Refresh expired GPG keys

[Andrej Rosano]

Hello,

the GPG keys used to verify the USB armory custom Debian packages have expired.
This would lead to an EXPKEYSIG error when performing "apt-update".

To refresh the expired keys please run the following from USB armory:

wget https://usbarmory.github.io/keys/gpg-andrej.asc -O /etc/apt/trusted.gpg.d/usbarmory-andrej.asc
wget https://usbarmory.github.io/keys/gpg-andrea.asc -O /etc/apt/trusted.gpg.d/usbarmory-andrea.asc
rm /var/lib/apt/lists/usbarmory.github.io_debian_dists_stable_*
apt-update

Thanks

--
Andrej Rosano | Hardware Security | WithSecure
withsecure.com - foundry.withsecure.com
BDE1 62F4 7020 1588 8046 AE02 EA17 8C32 AB56 54CE

[Carlos Gruberman]

Hello,

I'm coming from a 2022 image and wanted to upgrade without dd-ing a new image. I noticed the EXPKEYSIG error clearly outdated, so I downloaded the new keys. Unfortunately, I'm having a 

bit of an issue with (if I'm not mistaken) old repo info.

Err:7 https://usbarmory.github.io/debian stable/usbarmory armhf Packages
  File has unexpected size (36802 != 37102). Mirror sync in progress? [IP: 185.199.109.153 443]
  Hashes of expected file:
   - Filesize:37102 [weak]
   - SHA512:b9bf6505d7eef448915dc10223cf7aa3982b4eac3f1be88b177c9272f3fcb4b6e80044a52da4ad675ce121fa5f86a17d589664bab6956a54f55608ad2eaaf2f3
   - SHA256:4f396874fe784959eba0f8e421418cebeaac01a87b6cbf2d9b4164d1dc71245c
   - SHA1:665d650e783f258d7b8617b11daa34c93056ae87 [weak]
   - MD5Sum:0ca55324d665786d762fcc9cb8bcd57f [weak]
  Release file created at: Fri, 01 Aug 2025 09:55:40 +0000
Fetched 1895 B in 4s (426 B/s)
Reading package lists... Done
E: Failed to fetch https://usbarmory.github.io/debian/dists/stable/usbarmory/binary-armhf/Packages  File has unexpected size (36802 != 37102). Mirror sync in progress? [IP: 185.199.109.153 443]
   Hashes of expected file:
    - Filesize:37102 [weak]
    - SHA512:b9bf6505d7eef448915dc10223cf7aa3982b4eac3f1be88b177c9272f3fcb4b6e80044a52da4ad675ce121fa5f86a17d589664bab6956a54f55608ad2eaaf2f3
    - SHA256:4f396874fe784959eba0f8e421418cebeaac01a87b6cbf2d9b4164d1dc71245c
    - SHA1:665d650e783f258d7b8617b11daa34c93056ae87 [weak]
    - MD5Sum:0ca55324d665786d762fcc9cb8bcd57f [weak]
   Release file created at: Fri, 01 Aug 2025 09:55:40 +0000
E: Some index files failed to download. They have been ignored, or old ones used instead.

I've waited an hour to see maybe if its due to mirrors actually syncing. I'm a bit stuck because I removed the linux image, my mk2 runs signed only. I was hoping to do the update before getting locked out and having to sign reflash the emmc with a backup image.

[Andrej Rosano]

Hi Carlos,

should be fixed now.

Thanks

[Carlos Gruberman]

Perfect! Thanks.