Z-Push signing key expired

epv

You probably already know this, but the signing key for the z-push apt repos at http://repo.z-hub.io/z-push: expired today, 28 April 2021. This breaks updates for people using this repo in ubuntu at least. As of now the same expired key is returned for http://repo.z-hub.io/z-push:/final/Ubuntu_20.04/Release.key

Also, the email address attached to this key bounces, so I thought I’d try here.

pub   rsa4096 2016-04-29 [SC] [expired: 2021-04-28]
      DF37 89BC EB21 99DE 08D7  43A5 5CB2 7E13 58E2 F2A7
uid           [ expired] Kopano Development <development@kopano.io>

dromaius

https://download.kopano.io/supported/core:/final/Debian_9.0/InRelease

is also affected by this key.

fbartels

Hi @epv,

Thanks for your report. I’ve been told someone is already looking into this.

As for the email address it is still valid and was received, only some of its former recipients were no longer valid and have meanwhile been cleaned out of the list.

white-eagle

Same problem here with kopano repository (kopano-core, …) like mentioned in thread https://forum.kopano.io/topic/3718/the-following-signatures-were-invalid-expkeysig-5cb27e1358e2f2a7.

I posted it here because the other thread is locked.

fbartels

@white-eagle its all the same key, so there is no surprise there.

Meanwhile the key has been updated on the server, so you just need to redownload (for example) https://download.kopano.io/supported/core%3A/8.7/Debian_10/Release.key and import it again.

edit: link for convenience to the z-push download repo with the same file https://repo.z-hub.io/z-push:/final/Debian_10/Release.key

white-eagle

Thank you very much … that did the job :-)

crankshaft

wget -qO - https://repo.z-hub.io/z-push:/final/Debian_10/Release.key | sudo apt-key add -

Midi333

Hi,

i have the same problem with kopano core.

@midi333
the Key also works for Kopano core, Import the key and it will work

Midi333

Thank´s for the fast answer.

Now i get this error: Fehl:441 https://download.kopano.io/supported/core:/final/Univention_4.3 Release
401 Unauthorized

My subscription is running till 2022

fbartels

Hi @midi333,

the unauthorized message normally only is shown when the subscription has expired. If you believe this cannot be the case with your key I would recommend reaching out to the Kopano support directly to check your subscription.

marcus.bauch

Web-Site isn’t available within apt update, and Browser-Access

Failed to fetch http://repo.z-hub.io/z-push:/final/Debian_10/inRelease  Could not connect to repo.z-hub.io:80 (195.201.215.166). - connect (113: No route to host)

@marcus-bauch
you need to change the repository URL:

Example for Debian 10, first line is the old repository, second line the new repository.

# deb http://repo.z-hub.io/z-push:/final/Debian_10/ /
deb http://download.kopano.io/zhub/z-push:/final/Debian_10/ /

Walter

boospy

I have added the key here on Univention UCS. This has worked now. But if i say “apt update” i get now a new error message only for z-push.

E: The repository 'http://repo.z-hub.io/z-push:/final/Univention_4.3  Release' does no longer have a Release file.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.

Is there anything left to do?

@boospy
It seams you did not change all references from “repo.z-hub.io” to “download.kopano.io”.