[SERVER-76348] GPG error: http://repo.mongodb.org/apt/ubuntu bionic/mongodb-org/4.0 Release: The following signatures were invalid: EXPKEYSIG 68818C72E52529D4 Created: 20/Apr/23  Updated: 17/Aug/23  Resolved: 20/Apr/23

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: 4.0 Required
Fix Version/s: None

Type: Bug Priority: Major - P3
Reporter: Or Keren Assignee: Chris Kelly
Resolution: Won't Do Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Duplicate
is duplicated by SERVER-80182 "The following signatures were invali... Closed
Assigned Teams:
Server Development Platform
Operating System: ALL
Steps To Reproduce:

Our script runs

 

echo "deb [ arch=amd64 ] http://repo.mongodb.org/apt/ubuntu bionic/mongodb-org/4.0 multiverse" \

tee /etc/apt/sources.list.d/mongodb-org-4.0.list \
&& apt-key add /mongodb-4.0-ubuntu.asc \
&& apt-get update 

 

I also downloaded the server-4.0.asc/pub file from here: https://pgp.mongodb.com/ and ran the following locally:

gpg --show-keys server-4.0.pub

The output of this command shows the key has expired on April 17th

gpg --show-keys server-4.0.pub
pub   rsa4096 2018-04-18 [SC] [expired: 2023-04-17]
      9DA31620334BD75D9DCB49F368818C72E52529D4
uid                      MongoDB 4.0 Release Signing Key <packaging@mongodb.com>

Participants:

 Description   

Hello,

Our builds started to fail building on April 17th 2023 and started receiving the above error.

It seems that the public key for mongodb 4 is expired



 Comments   
Comment by Chris Kelly [ 20/Apr/23 ]

Hey okeren@salesforce.com,

Thanks for your report! MongoDB 4.0 reached end of life in April 2022 and is no longer supported. The keys for our supported versions are still active.

I'll go ahead and close this since it's not something we plan on resolving, but if you ever notice something like this on a supported version, we'd definitely want to know. Thanks for keeping an eye out!

Christopher

Generated at Thu Feb 08 06:32:28 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.