yum repo GPG key is expired

[gsmolnycki]

As shown below, the GPG key at https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB is invalid as of today, 2023-09-30. Please resolve to allow secure updating of oneAPI packages via yum.

~ date
Sat Sep 30 23:21:16 EDT 2023
~ wget https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
--2023-09-30 23:21:24--  https://yum.repos.intel.com/intel-gpg-keys/GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
Resolving yum.repos.intel.com (yum.repos.intel.com)... 104.104.127.40, 2600:141b:9000:494::4b23, 2600:141b:9000:48d::4b23
Connecting to yum.repos.intel.com (yum.repos.intel.com)|104.104.127.40|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 939 [application/vnd.exstream-package]
Saving to: ‘GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB’

GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB                       100%[==============================================================================================================================>]     939  --.-KB/s    in 0s

2023-09-30 23:21:24 (28.0 MB/s) - ‘GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB’ saved [939/939]

~ gpg -v GPG-PUB-KEY-INTEL-SW-PRODUCTS.PUB
gpg: WARNING: no command supplied.  Trying to guess what you mean ...
pub   rsa2048 2019-09-30 [SC] [expired: 2023-09-30]
      52ABD6E87E421793971873FFACFA9FC57E6C5DBE
uid           Intel(R) Software Development Products
sig        ACFA9FC57E6C5DBE 2019-09-30   [selfsig]
~

[RahulC_Intel]

Hi Gabriel, could you please share the below details for further investigation:

• Operating System with its build number.
• Which Intel®oneAPI Toolkit you are trying to install.
• Please share the source of the link.

We would like to know.

[gsmolnycki]

Hi Rahul,

The issue isn't dependent on OS nor the toolkit version, however it appears the issue has been resolved. The GPG key was updated and now expires 2027-08-21. I would highly recommend Intel institute an SOP to ensure that GPG keys are appropriately rotated prior to expiry, as this is a security issue to anyone using the repository. Based on a cursory search of the forums it appears this issue has occurred at least two other times this year alone.

Thanks

[RahulC_Intel]

Hi Gabriel, thank you for your confirmation and taking the time out for sharing your feedback. We are glad that the issue has been resolved. We have passed on your valuable feedback to our engineering team for further consideration.

If you have any further queries, please post a new question as this thread will no longer be monitored by Intel®.