Skip to content

GPG key used to sign debian packages is expired #6175

@matt-allan

Description

@matt-allan

Describe the bug

You can't install the CLI from the .deb package on Ubuntu or other Debian based systems as of today because the GPG key used to sign the package has expired.

Steps to reproduce the behavior

  1. Attempt to follow the debian installation instructions

Expected vs actual behavior

The apt update step fails with the following error:

W: GPG error: https://cli.github.com/packages stable InRelease: The following signatures were invalid: EXPKEYSIG C99B11DEB97541F0 Nate Smith <vilmibm@github.com>
E: The repository 'https://cli.github.com/packages stable InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.

Logs

You can see the key expired today if you examine it:

Screenshot from 2022-09-02 13-15-12

I'm pretty sure this is the same issue as #6174.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't workingp1Affects a large population and inhibits work

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions