APT Repository not working (signatures invalid)

[Christopher_G_2]

I'm using the steps from here and getting a GPG error: installing-intel-free-libs-and-python-apt-repo

Here are the steps I'm doing:

1. docker run -it -rm ubuntu:18.04 bash
2. apt-get update
3. apt-get install -y --show-progress curl gnupg
4. curl https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB | apt-key add -
5. echo 'deb https://apt.repos.intel.com/mkl all main' > /etc/apt/sources.list.d/intel-mkl.list
6. apt-get update

Here is the error (note: it is happening with the TBB repository as well:

root@fc9c5f2a3649:/# apt-get update
Hit:1 http://security.ubuntu.com/ubuntu bionic-security InRelease
Get:2 https://apt.repos.intel.com/mkl all InRelease [4430 B]               
Hit:3 http://archive.ubuntu.com/ubuntu bionic InRelease                         
Err:2 https://apt.repos.intel.com/mkl all InRelease                             
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Hit:4 http://archive.ubuntu.com/ubuntu bionic-updates InRelease                
Hit:5 http://archive.ubuntu.com/ubuntu bionic-backports InRelease
Reading package lists... Done                      
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[Shastry__Tejas]

Same issue. It looks like the key expired today. Not much we can do until Intel provides an updated key.

I tried to simply grab the `-2020.pub` key but it doesn't exist.

gpg GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.pub
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF4385F91CA5FC005AB39E1C1A8497B11911E097
uid           "CN = Intel(R) Software Development Products", O=Intel Corporation

[Doe__John2]

I am having the same error since this morning.

[Marchant__David]

I'm running into the same problem trying to install MKL.  Is there a workaround we can use while this is getting fixed?

wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
sudo sh -c 'echo deb https://apt.repos.intel.com/ipp all main > /etc/apt/sources.list.d/intel-ipp.list'
sudo apt-get update
Err:12 https://apt.repos.intel.com/ipp all InRelease
  The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
Reading package lists...
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

[Bau__David]

I see this problem too, today, setting up a new machine.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation

[KKats1]

Marchant, David wrote:

I'm running into the same problem trying to install MKL.  Is there a workaround we can use while this is getting fixed?

Yes, but it involves disabling certain security checks. Better wait out till Monday. This should be fixed very quickly (I am not speaking for Intel, just reasoning the breakage is too extensive).

You can google for 'disable apt deb gpg security checks' or something, but I strongly advise against.

[Gennady_F_Intel]

Thank you for the report. The issue is escalated and we will fix the issue asap.

[Gennady_F_Intel]

We re-signed these packages. You may try these right now and let us know the result. 

[iain_B_]

I think this is still broken - the keys file is missing the public key for ACFA9FC57E6C5DBE.

[Bankevich__Sergey]

I had to remove ppa and gpg added in attempts to fix the issue. And seems everything worked for me. From the second run though for some reason.

[Gennady_F_Intel]

ok, thanks for the update

[iain_B_]

Actually, I see two errors - the MKL repo is missing the public key, and the TBB repo's key is expired.

W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures were invalid: EXPKEYSIG 1A8497B11911E097 "CN = Intel(R) Software Development Products", O=Intel Corporation
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.

[Christopher_G_2]

NOTE: Don't do this if it's fixed but just for reference as a temporary workaround, I did this (added trusted=yes):

echo 'deb [trusted=yes] https://apt.repos.intel.com/mkl all main' > /etc/apt/sources.list.d/intel-mkl.list
echo 'deb [trusted=yes] https://apt.repos.intel.com/tbb all main' > /etc/apt/sources.list.d/intel-tbb.list

[Dau__Hendrik]

there seems to be a 2023 GPG in the same location -- since august this year

unfortunately not the signing key ACFA9FC57E6C5DBE

curl -i https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2023.PUB
HTTP/1.1 200 OK
x-amz-id-2: ltMvKgVn4IHCanE8jDwfmeYf/DUwWH1d3pg51XV8E0l1VCVtQb3RXKhr6VhNdulEDgdfEGPnnm4=
x-amz-request-id: 5D35760EF2A7623C
Last-Modified: Wed, 07 Aug 2019 10:59:16 GMT
ETag: "03f42e09f49c10569aecb8eb67c233a4"
x-amz-server-side-encryption: AES256
x-amz-version-id: i2bIl68sDY2acaLiXWGZn.rlplQos505
Accept-Ranges: bytes
Content-Type: binary/octet-stream
Content-Length: 914
Server: AmazonS3
Date: Tue, 01 Oct 2019 18:40:59 GMT
Connection: keep-alive

-----BEGIN PGP PUBLIC KEY BLOCK-----
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=
=rudQ
-----END PGP PUBLIC KEY BLOCK-----

[Ceravolo__Matthew]

Also still seeing this:
 

The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE

[Gennady_F_Intel]

actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

as our install engineers suggested, please re-install public key following instructions: https://software.intel.com/en-us/articles/installing-intel-free-libs-and-python-apt-repo).

[Dau__Hendrik]

i don't think the new key has been pushed out to the public URL (yet) ... just tested it.

root@71437e83e0ac:/# wget https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
--2019-10-02 12:20:23--  https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
Resolving apt.repos.intel.com (apt.repos.intel.com)... 104.82.98.127
Connecting to apt.repos.intel.com (apt.repos.intel.com)|104.82.98.127|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 975 [application/octet-stream]
Saving to: 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB'

GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PU 100%[======================================================================>]     975  --.-KB/s    in 0s

2019-10-02 12:20:23 (10.6 MB/s) - 'GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB' saved [975/975]

root@71437e83e0ac:/# apt-key add GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB
OK
root@71437e83e0ac:/# apt-key list
/etc/apt/trusted.gpg
--------------------
pub   rsa2048 2016-09-28 [SC] [expired: 2019-09-27]
      BF43 85F9 1CA5 FC00 5AB3  9E1C 1A84 97B1 1911 E097
uid           [ expired] "CN = Intel(R) Software Development Products", O=Intel Corporation

[Bawa__Puneet]

MKL package intel-mkl-64bit-2019.2-057 installation FAILED

Err:4 https://apt.repos.intel.com/intelpython binary/ InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:5 https://apt.repos.intel.com/mkl all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:7 https://apt.repos.intel.com/ipp all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:8 https://apt.repos.intel.com/tbb all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:10 https://apt.repos.intel.com/daal all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Err:11 https://apt.repos.intel.com/mpi all InRelease
  The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
Reading package lists... Done
W: GPG error: https://apt.repos.intel.com/intelpython binary/ InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/intelpython binary/ InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mkl all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mkl all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/ipp all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/ipp all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/tbb all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/tbb all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/daal all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/daal all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
W: GPG error: https://apt.repos.intel.com/mpi all InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY ACFA9FC57E6C5DBE
E: The repository 'https://apt.repos.intel.com/mpi all InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
extras/install_mkl.sh: MKL package intel-mkl-64bit-2019.2-057 installation FAILED.
 

[Otruba__Jakub]

Seemed to help on most of the packages, but im still getting the same "invalid signature" when getting daal

[Hayashi__Junya]

> actually the new public key is added to the same file (https://apt.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS-2019.PUB).

I downloaded the key now, but it's still not changed.

[Johnston__Isaac]

I have also tried downloading the key again today. It has not changed and this is still an issue.