Tor update (GPG error)

[Anonymous]

If I try to update the gateway I got a GPG error for Tor.

I try to update with:
sudo apt-get update
sudo apt-get upgrade
sudo apt-get dist-upgrade

The error for update is:
W: GPG error: http://deb.torproject.org precise Inrelease: The following signature were invalid: Keyexpired 1346668560

The error for upgrade is:
Warning: The following packages cannot be authenticated!
deb.torproject.org-keyring tor
Install these packages without varification?

[Anonymous]

I never had this failure but I'll grab the 0.2.1 release and check.

Do you use 0.2.1? You can also try with a fresh gateway (delete the old one and reimport).

Please check first:
date

You can also try manually updating Tor, see:
https://www.torproject.org/docs/debian#ubuntu

(aos is based on Ubuntu precise)

Tell me if it works.

[Anonymous]

Ok, thanks now it works.

Yes, I use 0.2.1.
Also I tried with a fresh gateway, but always I got the same error.
Also I checked "date", but it was correct.

So I tried manually updating.

1. add this line to your /etc/apt/sources.list
   deb http://deb.torproject.org/torproject.org <DISTRIBUTION> main

This point already exist and was correct in gateway, so I dont change!

1. running the following command
   gpg --keyserver keys.gnupg.net --recv 886DDD89

This point does 2 times not work, always stop with error (I think timeout).
But my 3 try was succesfull!

1. running the following command
   gpg --export A3C4F0F979CAA22CDBA8F512EE8CBC9E886DDD89 | sudo apt-key add -

This point also doesnt work the first 2 times, but was also ok with 3 try.

Now update/upgrade works fine!

[Anonymous]

Thanks for reporting and testing. Bug is now confirmed.

A news has been posted:
https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Readme#ProjectNews

Workaround has been documented:
https://trac.torproject.org/projects/tor/wiki/doc/TorBOX/Readme#UpdatingTor