apt-get update GPG error, key expired

**saiko** · 2018-02-02

Hello,
I am trying to update Kali using the command apt-get update and I am receiving the following error:

Here is the output of apt-get update

Code:

Get:1 http://archive-7.kali.org/kali kali-rolling InRelease [30.5 kB]
Err:1 http://archive-7.kali.org/kali kali-rolling InRelease
  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <[email protected]>
Reading package lists... Done
W: GPG error: http://archive-7.kali.org/kali kali-rolling InRelease: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <[email protected]>
E: The repository 'http://http.kali.org/kali kali-rolling InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Looks like the gpg key has expired today.
I tried debugging using the following thread but cannot find the fingerprint of the new key
https://forums.kali.org/showthread.p...apt-get-update

Any help is appreciated.
Thank you.

Here is the output of my sources.list file

Code:

deb http://http.kali.org/kali kali-rolling main non-free contrib

And output of apt-key list

Code:

/etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg
----------------------------------------------------------
pub   rsa4096 2014-11-21 [SC] [expires: 2022-11-19]
      126C 0D24 BD8A 2942 CC7D  F8AC 7638 D044 2B90 D010
uid           [ unknown] Debian Archive Automatic Signing Key (8/jessie) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg
-------------------------------------------------------------------
pub   rsa4096 2014-11-21 [SC] [expires: 2022-11-19]
      D211 6914 1CEC D440 F2EB  8DDA 9D6D 8F6B C857 C906
uid           [ unknown] Debian Security Archive Automatic Signing Key (8/jessie) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg
-------------------------------------------------------
pub   rsa4096 2013-08-17 [SC] [expires: 2021-08-15]
      75DD C3C4 A499 F1A1 8CB5  F3C8 CBF8 D6FD 518E 17E1
uid           [ unknown] Jessie Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg
-----------------------------------------------------------
pub   rsa4096 2017-05-22 [SC] [expires: 2025-05-20]
      E1CF 20DD FFE4 B89E 8026  58F1 E0B1 1894 F66A EC98
uid           [ unknown] Debian Archive Automatic Signing Key (9/stretch) <[email protected]>
sub   rsa4096 2017-05-22 [S] [expires: 2025-05-20]

/etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg
--------------------------------------------------------------------
pub   rsa4096 2017-05-22 [SC] [expires: 2025-05-20]
      6ED6 F5CB 5FA6 FB2F 460A  E88E EDA0 D238 8AE2 2BA9
uid           [ unknown] Debian Security Archive Automatic Signing Key (9/stretch) <[email protected]>
sub   rsa4096 2017-05-22 [S] [expires: 2025-05-20]

/etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg
--------------------------------------------------------
pub   rsa4096 2017-05-20 [SC] [expires: 2025-05-18]
      067E 3C45 6BAE 240A CEE8  8F6F EF0F 382A 1A7B 6500
uid           [ unknown] Debian Stable Release Key (9/stretch) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg
----------------------------------------------------------
pub   rsa4096 2012-04-27 [SC] [expires: 2020-04-25]
      A1BD 8E9D 78F7 FE5C 3E65  D8AF 8B48 AD62 4692 5553
uid           [ unknown] Debian Archive Automatic Signing Key (7.0/wheezy) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg
-------------------------------------------------------
pub   rsa4096 2012-05-08 [SC] [expires: 2019-05-07]
      ED6D 6527 1AAC F0FF 15D1  2303 6FB2 A1C2 65FF B764
uid           [ unknown] Wheezy Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d/kali-archive-keyring.gpg
-----------------------------------------------
pub   rsa4096 2012-03-05 [SC] [expired: 2018-02-02]
      44C6 513A 8E4F B3D3 0875  F758 ED44 4FF0 7D8D 0BF6
uid           [ expired] Kali Linux Repository <[email protected]>

**evasiv** · 2018-02-02

Having the same issue.. been busy with it for hours, no luck so far.

**evasiv** · 2018-02-02

Right after I posted this message, I found the solution:

apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6

This will request new keys and fixed my issue. Good luck!

**sherwin12** · 2018-02-02

Hello,
I am also having same problem . i am a complete noob to this. i just installed a fresh 64 bit kali linux 2017.3 which downloaded from official site and installed it on vm virtualbox. Everything went smoothly untill i wanted to install guest addition. So everytime i tried apt-get update i would get the error telling key expired .i did try the https://forums.kali.org/showthread.p...apt-get-update option it just gave me it was a old version so i wasnt sure what next to do . Please do tell me if you know a fix .

**octavian** · 2018-02-02

im having the same issue. Looking for a fix.

**n3tr4k** · 2018-02-02

Try this:

Delete old keys:

Code:

rm -rf /var/lib/apt/lists
# apt-get update 
# apt-get install kali-archive-keyring

If didn't help:

One of these should work, don't know where gpg key nowadays:

Code:

# gpg --keyserver pgpkeys.mit.edu --recv-key  ED444FF07D8D0BF6
# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -

# apt-get update

**re4son** · 2018-02-02

Hi saiko,

Same here. This fixes it:

Code:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb

Hope that helps.

**crack888wei** · 2018-02-03

Originally Posted by re4son

Hi saiko,

Same here. This fixes it:

Code:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb

Hope that helps.

thank your help

**OneGuy** · 2018-02-03

Thanks it fixed my issue too

**WhiskeyTango** · 2018-02-04

Originally Posted by n3tr4k

Try this:

Delete old keys:

Code:

rm -rf /var/lib/apt/lists
# apt-get update 
# apt-get install kali-archive-keyring

If didn't help:

One of these should work, don't know where gpg key nowadays:

Code:

# gpg --keyserver pgpkeys.mit.edu --recv-key  ED444FF07D8D0BF6
# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -

# apt-get update

Was starting to think I was beyond saving, much obliged

**ross46** · 2018-02-04

gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
after update i got this error
gpg: key ED444FF07D8D0BF6: 130 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1

my update speed is in bytes per second, rarely touches 25 kbps, my download speed in browser is 2 MBps

**Toino** · 2018-02-04

Originally Posted by re4son

Hi saiko,

Same here. This fixes it:

Code:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb

Hope that helps.

For the most part this worked but i am having a problem with the installation of wifi pumpkin because it cant get some of the need dependencies and because of that i cant install the key.
Can someone help me with this problem.

Code:

root@Desktop:~# wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
--2018-02-04 16:53:02--  https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
Resolving http.kali.org (http.kali.org)... 192.99.200.113
Connecting to http.kali.org (http.kali.org)|192.99.200.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://archive-4.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb [following]
--2018-02-04 16:53:03--  https://archive-4.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
Resolving archive-4.kali.org (archive-4.kali.org)... 149.202.201.51
Connecting to archive-4.kali.org (archive-4.kali.org)|149.202.201.51|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6888 (6.7K) [application/octet-stream]
Saving to: ‘kali-archive-keyring_2018.1_all.deb’

kali-archive-keyrin 100%[===================>]   6.73K  --.-KB/s    in 0s      

2018-02-04 16:53:04 (75.4 MB/s) - ‘kali-archive-keyring_2018.1_all.deb’ saved [6888/6888]

root@Desktop:~# apt install ./kali-archive-keyring_2018.1_all.deb
Reading package lists... Done
Building dependency tree       
Reading state information... Done
You might want to run 'apt --fix-broken install' to correct these.
The following packages have unmet dependencies:
 wifi-pumpkin : Depends: libssl-dev but it is not installed
                Depends: libxml2-dev but it is not installed
                Depends: libxslt1-dev but it is not installed
                Depends: zlib1g-dev but it is not installed
                Depends: libnetfilter-queue-dev but it is not installed
                Depends: hostapd but it is not installed
                Depends: libpcap-dev but it is not installed
E: Unmet dependencies. Try 'apt --fix-broken install' with no packages (or specify a solution).
root@Desktop:~# apt--fix-broken install
bash: apt--fix-broken: command not found
root@Desktop:~# apt --fix-broken install
Reading package lists... Done
Building dependency tree       
Reading state information... Done
Correcting dependencies... Done
The following additional packages will be installed:
  hostapd icu-devtools libicu-dev libnetfilter-queue-dev libnfnetlink-dev
  libpcap-dev libpcap0.8-dev libssl-dev libssl-doc libxml2-dev libxslt1-dev
  pkg-config zlib1g-dev
Suggested packages:
  icu-doc
The following NEW packages will be installed:
  hostapd icu-devtools libicu-dev libnetfilter-queue-dev libnfnetlink-dev
  libpcap-dev libpcap0.8-dev libssl-dev libssl-doc libxml2-dev libxslt1-dev
  pkg-config zlib1g-dev
0 upgraded, 13 newly installed, 0 to remove and 0 not upgraded.
1 not fully installed or removed.
Need to get 1,343 kB/22.2 MB of archives.
After this operation, 115 MB of additional disk space will be used.
Do you want to continue? [Y/n] y
Err:1 http://http.kali.org/kali kali-rolling/main amd64 libxslt1-dev amd64 1.1.29-2.2
  404  Not Found
Err:2 http://http.kali.org/kali kali-rolling/main amd64 hostapd amd64 2:2.4-1.1
  404  Not Found
Err:3 http://http.kali.org/kali kali-rolling/main amd64 libpcap0.8-dev amd64 1.8.1-5
  404  Not Found
Err:4 http://http.kali.org/kali kali-rolling/main amd64 libpcap-dev amd64 1.8.1-5
  404  Not Found
E: Failed to fetch http://http.kali.org/kali/pool/main/libx/libxslt/libxslt1-dev_1.1.29-2.2_amd64.deb  404  Not Found
E: Failed to fetch http://http.kali.org/kali/pool/main/w/wpa/hostapd_2.4-1.1_amd64.deb  404  Not Found
E: Failed to fetch http://http.kali.org/kali/pool/main/libp/libpcap/libpcap0.8-dev_1.8.1-5_amd64.deb  404  Not Found
E: Failed to fetch http://http.kali.org/kali/pool/main/libp/libpcap/libpcap-dev_1.8.1-5_amd64.deb  404  Not Found
E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing?
root@Desktop:~#

**vmt612** · 2018-02-05

Thanks . This fixed my update issue.

**edmon.aft** · 2018-02-05

Originally Posted by re4son

Hi saiko,

Same here. This fixes it:

Code:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb

Hope that helps.

This fixed it! Thanks a lot!

**versen5656** · 2018-02-05

Originally Posted by re4son

Hi saiko,

Same here. This fixes it:

Code:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb

Hope that helps.

thank you friend

**Gamliel** · 2018-02-05

Thank you @evasiv that helped me.

Ben gave the solution too almost near of 3 years ago...

https://forums.kali.org/showthread.p...ll=1#post42556

Thank you Kali Community!

**Md sarfaraz Alam** · 2018-02-06

Originally Posted by re4son

Hi saiko,

Same here. This fixes it:

Code:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb

Hope that helps.

Thnks a lot bro...i was also stucked in dat problem .Dude u solved it.I m thnkful you

**KnuckleHead** · 2018-02-07

Originally Posted by evasiv

Right after I posted this message, I found the solution:

apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6

This will request new keys and fixed my issue. Good luck!

I see no one followed you on the advice. It worked just fine.
Tks

**cloud9j** · 2018-02-08

Here's what i tried so far and it is still not working for me:

root@GhostTown:~# apt-get clean && apt-get update && apt-get upgrade -y && apt-get dist-upgrade -y
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# wget https://http.kali.org/kali/pool/main...2018.1_all.deb
--2018-02-08 18:17:29-- https://http.kali.org/kali/pool/main...2018.1_all.deb
Resolving http.kali.org (http.kali.org)... 192.99.200.113
Connecting to http.kali.org (http.kali.org)|192.99.200.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://archive-10.kali.org/kali/poo...2018.1_all.deb [following]
--2018-02-08 18:17:29-- https://archive-10.kali.org/kali/poo...2018.1_all.deb
Resolving archive-10.kali.org (archive-10.kali.org)... 167.114.101.149
Connecting to archive-10.kali.org (archive-10.kali.org)|167.114.101.149|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6888 (6.7K) [application/octet-stream]
Saving to: ‘kali-archive-keyring_2018.1_all.deb.1’

kali-archive-keyrin 100%[===================>] 6.73K --.-KB/s in 0s

2018-02-08 18:17:29 (84.1 MB/s) - ‘kali-archive-keyring_2018.1_all.deb.1’ saved [6888/6888]

root@GhostTown:~# apt install ./kali-archive-keyring_2018.1_all.deb
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'kali-archive-keyring' instead of './kali-archive-keyring_2018.1_all.deb'
kali-archive-keyring is already the newest version (2018.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# gpg --keyserver pgpkeys.mit.edu --recv-key ED444FF07D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~#
root@GhostTown:~# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
Executing: /tmp/apt-key-gpghome.um2GTZu6eL/gpg.1.sh --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# rm -rf /var/lib/apt/lists
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# apt-get install kali-archive-keyring
Reading package lists... Done
Building dependency tree
Reading state information... Done
kali-archive-keyring is already the newest version (2018.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GhostTown:~# gpg --keyserver pgpkeys.mit.edu --recv-key ED444FF07D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
OK
root@GhostTown:~# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
Executing: /tmp/apt-key-gpghome.y4cN1euMcS/gpg.1.sh --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
OK
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# wget https://http.kali.org/kali/pool/main...2018.1_all.deb
--2018-02-08 18:24:31-- https://http.kali.org/kali/pool/main...2018.1_all.deb
Resolving http.kali.org (http.kali.org)... 192.99.200.113
Connecting to http.kali.org (http.kali.org)|192.99.200.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://archive-12.kali.org/kali/poo...2018.1_all.deb [following]
--2018-02-08 18:24:31-- https://archive-12.kali.org/kali/poo...2018.1_all.deb
Resolving archive-12.kali.org (archive-12.kali.org)... 167.114.101.174
Connecting to archive-12.kali.org (archive-12.kali.org)|167.114.101.174|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6888 (6.7K) [application/octet-stream]
Saving to: ‘kali-archive-keyring_2018.1_all.deb.2’

kali-archive-keyrin 100%[===================>] 6.73K --.-KB/s in 0s

2018-02-08 18:24:31 (167 MB/s) - ‘kali-archive-keyring_2018.1_all.deb.2’ saved [6888/6888]

root@GhostTown:~# apt install ./kali-archive-keyring_2018.1_all.deb
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'kali-archive-keyring' instead of './kali-archive-keyring_2018.1_all.deb'
kali-archive-keyring is already the newest version (2018.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~#

My repositories sources.list is as follows:

deb http://http.kali.org/kali kali-rolling main contrib non-free
# For source package access, uncomment the following line
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free

Any help would be greatly appreciated. I am new to this version and have "some" experience with linux so bare with me plz

**undersc0re** · 2018-02-09

wget -q -O - archive.kali.org/archive-key.asc | apt-key add

**KnuckleHead** · 2018-02-09

Originally Posted by cloud9j

Here's what i tried so far and it is still not working for me:

root@GhostTown:~# apt-get clean && apt-get update && apt-get upgrade -y && apt-get dist-upgrade -y
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# wget https://http.kali.org/kali/pool/main...2018.1_all.deb
--2018-02-08 18:17:29-- https://http.kali.org/kali/pool/main...2018.1_all.deb
Resolving http.kali.org (http.kali.org)... 192.99.200.113
Connecting to http.kali.org (http.kali.org)|192.99.200.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://archive-10.kali.org/kali/poo...2018.1_all.deb [following]
--2018-02-08 18:17:29-- https://archive-10.kali.org/kali/poo...2018.1_all.deb
Resolving archive-10.kali.org (archive-10.kali.org)... 167.114.101.149
Connecting to archive-10.kali.org (archive-10.kali.org)|167.114.101.149|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6888 (6.7K) [application/octet-stream]
Saving to: ‘kali-archive-keyring_2018.1_all.deb.1’

kali-archive-keyrin 100%[===================>] 6.73K --.-KB/s in 0s

2018-02-08 18:17:29 (84.1 MB/s) - ‘kali-archive-keyring_2018.1_all.deb.1’ saved [6888/6888]

root@GhostTown:~# apt install ./kali-archive-keyring_2018.1_all.deb
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'kali-archive-keyring' instead of './kali-archive-keyring_2018.1_all.deb'
kali-archive-keyring is already the newest version (2018.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# gpg --keyserver pgpkeys.mit.edu --recv-key ED444FF07D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~#
root@GhostTown:~# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
Executing: /tmp/apt-key-gpghome.um2GTZu6eL/gpg.1.sh --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# rm -rf /var/lib/apt/lists
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# apt-get install kali-archive-keyring
Reading package lists... Done
Building dependency tree
Reading state information... Done
kali-archive-keyring is already the newest version (2018.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GhostTown:~# gpg --keyserver pgpkeys.mit.edu --recv-key ED444FF07D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
OK
root@GhostTown:~# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
Executing: /tmp/apt-key-gpghome.y4cN1euMcS/gpg.1.sh --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" not changed
gpg: Total number processed: 1
gpg: unchanged: 1
root@GhostTown:~# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -
key ED444FF07D8D0BF6:
132 signatures not checked due to missing keys
OK
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~# wget https://http.kali.org/kali/pool/main...2018.1_all.deb
--2018-02-08 18:24:31-- https://http.kali.org/kali/pool/main...2018.1_all.deb
Resolving http.kali.org (http.kali.org)... 192.99.200.113
Connecting to http.kali.org (http.kali.org)|192.99.200.113|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://archive-12.kali.org/kali/poo...2018.1_all.deb [following]
--2018-02-08 18:24:31-- https://archive-12.kali.org/kali/poo...2018.1_all.deb
Resolving archive-12.kali.org (archive-12.kali.org)... 167.114.101.174
Connecting to archive-12.kali.org (archive-12.kali.org)|167.114.101.174|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 6888 (6.7K) [application/octet-stream]
Saving to: ‘kali-archive-keyring_2018.1_all.deb.2’

kali-archive-keyrin 100%[===================>] 6.73K --.-KB/s in 0s

2018-02-08 18:24:31 (167 MB/s) - ‘kali-archive-keyring_2018.1_all.deb.2’ saved [6888/6888]

root@GhostTown:~# apt install ./kali-archive-keyring_2018.1_all.deb
Reading package lists... Done
Building dependency tree
Reading state information... Done
Note, selecting 'kali-archive-keyring' instead of './kali-archive-keyring_2018.1_all.deb'
kali-archive-keyring is already the newest version (2018.1).
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
root@GhostTown:~# apt-get update
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@GhostTown:~#

My repositories sources.list is as follows:

deb http://http.kali.org/kali kali-rolling main contrib non-free
# For source package access, uncomment the following line
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free

Any help would be greatly appreciated. I am new to this version and have "some" experience with linux so bare with me plz

[b]Try this command[b]

Code:

apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6

that took care of my invalid key information.

I forgot to include after you use the command of

Code:

apt-get update --fix-missing

Enter

now

Code:

apt-get update && apt-get upgrade

and all should work well.[/code]

**testerx** · 2018-02-10

Hello,
try with

# wget 'https://archive.kali.org/archive-key.asc'
# apt-key add archive-key.asc

and finally run

# apt-get update

it works fine

**garthoid** · 2018-02-11

I have the same issue as cloud9j:

root@kali:~# apt-get update --fix-missing
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@kali:~#

Nothing in this threat has helped. issue remains.
Any help appreciated.

**tyrantbit** · 2018-02-12

Great! Thank you

**ghostcrawler** · 2018-02-12

Originally Posted by n3tr4k

Try this:

Delete old keys:

Code:

rm -rf /var/lib/apt/lists
# apt-get update 
# apt-get install kali-archive-keyring

Thanks alot, actually this works for me,

If didn't help:

One of these should work, don't know where gpg key nowadays:

Code:

# gpg --keyserver pgpkeys.mit.edu --recv-key  ED444FF07D8D0BF6
# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -

# apt-get update

Thanks alot, actually this worked for me after spending hours on the internet.

**c4pta1nh0wdy** · 2018-02-13

I am experiancing the same issue as stated above and have tried each of the solutions provided here with no luck. On each instance when running any form of update/upgrade I still receive the error line stating
"E: The repository 'file:/var/cache/apt-build/repository apt-build Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

Is there anything else that I can do to resolve this issue?

# apt-get update
Get:1 file:/var/cache/apt-build/repository apt-build InRelease
Ign:1 file:/var/cache/apt-build/repository apt-build InRelease
Get:2 file:/var/cache/apt-build/repository apt-build Release [1,530 B]
Get:2 file:/var/cache/apt-build/repository apt-build Release [1,530 B]
Get:3 file:/var/cache/apt-build/repository apt-build Release.gpg
Ign:3 file:/var/cache/apt-build/repository apt-build Release.gpg
Hit:4 http://archive-7.kali.org/kali kali-rolling InRelease
Hit:5 http://deb.i2p2.no unstable InRelease
Reading package lists... Done
E: The repository 'file:/var/cache/apt-build/repository apt-build Release' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

apt-key list
/etc/apt/trusted.gpg
--------------------
pub rsa4096 2013-10-10 [SC] [expires: 2018-10-13]
7840 E761 0F28 B904 7535 49D7 67EC E560 5BCF 1346
uid [ unknown] I2P Debian Package Repository <[email protected]>
sub rsa4096 2014-03-21 [S] [expires: 2018-10-13]

pub rsa4096 2013-04-06 [SC] [expired: 2016-04-10]
3E23 3DAE 0674 7F9E 0C64 D175 8CF6 E896 B3C0 1B09
uid [ expired] KillYourTV Debian repository signing key <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-jessie-automatic.gpg
----------------------------------------------------------
pub rsa4096 2014-11-21 [SC] [expires: 2022-11-19]
126C 0D24 BD8A 2942 CC7D F8AC 7638 D044 2B90 D010
uid [ unknown] Debian Archive Automatic Signing Key (8/jessie) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-jessie-security-automatic.gpg
-------------------------------------------------------------------
pub rsa4096 2014-11-21 [SC] [expires: 2022-11-19]
D211 6914 1CEC D440 F2EB 8DDA 9D6D 8F6B C857 C906
uid [ unknown] Debian Security Archive Automatic Signing Key (8/jessie) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-jessie-stable.gpg
-------------------------------------------------------
pub rsa4096 2013-08-17 [SC] [expires: 2021-08-15]
75DD C3C4 A499 F1A1 8CB5 F3C8 CBF8 D6FD 518E 17E1
uid [ unknown] Jessie Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-stretch-automatic.gpg
-----------------------------------------------------------
pub rsa4096 2017-05-22 [SC] [expires: 2025-05-20]
E1CF 20DD FFE4 B89E 8026 58F1 E0B1 1894 F66A EC98
uid [ unknown] Debian Archive Automatic Signing Key (9/stretch) <[email protected]>
sub rsa4096 2017-05-22 [S] [expires: 2025-05-20]

/etc/apt/trusted.gpg.d/debian-archive-stretch-security-automatic.gpg
--------------------------------------------------------------------
pub rsa4096 2017-05-22 [SC] [expires: 2025-05-20]
6ED6 F5CB 5FA6 FB2F 460A E88E EDA0 D238 8AE2 2BA9
uid [ unknown] Debian Security Archive Automatic Signing Key (9/stretch) <[email protected]>
sub rsa4096 2017-05-22 [S] [expires: 2025-05-20]

/etc/apt/trusted.gpg.d/debian-archive-stretch-stable.gpg
--------------------------------------------------------
pub rsa4096 2017-05-20 [SC] [expires: 2025-05-18]
067E 3C45 6BAE 240A CEE8 8F6F EF0F 382A 1A7B 6500
uid [ unknown] Debian Stable Release Key (9/stretch) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-wheezy-automatic.gpg
----------------------------------------------------------
pub rsa4096 2012-04-27 [SC] [expires: 2020-04-25]
A1BD 8E9D 78F7 FE5C 3E65 D8AF 8B48 AD62 4692 5553
uid [ unknown] Debian Archive Automatic Signing Key (7.0/wheezy) <[email protected]>

/etc/apt/trusted.gpg.d/debian-archive-wheezy-stable.gpg
-------------------------------------------------------
pub rsa4096 2012-05-08 [SC] [expires: 2019-05-07]
ED6D 6527 1AAC F0FF 15D1 2303 6FB2 A1C2 65FF B764
uid [ unknown] Wheezy Stable Release Key <[email protected]>

/etc/apt/trusted.gpg.d/kali-archive-keyring.gpg
-----------------------------------------------
pub rsa4096 2012-03-05 [SC] [expires: 2021-02-03]
44C6 513A 8E4F B3D3 0875 F758 ED44 4FF0 7D8D 0BF6
uid [ unknown] Kali Linux Repository <[email protected]>
sub rsa4096 2012-03-05 [E] [expires: 2021-02-03]

[B]/etc/apt/sources.list.d/apt.build.list[/B
deb [arch=amd64] file:/var/cache/apt-build/repository apt-build main
]

**garthoid** · 2018-02-15

Originally Posted by garthoid

I have the same issue as cloud9j:

root@kali:~# apt-get update --fix-missing
Err:1 http://repo.kali.org/kali kali-rolling InRelease
403 Forbidden
Reading package lists... Done
E: Failed to fetch http://repo.kali.org/kali/dists/kali-rolling/InRelease 403 Forbidden
E: Some index files failed to download. They have been ignored, or old ones used instead.
root@kali:~#

Nothing in this threat has helped. issue remains.
Any help appreciated.

The solution to 403 forbidden (from http://www.kali-linux.fr/forum/index.php?topic=4311.0)

-edit /etc/apt/sources.list
-ensure the repo is:
-deb http://http.kali.org/kali kali-rolling main contrib non-free
-save
-run apt-get update again.

**_defalt** · 2018-02-18

sudo wget -q -O - https://www.kali.org/archive-key.asc | apt-key add
sudo apt update

**jhelios** · 2018-03-05

Work excellent, thanks

**chixvicious** · 2018-03-07

Originally Posted by evasiv

Right after I posted this message, I found the solution:

apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6

This will request new keys and fixed my issue. Good luck!

This was exactly what I've been looking for all morning, thank you!!

**njiewoces** · 2018-03-12

Originally Posted by evasiv

Right after I posted this message, I found the solution:

apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6

This will request new keys and fixed my issue. Good luck!

Thanks ... This Works ..

**dmoney$22** · 2018-03-16

Originally Posted by n3tr4k

Try this:

Delete old keys:

Code:

rm -rf /var/lib/apt/lists
# apt-get update 
# apt-get install kali-archive-keyring

If didn't help:

One of these should work, don't know where gpg key nowadays:

Code:

# gpg --keyserver pgpkeys.mit.edu --recv-key  ED444FF07D8D0BF6
# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -

# apt-get update

Thank you, n3tr4k.

Code:

rm -rf /var/lib/apt/lists
apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
apt-get update

The above worked for me and I am now able to update my system.

**jaqueline** · 2018-03-24

[QUOTE=n3tr4k;77081]Try this:

Delete old keys:

Code:

rm -rf /var/lib/apt/lists
# apt-get update 
# apt-get install kali-archive-keyring

If didn't help:

One of these should work, don't know where gpg key nowadays:
[CODE]# gpg --keyserver pgpkeys.mit.edu --recv-key ED444FF07D8D0BF6
# apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6
# gpg --keyserver hkp://keys.gnupg.net --recv-key 7D8D0BF6
# gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -

# apt-get update

Thanks man. this solved my problem

**jaqueline** · 2018-03-24

This solved My problem. Thanks man

**absentcs** · 2018-03-30

Thank you dear Love you & love this solution bro ........................

**bozeyman420** · 2018-04-15

error: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <[email protected]>

input: apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys ED444FF07D8D0BF6
Executing: /tmp/apt-key-gpghome.9lUyqW3LQW/gpg.1.sh --keyserver hkp://keys.gnupg.net --recv-keys ED444FF07D8D0BF6
uid Kali Linux Repository <[email protected]>
sig!3 ED444FF07D8D0BF6 2015-02-03 [self-signature]
sig!3 ED444FF07D8D0BF6 2012-03-05 [self-signature]
sig!3 ED444FF07D8D0BF6 2018-01-25 [self-signature]
sub A8373E18FC0D0DCB
sig! ED444FF07D8D0BF6 2015-02-03 [self-signature]
sig! ED444FF07D8D0BF6 2012-03-05 [self-signature]
sig! ED444FF07D8D0BF6 2018-01-25 [self-signature]
key ED444FF07D8D0BF6:
1 duplicate signature removed
136 signatures not checked due to missing keys
gpg: key ED444FF07D8D0BF6: "Kali Linux Repository <[email protected]>" 139 new signatures
gpg: Total number processed: 1
gpg: new signatures: 139

my command of apt update seems to be working now....
output:

UPDATE:
okay real talk..., somebody has to restart a server, im getting a download speed of like Kb/s which is totally unacceptable....

**ruanchaoyang** · 2018-11-16

Originally Posted by evasiv

Right after I posted this message, I found the solution:

apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6

This will request new keys and fixed my issue. Good luck!

This solution fix my problem easily. Thanks

**Varman** · 2018-12-07

I tried it but didn't work for me.

Please suggest me a good solution to update

**Mister_X** · 2018-12-09

Varman, check the documentation and update your sources.list entry, it should be http.kali.org

If you have such an old version, I'd recommend to download a new ISO and reinstall.

**[email protected]** · 2019-02-22

This worked for me.. Thanks.

Thread: apt-get update GPG error, key expired

Thread Tools

Search Thread

Display

apt-get update GPG error, key expired

Fix

hii "re4son;77082" .Thnks a lot bro...keep in touch...

tks

403 forbidden solution

Thank you!! worked for me!!

Problem wint update Kali

Awesome works for me bro.................

Similar Threads

apt-get update GPG error, key expired

Kali Net Hunter Key Expired

Expired certificate archive.kali.org

How to update expired keys/signatures for repo?

Error in boot of kali linux ! INIT ERROR after apt-get dist-update

Tags for this Thread

Posting Permissions