GPG error: http://apt.myvestacp.com/buster buster InRelease: The following signatures were invalid: EXPKEYSIG

[pantherra]

Describe the problem:

Invalid GNU GPG Signature of http://apt.myvestacp.com/buster

Installation will take about 15 minutes ...

Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
--2021-07-12 16:01:06-- http://nginx.org/keys/nginx_signing.key
Resolving nginx.org (nginx.org)... 3.125.197.172, 52.58.199.22, 2a05:d014:edb:5702::6, ...
Connecting to nginx.org (nginx.org)|3.125.197.172|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1561 (1.5K) [application/octet-stream]
Saving to: ‘/tmp/nginx_signing.key’

/tmp/nginx_signing.key 100%[================================================================================================================>] 1.52K --.-KB/s in 0s

2021-07-12 16:01:09 (39.5 MB/s) - ‘/tmp/nginx_signing.key’ saved [1561/1561]

OK
--2021-07-12 16:01:11-- http://c.myvestacp.com/deb_signing.key
Resolving c.myvestacp.com (c.myvestacp.com)... 172.67.198.218, 104.21.92.215, 2606:4700:3031::6815:5cd7, ...
Connecting to c.myvestacp.com (c.myvestacp.com)|172.67.198.218|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 2472 (2.4K) [application/octet-stream]
Saving to: ‘deb_signing.key’

deb_signing.key 100%[================================================================================================================>] 2.41K --.-KB/s in 0s

2021-07-12 16:01:11 (168 MB/s) - ‘deb_signing.key’ saved [2472/2472]

OK
Hit:1 http://security.debian.org/debian-security buster/updates InRelease
Hit:2 http://nginx.org/packages/debian buster InRelease
Get:3 http://mirror.hoster.kz/debian buster InRelease [122 kB]
Get:4 http://apt.myvestacp.com/buster buster InRelease [2,305 B]
Err:4 http://apt.myvestacp.com/buster buster InRelease
The following signatures were invalid: EXPKEYSIG 79BEAE6B0892C285 Predrag Damnjanovic [email protected]
Get:5 http://mirror.hoster.kz/debian buster-updates InRelease [51.9 kB]
Reading package lists... Done
W: GPG error: http://apt.myvestacp.com/buster buster InRelease: The following signatures were invalid: EXPKEYSIG 79BEAE6B0892C285 Predrag Damnjanovic [email protected]
E: The repository 'http://apt.myvestacp.com/buster buster InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Unable to locate package vesta
E: Unable to locate package vesta-nginx
E: Unable to locate package vesta-php
Error: apt-get install failed

Steps to Reproduce:

Just install myvesta from scratch on Debian 10.

Debian version:

Debian 10

VestaCP Version:

0.9.8.26-29

Installed Software (what you got with the installer):

sudo bash vst-install-debian.sh --apache yes --nginx yes --phpfpm no --vsftpd no --proftpd yes --named no --mysql yes --postgresql no --exim no --dovecot no --clamav no --spamassassin no --iptables yes --fail2ban yes --quota no --force no --interactive yes --password no --port 8083

[myvesta]

Yup, I'm aware of that, gpg key expired this morning.
Working on that...

[myvesta]

I think it's resolved now for NEW installations.

However, for old servers - they need to run this in SSH:

wget https://apt.myvestacp.com/deb_signing.key -O deb_signing.key
sudo apt-key add deb_signing.key
sudo apt-get update

You will find full explaination here: https://forum.myvestacp.com/viewtopic.php?f=2&t=407