Neo4j: Expired key for debian.neo4j.org

[Shib4]

I have an issue while following the documentation. It seems the key used to sign the packages is expired.

• Operating system: Ubuntu 16.04

root@neo4j:~# wget -qO - https://debian.neo4j.org/neotechnology.gpg.key | sudo apt-key add -
OK

root@neo4j:~# echo 'deb https://debian.neo4j.org/repo stable/' | sudo tee -a /etc/apt/sources.list.d/neo4j.list
deb https://debian.neo4j.org/repo stable/

root@neo4j:~# apt update
Hit:1 http://archive.ubuntu.com/ubuntu bionic InRelease
Hit:2 http://archive.ubuntu.com/ubuntu bionic-updates InRelease                                                                                     
Hit:3 http://archive.ubuntu.com/ubuntu bionic-backports InRelease                                                                                   
Hit:4 http://security.ubuntu.com/ubuntu bionic-security InRelease                                                             
Ign:5 https://debian.neo4j.org/repo stable/ InRelease                                            
Get:6 https://debian.neo4j.org/repo stable/ Release [1479 B]
Get:7 https://debian.neo4j.org/repo stable/ Release.gpg [819 B]
Ign:7 https://debian.neo4j.org/repo stable/ Release.gpg
Reading package lists... Done 
W: GPG error: https://debian.neo4j.org/repo stable/ Release: The following signatures were invalid: BADSIG 26C95CF201182252 Neo Technology Admins <[email protected]>
E: The repository 'https://debian.neo4j.org/repo stable/ Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

root@neo4j:~# apt-key list 26C95CF201182252
pub   rsa4096 2014-10-28 [SC] [expired: 2019-10-27]
      66D3 4E95 1A8C 53D9 0242  132B 26C9 5CF2 0118 2252
uid           [ expired] Neo Technology Admins <[email protected]>

[jennyowen]

@Shib4 @achantavy The key is now updated. You can redo
wget -O - https://debian.neo4j.org/neotechnology.gpg.key | sudo apt-key add -

or to update the apt keys list from the keyserver:
sudo apt-key adv --recv-keys --keyserver keys.gnupg.net D37F5F19 01182252

Could you try that and let me know if it worked?

[Shib4]

@jennyowen I confirm you it works now.

root@neo4j:~# wget -qO - https://debian.neo4j.org/neotechnology.gpg.key | sudo apt-key add -
OK

root@neo4j:~# echo 'deb https://debian.neo4j.org/repo stable/' | sudo tee /etc/apt/sources.list./neo4j.list
deb https://debian.neo4j.org/repo stable/

root@neo4j:~# apt update
Hit:1 http://archive.ubuntu.com/ubuntu bionic InRelease
Get:2 http://archive.ubuntu.com/ubuntu bionic-updates InRelease [88.7 kB]                                                                                                          
Get:3 http://archive.ubuntu.com/ubuntu bionic-backports InRelease [74.6 kB]                                                                                                        
Get:4 http://security.ubuntu.com/ubuntu bionic-security InRelease [88.7 kB]                                                          
Get:5 http://archive.ubuntu.com/ubuntu bionic/universe amd64 Packages [8570 kB]                                                                   
Ign:6 https://debian.neo4j.org/repo stable/ InRelease                                                                
Get:7 https://debian.neo4j.org/repo stable/ Release [1479 B]                                                         
Get:8 https://debian.neo4j.org/repo stable/ Release.gpg [819 B]                                     
Get:9 http://archive.ubuntu.com/ubuntu bionic/universe Translation-en [4941 kB]                        
Get:10 https://debian.neo4j.org/repo stable/ Packages [55.2 kB]                                                                               
Get:11 http://security.ubuntu.com/ubuntu bionic-security/main amd64 Packages [541 kB]                               
Get:12 http://archive.ubuntu.com/ubuntu bionic/multiverse amd64 Packages [151 kB]                                         
Get:13 http://archive.ubuntu.com/ubuntu bionic/multiverse Translation-en [108 kB]                                           
Get:14 http://archive.ubuntu.com/ubuntu bionic-updates/main amd64 Packages [764 kB]              
Get:15 http://archive.ubuntu.com/ubuntu bionic-updates/main Translation-en [273 kB]        
Get:16 http://archive.ubuntu.com/ubuntu bionic-updates/restricted amd64 Packages [16.7 kB]      
Get:17 http://archive.ubuntu.com/ubuntu bionic-updates/restricted Translation-en [5144 B]                      
Get:18 http://archive.ubuntu.com/ubuntu bionic-updates/universe amd64 Packages [1016 kB]                            
Get:19 http://security.ubuntu.com/ubuntu bionic-security/main Translation-en [180 kB]
Get:20 http://archive.ubuntu.com/ubuntu bionic-updates/universe Translation-en [313 kB]          
Get:21 http://archive.ubuntu.com/ubuntu bionic-updates/multiverse amd64 Packages [8096 B]             
Get:22 http://archive.ubuntu.com/ubuntu bionic-updates/multiverse Translation-en [3972 B]         
Get:23 http://archive.ubuntu.com/ubuntu bionic-backports/main amd64 Packages [2512 B]                               
Get:24 http://archive.ubuntu.com/ubuntu bionic-backports/main Translation-en [1644 B]                               
Get:25 http://archive.ubuntu.com/ubuntu bionic-backports/universe amd64 Packages [4020 B]              
Get:26 http://archive.ubuntu.com/ubuntu bionic-backports/universe Translation-en [1856 B]        
Get:27 http://security.ubuntu.com/ubuntu bionic-security/restricted amd64 Packages [9856 B]                         
Get:28 http://security.ubuntu.com/ubuntu bionic-security/restricted Translation-en [3480 B]
Get:29 http://security.ubuntu.com/ubuntu bionic-security/universe amd64 Packages [616 kB]
Get:30 http://security.ubuntu.com/ubuntu bionic-security/universe Translation-en [205 kB]
Get:31 http://security.ubuntu.com/ubuntu bionic-security/multiverse amd64 Packages [5476 B]
Get:32 http://security.ubuntu.com/ubuntu bionic-security/multiverse Translation-en [2500 B]
Fetched 18.1 MB in 4s (5080 kB/s)                      
Reading package lists... Done
Building dependency tree       
Reading state information... Done

root@neo4j:~# apt-key list 26C95CF201182252
pub   rsa4096 2014-10-28 [SC] [expires: 2024-10-26]
      66D3 4E95 1A8C 53D9 0242  132B 26C9 5CF2 0118 2252
uid           [ unknown] Neo Technology Admins <[email protected]>

Thanks for taking a look into this!

[flip111]

wget -O - https://debian.neo4j.org/neotechnology.gpg.key | sudo apt-key add -

Didn't work for me. Still getting this message.

W: GPG error: https://debian.neo4j.org/repo stable/ Release: The following signatures were invalid: BADSIG 26C95CF201182252 Neo Technology Admins <[email protected]>
E: The repository 'https://debian.neo4j.org/repo stable/ Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[jennyowen]

@flip111 The repository moved to https://debian.neo4j.com from .org, but the old one should still work. Our tests are all passing and I tried it just now and it seems to work? Perhaps the keyservers were down or something?
Can you try re-importing the key again?

wget -q -O - https://debian.neo4j.com/neotechnology.gpg.key | sudo apt-key add -
echo 'deb https://debian.neo4j.com stable latest' | sudo tee -a /etc/apt/sources.list.d/neo4j.list
sudo apt-get update

Full debian installation instructions are here:
https://neo4j.com/docs/operations-manual/current/installation/linux/debian

[flip111]

Hi @jennyowen initially after i tried the commands i got about 20 lines of errors that look like

W: Target Packages (latest/binary-amd64/Packages) is configured multiple times in /etc/apt/sources.list.d/neo4j.list:2 and /etc/apt/sources.list.d/neo4j.list:3

after removing all lines but the last one it worked well ! thanks for support