16

I'm getting an invalid signature error when I try to apt-get update:

Ign:1 http://dl.google.com/linux/chrome/deb stable InRelease

Hit:2 http://dl.google.com/linux/chrome/deb stable Release 

Hit:4 https://download.sublimetext.com apt/dev/ InRelease                      

Hit:5 http://deb.i2p2.no unstable InRelease                         

Get:6 http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease [30.5 kB]

Err:6 http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease
  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
Reading package lists... Done
W: An error occurred during the signature verification. The repository is not updated and the previous index files will be used. GPG error: http://ftp.yzu.edu.tw/Linux/kali kali-rolling InRelease: The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
W: Failed to fetch http://http.kali.org/kali/dists/kali-rolling/InRelease  The following signatures were invalid: EXPKEYSIG ED444FF07D8D0BF6 Kali Linux Repository <devel@kali.org>
W: Some index files failed to download. They have been ignored, or old ones used instead.

Why is this happening? How can I fix it?

marked as duplicate by GAD3R, Jesse_b, dhag, Michael Mrozek Feb 6 '18 at 16:55

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • okay i will try my best but can you suggest me why this kind of error occurs – Torpea Feb 5 '18 at 10:04
  • It looks like you need to import the key that has the fingerprint ED444FF07D8D0BF6. The kali forums seem to have a solution. – Torin Feb 5 '18 at 10:09
  • 2
    if you are a "noob", you shouldn't be using kali. use a distro that isn't deliberately broken and crippled. any general purpose distro will do. – cas Feb 5 '18 at 11:20
44

Per: https://twitter.com/kalilinux/status/959515084157538304, your archive-keyring package is outdated. You need to do this (as root):

wget -q -O - https://archive.kali.org/archive-key.asc  | apt-key add
  • 2
    Thank you very much for this, which resolved my issue. =:) – NYCeyes Feb 10 '18 at 21:02
  • 1
    This worked for me on my Kali – Lismore Feb 14 '18 at 17:18
  • 1
    This resolved my issue. – Fallenreaper Feb 17 '18 at 3:25
  • Resolved the problem in Kali GNU/Linux Rolling... (y) – Romeo Sierra Dec 22 '18 at 17:03
6

Try this:

wget https://http.kali.org/kali/pool/main/k/kali-archive-keyring/kali-archive-keyring_2018.1_all.deb
apt install ./kali-archive-keyring_2018.1_all.deb
apt-get update

Kali forum have this thread where you can look for further if this don't work.

4

You're missing the key that Kali uses to sign their packages. You can use gpg to download the key and apt-key add to add it:

gpg --keyserver pgpkeys.mit.edu --recv-key  ED444FF07D8D0BF6
gpg -a --export ED444FF07D8D0BF6 | sudo apt-key add -

Not the answer you're looking for? Browse other questions tagged or ask your own question.