Problem with GPG signature verification during dnf update on Fedora 41

Ask Fedora
1

I dnf update and I got this error:

Running transaction
Importing OpenPGP key 0xE99D6AD1:
 UserID     : "Fedora (41) <fedora-41-primary@fedoraproject.org>"
 Fingerprint: 466CF2D8B60BC3057AA9453ED0622462E99D6AD1
 From       : file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-41-aarch64
Is this ok [y/N]: y
The key was successfully imported.
Transaction failed: Signature verification failed.
OpenPGP check for package "kernel-6.13.9-200.fc41.aarch64" (/var/cache/libdnf5/updates-f5bf130a412ac3b6/packages/kernel-6.13.9-200.fc41.aarch64.rpm) from repo "updates" has failed: Problem occurred when opening the package.

When I try to check the rpm with -K, I get this:

/var/cache/libdnf5/updates-f5bf130a412ac3b6/packages/kernel-6.13.9-200.fc41.aarch64.rpm:error: Verifying a signature using certificate 466CF2D8B60BC3057AA9453ED0622462E99D6AD1 (Fedora (41) <fedora-41-primary@fedoraproject.org>):
  Signature 4e3d created at Sat Mar 29 05:40:42 2025 invalid: signature is not alive
      because: Not live until 2025-03-29T05:35:42Z
 digests SIGNATURES NOT OK

Any idea what can be wrong and how to fix this? Thanks!

2

I would check the date/time on that machine first - it looks like its rejecting the signature on the update because it thinks the signature isn’t valid yet.

2 Likes
3

Ha! Stupid me. Thx!

4

Not so stupid. There have been bugreports about how to set the initial date and time near to the current time when no RTC is available.