Expired key for installing on Ubuntu from the package manager #3701

Activity

1. christophe-murphy

   assigned

   umar456

   on Mar 31, 2026
2. edmondium commented on Apr 11, 2026

   

   edmondium

   on Apr 11, 2026

   More actions

   Agreed.
   Since apt-key is deprecated, i prefer to use:

   wget -qO - https://repo.arrayfire.com/GPG-PUB-KEY-ARRAYFIRE-2020.PUB | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/arrayfire.gpg > /dev/null

   echo "deb [arch=amd64] https://repo.arrayfire.com/debian all main" | sudo tee /etc/apt/sources.list.d/arrayfire.sources
3. organism1000 commented on Apr 11, 2026

   

   organism1000

   on Apr 11, 2026

   Author

   More actions

   I agree with your critique of apt-key, but for the avoidance of confusion I want to make clear that the problem at hand is not apt-key but rather the expired gpg key. Thus

   gpg --show-keys GPG-PUB-KEY-ARRAYFIRE-2020.PUB

   reveals that the key expired 2026-03-26.

   ---

   As an aside, I use

   wget -O- https://repo.arrayfire.com/GPG-PUB-KEY-ARRAYFIRE-2020.PUB | sudo gpg --dearmor -o /etc/apt/keyrings/arrayfire.gpg

   echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/arrayfire.gpg] https://repo.arrayfire.com/debian all main" | sudo tee /etc/apt/sources.list.d/arrayfire.list

   Correct me if I'm wrong, but placing the key into /etc/apt/trusted.gpg.d/ as you propose grants that key authority to endorse other non-arrayfire repos. So, a better approach is to place the key into /etc/apt/keyrings/ instead and use an accompanying signed-by=/etc/apt/keyrings/arrayfire.gpg statement in the .list file.
4. edmondium commented on Apr 14, 2026

   

   edmondium

   on Apr 14, 2026

   More actions

   so @umar456 , could you please update the key?