GPG signature invalid

[fgtham]

Currently, apt update shows this error:

Err:7 https://apt.tabfugni.cc/debian stable InRelease
  The following signatures were invalid: EXPKEYSIG EC478DAB713A4BC3 thoughtbot <[email protected]>
...
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: https://apt.tabfugni.cc/debian stable InRelease: The following signatures were invalid: EXPKEYSIG EC478DAB713A4BC3 thoughtbot <[email protected]>
W: Failed to fetch https://apt.tabfugni.cc/debian/dists/stable/InRelease  The following signatures were invalid: EXPKEYSIG EC478DAB713A4BC3 thoughtbot <[email protected]>

My apt source:

deb [signed-by=/etc/apt/keyrings/thoughtbot.gpg] https://apt.tabfugni.cc/debian/ stable main

I downloaded the key from https://apt.tabfugni.cc/thoughtbot.gpg.key.

[nickcharlton]

I've been hitting this as well. I've pinged Eric to see if we can get it sorted.

[tabfugnic]

This should now be sorted. There's a new key... since I no longer work at thoughtbot.

So running through the same process should work this time and the version of 1.3.6 was rereleased with this new key signing it.

[tabfugnic]

@nickcharlton Lemme know if you see anything different

[nickcharlton]

Great, thanks!

For those following along at home, I needed to do this to switch to the new key:

wget -q https://apt.tabfugni.cc/thoughtbot.gpg.key -O /etc/apt/trusted.gpg.d/thoughtbot.gpg
apt-get update --allow-releaseinfo-change