as well:

root@web01:~# ucr set update/secure_apt='no'; univention-app install openproject

So it seems there is the new GPG added recently keys is missing or not copied to the docker container docker.software-univention.de/ucs-appbox-amd64:4.3-3?

How can we debug this further, and what can we do so that this GPG error no longer occurs during installation?

[jluttermann]

The expired UCS keys are re-signed with the UCS5 key. The installation of openproject should work again.
For more informations see here ( UCS 4.x key expired )

[kfk]

Awesome, thank you to whom ever took the time to fix that will test now

[kfk]

Tested, works. Thank you

[christianwo]

The solution did not work for me. apt-get update is all fine but when I want to upgrade Openproject from 11.2.1 to 12.0.7 (UCS is 4.4-9 errata1229) updater log throws many errors in kind of:

An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://updates.software-univention.de/4.3/maintained 4.3-5/amd64/ Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY D293E501A055F562

The repository 'https://appcenter.software-univention.de/univention-repository/4.3/maintained/component openproject_20220126133338/amd64/ Release' is not signed.

The workaround with setting apt to non secure did not work neither.

[PinguSys]

After trying to apply all the suggested workarounds, solutions and hot fixes, I stll get the error about the missing Public Key D293E501A055F562.
I’m running 4.4.9 errata 1277 and I am stuck here because I can’t update OpenProject.

I need some advice urgently…
Thanks in Advance