@kicad/kicad

This is a nightly built repository for KiCad http://www.kicad-pcb.org/ with python scripting enabled, but with wxpython disabled. OCE enabled.


This is a companion discussion topic for the original entry at https://copr.fedorainfracloud.org/coprs/g/kicad/kicad/

Hi,

as of today’s kicad nightly update, it seems like the GPG key pair used to sign the COPR repo is expired. Maybe renew it?

here is the end part of the dnf logs:

Downloading Packages:
[...]
(40/42): kicad-nightly-7.99.0-1.20230508git9f62e88.fc38.x86_ 2.2 MB/s |  68 MB     00:30
[...]
(42/42): kicad-nightly-doc-7.99.0-1.20230508gitb99e2da.fc38. 5.5 MB/s | 298 MB     00:54    
---------------------------------------------------------------------------------------------
[...]
error: Verifying a signature using certificate DD4B35E70DC95FDE699B4F0C13A8A6344C710964 (@kicad_kicad (None) <@kicad#kicad@copr.fedorahosted.org>):
  1. Certificiate 13A8A6344C710964 invalid: certificate is not alive
      because: The primary key is not live
      because: Expired on 2022-04-09T21:57:20Z
  2. Key 13A8A6344C710964 invalid: key is not alive
      because: The primary key is not live
      because: Expired on 2022-04-09T21:57:20Z
The GPG keys listed for the "Copr repo for kicad owned by @kicad" repository are already installed but they are not correct for this package.
Check that the correct key URLs are configured for this repository.. Failing package is: kicad-nightly-7.99.0-1.20230508git9f62e88.fc38.x86_64
 GPG Keys are configured as: https://download.copr.fedorainfracloud.org/results/@kicad/kicad/pubkey.gpg
Public key for kicad-nightly-doc-7.99.0-1.20230508gitb99e2da.fc38.noarch.rpm is not trusted. Failing package is: kicad-nightly-doc-7.99.0-1.20230508gitb99e2da.fc38.noarch
 GPG Keys are configured as: https://download.copr.fedorainfracloud.org/results/@kicad/kicad/pubkey.gpg
The downloaded packages were saved in cache until the next successful transaction.
You can remove cached packages by executing 'dnf clean packages'.
Error: GPG check FAILED

Cheerio;
Yours Truly

Just to follow-up on this on the Fedora side, the question was answered over at the KiCad forums: Official COPR Fedora/RPM repository GPG-key expired - #2 by imcinerney - Software - KiCad.info Forums.

Basically, the key on the server is fine, but it is just the locally installed version that is expired. To fix this, the following commands need to be run:

  1. Find the actual COPR key using: rpm -q --qf "%{NAME}-%{VERSION}-%{RELEASE}\t%{SUMMARY}\n" gpg-pubkey | grep kicad
  2. Remove your current GPG key for the COPR using sudo rpm -e gpg-pubkey-XXXXXXXX-XXXXXXXX (replacing the gpg-pubkey-* with the numbers from step 1.
  3. Add the new COPR key: sudo rpm --import https://download.copr.fedorainfracloud.org/results/@kicad/kicad/pubkey.gpg