![](https://seccdn.libravatar.org/avatar/ca80dcfc6058a3d40bcef1fc9407e0b6.jpg?s=120&d=mm&r=g)
Alex, Thanks for the quick response. On Tue, 16 Mar 2021 10:57:02 +0100, Alexander Graul wrote:
Hi Mark,
I can't speak to 1) but let me explain the cause of your second problem.
Mark Grant <m.grant.prg@gmail.com> writes:
2) This is the second problem. I established that the key had been refreshed on opensuse.org and now had a mid-2023 expiry date so I thought re-downloading it using the curl command in the instructions should do the trick. The command worked OK but the curl command had changed from using a target keyring of "home:m-grant-prg.gpg" to "home_m-grant-prg.gpg". So the curl command did not overwrite the old keyring. The end result was that the old expired key was still found and repository actions still errored out. The solution I have suggested to the user community is to remove the offending keyring.
This change was done in [1] due to the following GitHub Issue[2]. Apparently the old keyring file names would break GPG in some way.
I have not seen the gpg problem described, but obviously you had to fix it.
When I accepted this PR I did not think of your use-case (updating the keyring) and I'm sorry for causing the trouble.
The question is how to go from here. Rolling back the change would not only cause the issue mentioned above again, it would also cause the same problem you just experienced in the other direction. Maybe it's better to document this somewhere and suggest what you did: removing any old keyring file for the repo. What do you think about that?
I agree that your original patch should stand, I agree with your assessment above. Documenting it seems the right thing to do but I wouldn't know where. I ended up suggesting to my user community to run sudo rm -v /etc/apt/trusted.gpg.d/home:m-grant-prg.gpg This still worries me as asking users to run such a command does have risks, if they cut and paste fine but... The alternative to use apt-key del for that key in that keyring might be safer but may fall foul of your gpg error and also may still leave the keyring even though empty. So I think it should be documented and suggest the rm option. Thanks for your help. Regards, Mark
Best, Alex
1: https://github.com/openSUSE/software-o-o/issues/842 2: https://github.com/openSUSE/software-o-o/pull/843