APT Repository not working (signatures invalid)

Christopher_G_2 · September 27, 2019, 1:57pm

I’m using the steps from here and getting a GPG error: installing-intel-free-libs-and-python-apt-repo

Here are the steps I’m doing:

docker run -it -rm ubuntu:18.04 bash
apt-get update
apt-get install -y --show-progress curl gnupg
curl https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB | apt-key add -
echo ‘deb https://apt.repos.intel.com/mkl all main’ > /etc/apt/sources.list.d/intel-mkl.list
apt-get update

Here is the error (note: it is happening with the TBB repository as well:

root@fc9c5f2a3649:/# apt-get update
Hit:1 <a href="http://security.ubuntu.com/ubuntu" target="_blank">http://security.ubuntu.com/ubuntu</a> bionic-security InRelease
Get:2 <a href="https://apt.repos.intel.com/mkl" target="_blank">https://apt.repos.intel.com/mkl</a> all InRelease [4430 B]               
Hit:3 <a href="http://archive.ubuntu.com/ubuntu" target="_blank">http://archive.ubuntu.com/ubuntu</a> bionic InRelease                         
Err:2 <a href="https://apt.repos.intel.com/mkl" target="_blank">https://apt.repos.intel.com/mkl</a> all InRelease                             
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Hit:4 <a href="http://archive.ubuntu.com/ubuntu" target="_blank">http://archive.ubuntu.com/ubuntu</a> bionic-updates InRelease                
Hit:5 <a href="http://archive.ubuntu.com/ubuntu" target="_blank">http://archive.ubuntu.com/ubuntu</a> bionic-backports InRelease
Reading package lists... Done                      
W: GPG error: <a href="https://apt.repos.intel.com/mkl" target="_blank">https://apt.repos.intel.com/mkl</a> all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Shastry_Tejas · September 27, 2019, 2:13pm

Same issue. It looks like the key expired today. Not much we can do until Intel provides an updated key.

I tried to simply grab the `-2020.pub` key but it doesn’t exist.

gpg GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.pub
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid           "CN = Intel(R) Software Development Products", O=Intel Corporation

Doe_John2 · September 27, 2019, 4:08pm

I am having the same error since this morning.

Marchant_David · September 27, 2019, 5:14pm

I’m running into the same problem trying to install MKL. Is there a workaround we can use while this is getting fixed?

wget <a href="https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB" target="_blank">https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB</a>
sudo apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo sh -c 'echo deb <a href="https://apt.repos.intel.com/ipp" target="_blank">https://apt.repos.intel.com/ipp</a> all main > /etc/apt/sources.list.d/intel-ipp.list'
sudo apt-get update
Err:12 <a href="https://apt.repos.intel.com/ipp" target="_blank">https://apt.repos.intel.com/ipp</a> all InRelease
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Reading package lists...
W: GPG error: <a href="https://apt.repos.intel.com/ipp" target="_blank">https://apt.repos.intel.com/ipp</a> all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
W: GPG error: <a href="https://apt.repos.intel.com/ipp" target="_blank">https://apt.repos.intel.com/ipp</a> all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

Bau_David · September 27, 2019, 10:18pm

I see this problem too, today, setting up a new machine.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 “CN = Intel(R) Software Development Products”, O=Intel Corporation

KKats1 · September 29, 2019, 9:14am

Marchant, David wrote:

I’m running into the same problem trying to install MKL. Is there a workaround we can use while this is getting fixed?

Yes, but it involves disabling certain security checks. Better wait out till Monday. This should be fixed very quickly (I am not speaking for Intel, just reasoning the breakage is too extensive).

You can google for ‘disable apt deb gpg security checks’ or something, but I strongly advise against.

Gennady_F_Intel · September 30, 2019, 7:55am

Thank you for the report. The issue is escalated and we will fix the issue asap.

Gennady_F_Intel · October 1, 2019, 3:09am

We re-signed these packages. You may try these right now and let us know the result.

iain_B · October 1, 2019, 7:13am

I think this is still broken - the keys file is missing the public key for ACFA9FC57E6C5DBE.

Bankevich_Sergey · October 1, 2019, 8:03am

I had to remove ppa and gpg added in attempts to fix the issue. And seems everything worked for me. From the second run though for some reason.

Gennady_F_Intel · October 1, 2019, 8:45am

ok, thanks for the update

iain_B · October 1, 2019, 8:57am

Actually, I see two errors - the MKL repo is missing the public key, and the TBB repo’s key is expired.

W: GPG error: <a href="https://apt.repos.intel.com/mkl" target="_blank">https://apt.repos.intel.com/mkl</a> all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
W: GPG error: <a href="https://apt.repos.intel.com/tbb" target="_blank">https://apt.repos.intel.com/tbb</a> all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.

Christopher_G_2 · October 1, 2019, 10:47am

NOTE: Don’t do this if it’s fixed but just for reference as a temporary workaround, I did this (added trusted=yes):

echo 'deb [trusted=yes] <a href="https://apt.repos.intel.com/mkl" target="_blank">https://apt.repos.intel.com/mkl</a> all main' > /etc/apt/sources.list.d/intel-mkl.list
echo 'deb [trusted=yes] <a href="https://apt.repos.intel.com/tbb" target="_blank">https://apt.repos.intel.com/tbb</a> all main' > /etc/apt/sources.list.d/intel-tbb.list

Dau_Hendrik · October 1, 2019, 6:43pm

there seems to be a 2023 GPG in the same location -- since august this year

unfortunately not the signing key ACFA9FC57E6C5DBE

curl -i <a href="https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB" target="_blank">https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB</a>
HTTP/1.1 200 OK
x-amz-id-2: ltMvKgVn4IHCanE8jDwfmeYf/DUwWH1d3pg51XV8E0l1VCVtQb3RXKhr6VhNdulEDgdfEGPnnm4=
x-amz-request-id: 5D35760EF2A7623C
Last-Modified: Wed, 07 Aug 2019 10:59:16 GMT
ETag: "03f42e09f49c10569aecb8eb67c233a4"
x-amz-server-side-encryption: AES256
x-amz-version-id: i2bIl68sDY2acaLiXWGZn.rlplQos505
Accept-Ranges: bytes
Content-Type: binary/octet-stream
Content-Length: 914
Server: AmazonS3
Date: Tue, 01 Oct 2019 18:40:59 GMT
Connection: keep-alive

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=
=rudQ
-----END PGP PUBLIC KEY BLOCK-----

Ceravolo_Matthew · October 1, 2019, 7:38pm

Also still seeing this:

The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE

Gennady_F_Intel · October 2, 2019, 3:33am

actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

as our install engineers suggested, please re-install public key following instructions: https://software.intel.com/en-us/articles/installing-intel-free-libs-and-python-apt-repo).

Dau_Hendrik · October 2, 2019, 12:25pm

i don’t think the new key has been pushed out to the public URL (yet) … just tested it.

root@71437e83e0ac:/# wget <a href="https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB" target="_blank">https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB</a>
--2019-10-02 12:20:23--  <a href="https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB" target="_blank">https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB</a>
Resolving apt.repos.intel.com (apt.repos.intel.com)... 104.82.98.127
Connecting to apt.repos.intel.com (apt.repos.intel.com)|104.82.98.127|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 975 [application/octet-stream]
Saving to: 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB'

GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PU 100%[======================================================================>]     975  --.-KB/s    in 0s

2019-10-02 12:20:23 (10.6 MB/s) - 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB' saved [975/975]

root@71437e83e0ac:/# apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
OK
root@71437e83e0ac:/# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF43 85F9 1CA5 FC00 5AB3  9E1C 1A84 97B1 1911 E097
uid           [ expired] "CN = Intel(R) Software Development Products", O=Intel Corporation

Bawa_Puneet · October 2, 2019, 3:30pm

MKL package intel-mkl-64bit-2019.2-057 installation FAILED

Err:4 https://apt.repos.intel.com/intelpython binary/ InRelease
The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:5 https://apt.repos.intel.com/mkl all InRelease
The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:7 https://apt.repos.intel.com/ipp all InRelease
The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:8 https://apt.repos.intel.com/tbb all InRelease
The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:10 https://apt.repos.intel.com/daal all InRelease
The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:11 https://apt.repos.intel.com/mpi all InRelease
The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Reading package lists… Done
W: GPG error: https://apt.repos.intel.com/intelpython binary/ InRelease: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository ‘https://apt.repos.intel.com/intelpython binary/ InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository ‘https://apt.repos.intel.com/mkl all InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository ‘https://apt.repos.intel.com/ipp all InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository ‘https://apt.repos.intel.com/tbb all InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/daal all InRelease: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository ‘https://apt.repos.intel.com/daal all InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mpi all InRelease: The following signatures couldn’t be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository ‘https://apt.repos.intel.com/mpi all InRelease’ is not signed.
N: Updating from such a repository can’t be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
extras/install_mkl.sh: MKL package intel-mkl-64bit-2019.2-057 installation FAILED.

Otruba_Jakub · October 2, 2019, 4:50pm

Seemed to help on most of the packages, but im still getting the same “invalid signature” when getting daal

Hayashi_Junya · October 3, 2019, 3:26am

> actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

I downloaded the key now, but it’s still not changed.

Topic		Replies	Views
ATTENTION: Read if you cannot install from deb feed: The APT distribution key has expired today Intel® oneAPI Math Kernel Library intel-oneapi-math-kernel-library	4	3916	October 1, 2019
apt repository broken Intel® oneAPI Math Kernel Library intel-oneapi-math-kernel-library	13	14197	September 30, 2021
Error when installing MKL on Ubuntu Intel® oneAPI Math Kernel Library intel-oneapi-math-kernel-library	2	6206	September 13, 2018
Intel® MKL version 2019 Update 5 is now available Intel® oneAPI Math Kernel Library intel-oneapi-math-kernel-library	5	5431	October 2, 2019
Errors when trying to use Intel MPI yum/apt repos Intel® MPI Library	20	18817	May 8, 2021

APT Repository not working (signatures invalid)

Related topics