https://bugs.winehq.org/show_bug.cgi?id=57501
Bug ID: 57501 Summary: Upgrade fails in Debian testing with apt 2.9.16 Product: Packaging Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs@winehq.org Reporter: shtetldik@gmail.com CC: dimesio@earthlink.net Distribution: ---
Using current repository key from https://dl.winehq.org/wine-builds/winehq.key
started failing in Debian testing as follows:
Warning: https://dl.winehq.org/wine-builds/debian/dists/trixie/InRelease: The key(s) in the keyring /etc/apt/keyrings/winehq.key are ignored as the file has an unsupported filetype. Warning: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://dl.winehq.org/wine-builds/debian trixie InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 76F1A20FF987672F Warning: Failed to fetch https://dl.winehq.org/wine-builds/debian/dists/trixie/InRelease The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 76F1A20FF987672F Warning: Some index files failed to download. They have been ignored, or old ones used instead.
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #1 from Rosanne DiMesio dimesio@earthlink.net --- Someone also reported this on the forum, https://forum.winehq.org/viewtopic.php?t=39751. Another user responded that "dearmoring" the key fixed it for them.
https://bugs.winehq.org/show_bug.cgi?id=57501
Rosanne DiMesio dimesio@earthlink.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jkfloris@dds.nl
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #2 from Shmerl shtetldik@gmail.com --- That worked, thanks! I wonder why apt can't handled ASCII armored keys anymore.
All I see in the changelog:
apt (2.9.15) unstable; urgency=medium
[ Julian Andres Klode ] * Stop using apt-key for signature verification ... - strutl: Add Base64Decode - gpgv: Verify keyrings and dearmor outside apt-key
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #3 from jkfloris@dds.nl --- There is no need to dearmor the key. Renaming the key to .asc is sufficient
I just can't figure out if this is the solution. Or if apt will change its behavior later.
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #4 from Shmerl shtetldik@gmail.com --- Just tried that, .asc doesn't help in my case.
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #5 from jkfloris@dds.nl --- Did you also change the name of the key in /etc/apt/sources.list.d/winehq-trixie.sources?
ls /etc/apt/keyrings/ winehq-archive.asc
cat /etc/apt/sources.list.d/winehq-trixie.sources Types: deb URIs: https://dl.winehq.org/wine-builds/debian Suites: trixie Components: main Architectures: amd64 i386 Signed-By: /etc/apt/keyrings/winehq-archive.asc
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #6 from Shmerl shtetldik@gmail.com --- Ah, good catch, that worked. Thanks for the tip!
https://bugs.winehq.org/show_bug.cgi?id=57501
--- Comment #7 from jkfloris@dds.nl --- I think the easiest solution for now is to change the instructions on the wiki to:
wget -O - https://dl.winehq.org/wine-builds/winehq.key | sudo gpg --dearmor -o /etc/apt/keyrings/winehq-archive.key -
After Debian Bullseye and Ubuntu Focal are EOL, we can add the key to the .sources file. This requires apt version 2.3.10 or higher.