GNOME Software will not download updates

Ask Fedora
,
1

Specifically, updates that require restarting. I hit download, “Cancel” and the progress bar appears for a few seconds, and then fails. Then, download button goes back to what it looks like before you press it. Below is the ending output of dnf update. Is it because of ProtonVPN? Thanks

Total                                            12 MB/s | 945 MB     01:19     
Delta RPMs reduced 951.4 MB of updates to 945.3 MB (0.6% saved)
error: Verifying a signature using certificate A88441BD4864F95BEE08E63A71EB474019940E11 (Proton Technologies AG <opensource@proton.me>):
  1. Certificiate 71EB474019940E11 invalid: certificate is not alive
      because: The primary key is not live
      because: Expired on 2022-10-28T13:52:11Z
  2. Key 71EB474019940E11 invalid: key is not alive
      because: The primary key is not live
      because: Expired on 2022-10-28T13:52:11Z
ProtonVPN Fedora Stable repository              9.9 kB/s | 4.7 kB     00:00    
GPG key at https://repo.protonvpn.com/fedora-38-stable/public_key.asc (0x645F044F) is already installed
GPG key at https://repo.protonvpn.com/fedora-38-stable/public_key.asc (0x19940E11) is already installed
The GPG keys listed for the "ProtonVPN Fedora Stable repository" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: protonvpn-stable-release-1.0.1-2.noarch
 GPG Keys are configured as: https://repo.protonvpn.com/fedora-38-stable/public_key.asc
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED
2

Looks like the two key you have installed have expired on 2022-10-28.

I would delete them first, then install their current key. I would maybe also delete the protonvpn package first, and reinstall it after installing their latest key.

sudo rpm -qa gpg-pubkey --qf "gpg-pubkey-%{version}-%{release} %{summary}\n"

gives you a list of gpg keys installed with their id. you can then use

rpm -e gpg-pubkey-xxxxxxxx-xxxxxxxx

to erase the proton key.

then remove protonvpn package (dnf remove ...) run dnf update,
To install their current gpg key:

sudo rpm --import https://repo.protonvpn.com/fedora-38-stable/public_key.asc`

then dnf install protonvpn (or whatever that package is called). No worries, your config remains even if you remove the proton package.