Support,

I’m unable to update my Gitlab-ce install due to bad keys being detected. Is this a Gitlab update issue or something gone wrong on my system? I had to replace https:// with (url) to get this message to post.

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: (url): The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) packages@gitlab.com
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: (url): The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) packages@gitlab.com
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: (url): The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) packages@gitlab.com
W: Failed to fetch (url) The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) packages@gitlab.com
W: Failed to fetch (url) The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) packages@gitlab.com
W: Failed to fetch (url) The following signatures were invalid: EXPKEYSIG 3F01618A51312F3F GitLab B.V. (package repository signing key) packages@gitlab.com
W: Some index files failed to download. They have been ignored, or old ones used instead.

Do this:

curl -s https://packages.gitlab.com/gpg.key | apt-key add -
apt-get update

that worked for me on Debian 10 and Debian 11, so should work for you assuming you use Debian/Ubuntu.

This post should also provide extra info: Omnibus-gitlab packages gpg key expired - #6 by twk3 which provides this Gitlab doc: Cryptographic details related to `omnibus-gitlab` packages | GitLab

And this one: GitLab GPG expired today (#6701) · Issues · GitLab.org / omnibus-gitlab · GitLab of which worked for me using the two commands I gave above.

Thanks!

That fixed the bad keys messages when doing an update.

Running into the same issue. Is there any official page which provides information when the keys are refreshed or changed?

@L91 in my post above are links to Gitlab documentation as well as the Gitlab issue where the problem was being looked at. Both are official links. There is also that link as well pulled from the forum post that was also linked: Cryptographic details related to `omnibus-gitlab` packages | GitLab

I get ‘gpg: no valid OpenPGP data found’, but ackwardly enough i can do upgrade(ubuntu 18LTS)

Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead