Changes between Version 41 and Version 42 of OpenvpnSoftwareRepos


Ignore:
Timestamp:
08/03/22 11:26:00 (22 months ago)
Author:
flichtenheld
Comment:

Remove apt-key (and remove precise)

Legend:

Unmodified
Added
Removed
Modified

  • OpenvpnSoftwareRepos

    v41 v42  
    5252
    5353{{{
    54 $ wget -O - https://swupdate.openvpn.net/repos/repo-public.gpg|apt-key add -
     54# curl -fsSL https://swupdate.openvpn.net/repos/repo-public.gpg | gpg --dearmor > /etc/apt/trusted.gpg.d/openvpn-repo-public.gpg
    5555}}}
    5656
    … …  
    5858
    5959{{{
    60 $ echo "deb http://build.openvpn.net/debian/openvpn/<version> <osrelease> main" > /etc/apt/sources.list.d/openvpn-aptrepo.list
     60$ echo "deb [arch=amd64 signed-by=/etc/apt/trusted.gpg.d/openvpn-repo-public.gpg] https://build.openvpn.net/debian/openvpn/<version> <osrelease> main" > /etc/apt/sources.list.d/openvpn-aptrepo.list
    6161}}}
    6262
    … …  
    7474 * '''buster''' (Debian 10.x)
    7575 * '''bullseye''' (Debian 11.x)
    76  * '''precise''' (Ubuntu 12.04)
    7776 * '''xenial''' (Ubuntu 16.04)
    7877 * '''bionic''' (Ubuntu 18.04)
    … …  
    10099== Notes on expired keys ==
    101100
    102 If the apt signing key expires, apt will complain when refreshing the package cache (e.g. ''apt-get update''). To fix this remove the expired key from apt keychain:
    103 
    104 {{{
    105 $ apt-key del E158C569
    106 }}}
    107 
    108 Then add the new key using ''wget'' and ''apt-key'' as described above. Then verify that the new key is in the keychain:
    109 
    110 {{{
    111 $ apt-key list
    112 --- snip ---
    113 /etc/apt/trusted.gpg
    114 --------------------
    115 pub   rsa2048 2011-08-03 [SC] [expires: 2025-07-27]
    116       30EB F4E7 3CCE 63EE E124  DD27 8E6D A8B4 E158 C569
    117 uid           [ unknown] Samuli Seppänen (OpenVPN Technologies, Inc) <samuli@openvpn.net>
    118 sub   rsa2048 2011-08-03 [E] [expires: 2025-07-27]
    119 }}}
     101If the apt signing key expires, apt will complain when refreshing the package cache (e.g. ''apt-get update''). In that case just download the key again as described above.