3.6.x release signing key seems to be expired

[Robert Cochran]

Hi!

On my Ubuntu 18.04.1 machine, which has the MonogDB 3.6 series server and client installed, I get the following error upon issuing 'sudo apt-get update':

Err:10 https://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.6 Release.gpg

  The following signatures were invalid: EXPKEYSIG 58712A2291FA4AD5 MongoDB 3.6 Release Signing Key <packaging@mongodb.com>

Reading package lists... Done

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://repo.mongodb.org/apt/ubuntu xenial/mongodb-org/3.6 Release: The following signatures were invalid: EXPKEYSIG 58712A2291FA4AD5 MongoDB 3.6 Release Signing Key <pack...@mongodb.com>

W: Failed to fetch https://repo.mongodb.org/apt/ubuntu/dists/xenial/mongodb-org/3.6/Release.gpg  The following signatures were invalid: EXPKEYSIG 58712A2291FA4AD5 MongoDB 3.6 Release Signing Key <pack...@mongodb.com>

W: Some index files failed to download. They have been ignored, or old ones used instead.

Thanks so much

Bob

[Wan Bachtiar]

I get the following error upon issuing ‘sudo apt-get update’:

Hi Bob,

I’ve just tried installing MongoDB 3.6 on Ubuntu 18.04 without an issue.

Try updating your GPG key, see Install MongoDB on Ubuntu: Import Public Key.

Regards,
Wan.

​

[Robert Cochran]

Hi Wan,

Yes, the old key had expired. Here is what I had:

$ sudo apt-key list

...

/etc/apt/trusted.gpg

--------------------

pub   rsa4096 2016-12-14 [SC] [expired: 2018-12-14]

      2930 ADAE 8CAF 5059 EE73  BB4B 5871 2A22 91FA 4AD5

uid           [ expired] MongoDB 3.6 Release Signing Key <pack...@mongodb.com>

To update the key, I first deleted the old key:

sudo apt-key del 2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5

Then I added the same key back again, according to the instructions for installing MongoDB 3.6 Community Edition:

sudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 2930ADAE8CAF5059EE73BB4B58712A2291FA4AD5

The updated key has an extended expiration date:

pub   rsa4096 2016-12-14 [SC] [expires: 2023-12-09]

      2930 ADAE 8CAF 5059 EE73  BB4B 5871 2A22 91FA 4AD5

uid           [ unknown] MongoDB 3.6 Release Signing Key <pack...@mongodb.com>

...and that satisfies `apt-get'.

I'm showing the process here for others who might wonder what to do since as far as I know the 3.6 series is still supported.

Thanks so much

Bob