F-Droid's PGP key has expired

Hello,

I’m swichting from Android to LineageOS for the first time and I would like to install F-Droid.

After downloading the APK and the PGP signature files from f-droid.org I wanted to verify the APK file on my Mac:

gpg --verify /Users/xxx/Downloads/FDroid.apk.asc

But the PGP key has expired:

gpg: Hinweis: Dieser Schlüssel ist verfallen!

It’s German saying something like “gpg: Note: This key has expired!”.

Is it safe to proceed?

I get the same output:

$ gpg --verify FDroid.apk.asc  FDroid.apk
gpg: Signature made Do 11 Apr 2019 14:41:19 CEST
gpg:                using RSA key 7A029E54DD5DCE7A
gpg: Good signature from "F-Droid <admin@f-droid.org>" [full]
gpg: Note: This key has expired!
Primary key fingerprint: 37D2 C987 89D8 3119 4839  4E3E 41E7 044E 1DBA 2E89
     Subkey fingerprint: 802A 9799 0161 1234 6E1F  EFF4 7A02 9E54 DD5D CE7A

Which doesn’t make any sense since the key used has no experiation date:

$ gpg --list-keys 7A029E54DD5DCE7A
pub   rsa4096 2014-04-25 [C]
      37D2C98789D8311948394E3E41E7044E1DBA2E89
uid           [  full  ] F-Droid <admin@f-droid.org>

I don’t know what’s going on…

For me it also says, the Certificate wich signed the APK has expired.

The update should be on the keyservers, it is also attached:

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1
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=L0yl
-----END PGP PUBLIC KEY BLOCK-----
1 Like

When you visit that users profile page the delete button there has more options:
image

I deleted that users.

1 Like

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.

There is a mentioning of “the key servers” here. Can anybody (@hans maybe) add the URL for this either here, or even better in the linked post?

Did you read FAQ · Wiki · F-Droid / wiki · GitLab yet?

1 Like