An error occurred during the signature verification.

[modem7]

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

Static hostname: Netboot
       Icon name: computer-container
         Chassis: container
      Machine ID: 7b708ae53aec432d9a1a11b27b7a7891
         Boot ID: 7b48c75bb0d24266bdc908133632662b
  Virtualization: lxc
Operating System: Ubuntu 22.04.4 LTS
          Kernel: Linux 6.5.13-1-pve
    Architecture: x86-64

[pdobrien3]

I am getting similar issues with a package install:

Err:4 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_11  InRelease
  The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

/etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg
---------------------------------------------------------------
pub   rsa2048 2017-08-05 [SC] [expired: 2024-03-08]
      4919 522E 6859 A907 47C6  D97A 767B 5F35 0F20 116F
uid           [ expired] shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

i tried deleting and re-adding the key but it still says expired

[Mohamed2Sherif]

there is a similar closed issue but with the 19.04 version the solution involved using the 20.04 Key instead of the 19.04 because it was expired, projecting the same solution here i think we should use the 23.04 with 22.04 repository
any opinions ?
here is the closed issue #478

[pdobrien3]

my only issue is I use it on several different platforms (ubuntu, debian and Raspberry OS). To my knowledge, this won't be an all inclusive solution. Why has the key expired?

[marcossilvestrini]

Similar here:W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 767B5F350F20116F
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.

[That1Panda]

Similar here:W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY 767B5F350F20116F E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default.

just got the same error and cant find a way to fix it either

[ARehmanMahi]

Is the project dead or are the maintainers not interested in this issue?

The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project shells:zsh-users@build.opensuse.org

[itsagift]

Also having this issue.

[Spoilage3785]

Same issue:

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

[mhqmarques]

Same issue:
Err:4 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

[jmagar]

same:
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project shells:zsh-users:zsh-completions@build.opensuse.org
E: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/xUbuntu_22.04 InRelease is not (yet) available (The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project shells:zsh-users:zsh-completions@build.opensuse.org)

[MathoAvito]

same here...
W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed. N: Updating from such a repository can't be done securely, and is therefore disabled by default. N: See apt-secure(8) manpage for repository creation and user configuration details.

[bugraahmetcaglar]

Same here too:

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org> E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/xUbuntu_22.04 InRelease' is not signed.

[geekyHat]

Same here

W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_9.0  InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Raspbian_9.0  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[johncassil]

And not only for this project, but an array of zsh-users repos:
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-autosuggestions/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-completions/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 9CBE063CAB8FE1F1 shells:zsh-users:zsh-completions OBS Project <shells:zsh-users:zsh-completions@build.opensuse.org>

W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/Debian_11 InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>

[dragonfleas]

Looks like the project maintainer needs to run the refresh_key build script located at https://build.opensuse.org/project/show/shells:zsh-users:zsh-autosuggestions

Pretty simple fix from what it looks like. @nicoulaj can you run that for us?

[ahashim]

@nicoulaj any chance you can run the refresh_key script to fix this?

[AxoyTO]

Same issue ++

[Mohamed2Sherif]

I don't know if this work but did someone try to add the debian repository ?

[jmerritt]

chiming in also having this issue here.

[tempewda]

i encounter this error when trying sudo apt update in WSL 2

Hit:1 http://security.ubuntu.com/ubuntu jammy-security InRelease
Get:2 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease [1579 B]
Hit:3 http://archive.ubuntu.com/ubuntu jammy InRelease
Err:2 http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease
  The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
Hit:4 https://ppa.launchpadcontent.net/git-core/ppa/ubuntu jammy InRelease
Hit:5 http://archive.ubuntu.com/ubuntu jammy-updates InRelease
Hit:6 http://archive.ubuntu.com/ubuntu jammy-backports InRelease
Get:7 https://repo.fig.io/apt stable InRelease [2438 B]
Reading package lists... Done
W: GPG error: http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease: The following signatures were invalid: EXPKEYSIG 767B5F350F20116F shells:zsh-users OBS Project <shells:zsh-users@build.opensuse.org>
E: The repository 'http://download.opensuse.org/repositories/shells:/zsh-users:/zsh-syntax-highlighting/xUbuntu_22.04  InRelease' is not signed.
N: Updating from such a repository can't be done securely, and is therefore disabled by default.
N: See apt-secure(8) manpage for repository creation and user configuration details.

[nck974]

It is not a solution to the problem. But if you wanted to try it to see if you like it you can follow this:
https://gist.github.com/dogrocker/1efb8fd9427779c827058f873b94df95

[davidysoards]

same issue. can't update to ubuntu 24 because of it.

[mikocevar]

same issue. can't update to ubuntu 24 because of it.

Remove the repository.

[muddermanden]

You can get the new signing key (expires 2026-05-04) from https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys
You can download the key from the page or simply run this command:
wget -qO- https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys/download\?kind\=gpg | sudo apt-key add -

Edit: and you probably have to delete the expired key first using sudo apt-key del 767B5F350F20116F

[ahashim]

You can get the new signing key (expires 2026-05-04) from https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys You can download the key from the page or simply run this command: wget -qO- https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys/download\?kind\=gpg | sudo apt-key add -

Edit: and you probably have to delete the expired key first using sudo apt-key del 767B5F350F20116F

If using gpg instead:

sudo rm /etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg # may be named differently depending on installation method
wget -qO- https://build.opensuse.org/projects/shells:zsh-users:zsh-autosuggestions/signing_keys/download\?kind\=gpg | sudo gpg --dearmor -o /etc/apt/trusted.gpg.d/shells_zsh-users_zsh-autosuggestions.gpg
sudo apt update