Intel® oneAPI Math Kernel Library
Ask questions and share information with other developers who use Intel® Math Kernel Library.

APT Repository not working (signatures invalid)

Christopher_G_2
Beginner
18,643 Views

I'm using the steps from here and getting a GPG error: installing-intel-free-libs-and-python-apt-repo

Here are the steps I'm doing:

  1. docker run -it -rm ubuntu:18.04 bash
  2. apt-get update
  3. apt-get install -y --show-progress curl gnupg
  4. curl https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB | apt-key add -
  5. echo 'deb https://apt.repos.intel.com/mkl all main' > /etc/apt/sources.list.d/intel-mkl.list
  6. apt-get update

Here is the error (note: it is happening with the TBB repository as well:

root@fc9c5f2a3649:/# apt-get update
Hit:1 http://security.ubuntu.com/ubuntu bionic-security InRelease
Get:2 https://apt.repos.intel.com/mkl all InRelease [4430 B]               
Hit:3 http://archive.ubuntu.com/ubuntu bionic InRelease                         
Err:2 https://apt.repos.intel.com/mkl all InRelease                             
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Hit:4 http://archive.ubuntu.com/ubuntu bionic-updates InRelease                
Hit:5 http://archive.ubuntu.com/ubuntu bionic-backports InRelease
Reading package lists... Done                      
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
0 Kudos
29 Replies
Shastry__Tejas
Beginner
15,596 Views

Same issue. It looks like the key expired today. Not much we can do until Intel provides an updated key.

I tried to simply grab the `-2020.pub` key but it doesn't exist.

 

gpg GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.pub
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid           "CN = Intel(R) Software Development Products", O=Intel Corporation

 

0 Kudos
Doe__John2
Beginner
15,596 Views

I am having the same error since this morning.

0 Kudos
Marchant__David
Beginner
15,596 Views

I'm running into the same problem trying to install MKL.  Is there a workaround we can use while this is getting fixed?

 

wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo sh -c 'echo deb https://apt.repos.intel.com/ipp all main > /etc/apt/sources.list.d/intel-ipp.list'
sudo apt-get update
Err:12 https://apt.repos.intel.com/ipp all InRelease
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Reading package lists...
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

 

0 Kudos
Bau__David
Beginner
15,598 Views

I see this problem too, today, setting up a new machine.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

0 Kudos
KKats1
Beginner
15,599 Views

Marchant, David wrote:

I'm running into the same problem trying to install MKL.  Is there a workaround we can use while this is getting fixed?

Yes, but it involves disabling certain security checks. Better wait out till Monday. This should be fixed very quickly (I am not speaking for Intel, just reasoning the breakage is too extensive).

You can google for 'disable apt deb gpg security checks' or something, but I strongly advise against.

0 Kudos
Gennady_F_Intel
Moderator
15,599 Views

Thank you for the report. The issue is escalated and we will fix the issue asap.

0 Kudos
Gennady_F_Intel
Moderator
15,599 Views

We re-signed these packages. You may try these right now and let us know the result. 

0 Kudos
iain_B_
Beginner
15,599 Views

I think this is still broken - the keys file is missing the public key for ACFA9FC57E6C5DBE.

0 Kudos
Bankevich__Sergey
15,599 Views

I had to remove ppa and gpg added in attempts to fix the issue. And seems everything worked for me. From the second run though for some reason.

0 Kudos
Gennady_F_Intel
Moderator
15,599 Views

ok, thanks for the update

0 Kudos
iain_B_
Beginner
15,599 Views

Actually, I see two errors - the MKL repo is missing the public key, and the TBB repo's key is expired.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.

 

0 Kudos
Christopher_G_2
Beginner
15,599 Views

 

NOTE: Don't do this if it's fixed but just for reference as a temporary workaround, I did this (added trusted=yes):

echo 'deb [trusted=yes] https://apt.repos.intel.com/mkl all main' > /etc/apt/sources.list.d/intel-mkl.list
echo 'deb [trusted=yes] https://apt.repos.intel.com/tbb all main' > /etc/apt/sources.list.d/intel-tbb.list

 

0 Kudos
Dau__Hendrik
Beginner
15,599 Views

there seems to be a 2023 GPG in the same location -- since august this year

unfortunately not the signing key ACFA9FC57E6C5DBE

curl -i https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB
HTTP/1.1 200 OK
x-amz-id-2: ltMvKgVn4IHCanE8jDwfmeYf/DUwWH1d3pg51XV8E0l1VCVtQb3RXKhr6VhNdulEDgdfEGPnnm4=
x-amz-request-id: 5D35760EF2A7623C
Last-Modified: Wed, 07 Aug 2019 10:59:16 GMT
ETag: "03f42e09f49c10569aecb8eb67c233a4"
x-amz-server-side-encryption: AES256
x-amz-version-id: i2bIl68sDY2acaLiXWGZn.rlplQos505
Accept-Ranges: bytes
Content-Type: binary/octet-stream
Content-Length: 914
Server: AmazonS3
Date: Tue, 01 Oct 2019 18:40:59 GMT
Connection: keep-alive

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=
=rudQ
-----END PGP PUBLIC KEY BLOCK-----

 

0 Kudos
Ceravolo__Matthew
15,599 Views

Also still seeing this:
 

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE

0 Kudos
Gennady_F_Intel
Moderator
15,599 Views

actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

as our install engineers suggested, please re-install public key following instructions: https://software.intel.com/en-us/articles/installing-intel-free-libs-and-python-apt-repo).

0 Kudos
Dau__Hendrik
Beginner
15,599 Views

i don't think the new key has been pushed out to the public URL (yet) ... just tested it.

root@71437e83e0ac:/# wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
--2019-10-02 12:20:23--  https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
Resolving apt.repos.intel.com (apt.repos.intel.com)... 104.82.98.127
Connecting to apt.repos.intel.com (apt.repos.intel.com)|104.82.98.127|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 975 [application/octet-stream]
Saving to: 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB'

GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PU 100%[======================================================================>]     975  --.-KB/s    in 0s

2019-10-02 12:20:23 (10.6 MB/s) - 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB' saved [975/975]

root@71437e83e0ac:/# apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
OK
root@71437e83e0ac:/# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF43 85F9 1CA5 FC00 5AB3  9E1C 1A84 97B1 1911 E097
uid           [ expired] "CN = Intel(R) Software Development Products", O=Intel Corporation

 

0 Kudos
Bawa__Puneet
Beginner
15,599 Views

MKL package intel-mkl-64bit-2019.2-057 installation FAILED

Err:4 https://apt.repos.intel.com/intelpython binary/ InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:5 https://apt.repos.intel.com/mkl all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:7 https://apt.repos.intel.com/ipp all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:8 https://apt.repos.intel.com/tbb all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:10 https://apt.repos.intel.com/daal all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:11 https://apt.repos.intel.com/mpi all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Reading package lists... Done
W: GPG error: https://apt.repos.intel.com/intelpython binary/ InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/intelpython binary/ InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/daal all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/daal all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mpi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mpi all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
extras/install_mkl.sh: MKL package intel-mkl-64bit-2019.2-057 installation FAILED.
 

0 Kudos
Otruba__Jakub
Beginner
15,599 Views

Seemed to help on most of the packages, but im still getting the same "invalid signature" when getting daal

0 Kudos
Hayashi__Junya
Beginner
15,598 Views

> actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

I downloaded the key now, but it's still not changed.

0 Kudos
Johnston__Isaac
Beginner
13,493 Views

I have also tried downloading the key again today. It has not changed and this is still an issue.  

0 Kudos
Reply